dsh-http

In DSH workflows, both the model and Code Mode frequently need to make HTTP calls—hitting external APIs, pulling data, debugging endpoints. Ad-hoc approaches either drag in heavy dependencies or return loosely formatted responses that are hard for code to consume reliably. dsh-http collapses all of this into a single zero-dependency http_request tool built on Node's built-in fetch. Every response is normalized into a clean, predictable JSON structure, so the model and calling code can read status codes, timing, and response bodies with a consistent field shape.

Core capabilities span all six HTTP methods (GET/POST/PUT/PATCH/DELETE/HEAD), with support for custom headers, raw body or auto-serialized JSON payloads, convenient Bearer and Basic auth parameters, and configurable timeout plus response-body truncation. The tool is designed to never throw: network errors, timeouts, and parameter conflicts all fold into { ok: false, error: { stage, message } }, while success returns status, durationMs, sizeBytes, and either a parsed json or truncated text field. Callers simply branch on ok—no try-catch needed.

If you want your model to call external REST APIs directly, or you are writing Code Mode scripts that need cross-service communication, dsh-http offers a lightweight, build-free, pure-ESM entry point. It does not include SSRF interception and only validates that the URL scheme is http/https, so use it only in trusted, single-user environments. Where intranet isolation matters, layer a tools/pre-execute upstream policy to gate URLs.