dsh-aloof

Your team knowledge base and approval workflows live in Aloof, but your local AI assistant has no way to reach them. dsh-aloof bridges that gap into DeepSeek Harness so you can search shared docs, append post-mortems, read a colleague's pricing memo, or file a travel expense claim from your terminal with a single sentence, and see the change reflected in the web UI instantly.

On the knowledge-base side it exposes six tools: list accessible spaces, full-text search, browse directory structure, read a document, append or overwrite, and delete. On the approval side five tools cover listing pending tasks, available templates, reading form field definitions, submitting a claim, and approving or rejecting. Writes default to append mode, the revision number is read automatically for optimistic locking, and binary formats that cannot be parsed as text are reported clearly rather than fed to the model as garbled bytes.

The security model is two-layer: every local write passes through an approval gate with fail-closed semantics, and the server enforces a method-plus-route whitelist per token type so that approve/reject, space creation, and other irreversible actions always return 403 regardless of local confirmation. Space ACLs are identical to the web front-end; the plugin never widens access. It suits engineers or small teams who already maintain a shared library and approval chain in Aloof and want dsh as a fast, private local surface; one personal token per person, plug-and-play, independently revocable by an admin.