net-debug

Most fetch-and-search utilities in agent pipelines flatten a page into a Markdown summary, which is great for reading but the wrong tool when you need to see the actual wire exchange: exact method, custom headers, redirect chain, response encoding, timing, and byte size. net-debug fills that gap for DeepSeek Harness (dsh) by providing a general-purpose HTTP client whose every response is a structured, inspectable object rather than a flattened document.

Security is designed in, not bolted on. SSRF protection ships enabled by default and covers loopback, RFC 1918 private ranges, CGNAT, link-local (including cloud-metadata endpoints), multicast, and every other IANA-reserved block. The guard resolves all A/AAAA records before allowing a connection, re-checks on each redirect hop, catches curl-style decimal and hex IP encodings, and honours a flexible whitelist of exact hostnames, wildcards, IP literals, or CIDR ranges.

A per-session ring buffer records every exchange with its request snapshot, capped response, timing, size, and any error code, so you can list, inspect, or replay past calls through the same SSRF pipeline. On the response side the plugin validates JSON bodies, optionally emits a HAR 1.2 log, and enforces a hard byte cap to keep oversized payloads from blowing up the model context. Three model-facing tools (http_request, http_history, http_rules) and a zero-dependency CLI give you one engine whether you are orchestrating through dsh or scripting shell pipelines.

Built for engineers who debug APIs, run integration or security tests, audit proxy behaviour, or orchestrate agents that need raw HTTP semantics instead of another layer of abstraction.