dsh-workbench-ecs

Managing Alibaba Cloud ECS instances through an AI agent has long been blocked by two walls: instances without a public IP are simply unreachable, and raw command strings are fragile and hard to guard. dsh-workbench-ecs bridges that gap by driving the local Workbench CLI over the Alibaba Workbench backend channel, so connectivity works even on private networks. It exposes seven structured agent tools (list, exec, upload, download, diagnose, deploy, session) that cover the full inspect-diagnose-execute-verify loop without requiring public endpoints.

Safety is a first-class concern. Destructive commands (rm -rf, shutdown, mkfs, dd, and more) are intercepted by the Harness approval service and denied by default; they only proceed when explicitly allowed. Under the hood the plugin handles background jobs, serial batch execution across up to 20 instances, automatic disk spill for oversized output, and clean process-tree cancellation, so long-running tasks and large log dumps stay reliable. The built-in settings panel adds a CLI status card, an instance browser with 30-second auto-refresh, a one-click diagnostic dashboard with disk and memory gauges, a three-stage guarded deploy wizard, session management, and a full operation timeline for audit.

This plugin is aimed at developers and SREs who want their DeepSeek Harness agent to assist with day-to-day operations on Alibaba Cloud ECS (routine inspections, production debugging, config changes, log retrieval) using natural language instead of hand-typed workbench commands, especially in environments where instances sit behind private networks.