dsh-git-workbench

Working inside DeepSeek Harness, developers often need a safe, structured Git and GitHub pull-request workflow that agents can invoke as model tools and humans can drive from a Web sidebar—without constantly hopping back to a terminal. dsh-git-workbench was built for exactly that gap.

It spans the full local Git pipeline—repository status, staged and unstaged diffs, commit history, branch creation and switching, fetch, pull, and push—and extends into GitHub pull-request listing, viewing, creation, editing, checkout, merging, and commenting. The same workflows are exposed through two channels: model-facing tools (git_status, git_commit, github_pr, and friends) for agent automation, and a Web sidebar panel for immediate, visual human operation.

Safety is a first-class design concern. All child processes are spawned with shell:false and arguments are never concatenated into a shell string; model-initiated mutations request approval by default and fail closed when an approval service is unavailable; text-file saves carry a SHA-256 check to prevent silent overwrites after concurrent edits; force push, git clean, and arbitrary Git or gh arguments are deliberately not exposed. It suits developers driving coding agents in DSH who want Git and GitHub workflows on par with Codex-class tools while still having a visual, sidebar-based interface.