dsh-kit

A coding agent's most expensive failure is not a wrong edit — it is a wrong edit reported as done, with the cost landing on the human who reads the summary and believes it. When nobody is reviewing line by line, the agent quietly slips on formatting, hand-edits generated files and lockfiles, forgets to document a new environment variable, or ships a turn that no longer compiles. dsh-kit exists to close those gaps.

It ships eight independent plugins, four of which fill gaps no other DSH plugin addresses. autoformat runs the project's own formatter on every file the agent writes, but only if that formatter is actually configured in the repo — no surprise reformatting, no network fetch. artifact-guard blocks hand-edits to lockfiles, build output, and generated bindings using path rules plus file-header markers, then tells the agent the correct alternative action. env-drift reads back a file after a successful write, extracts every environment-variable access, and hands undocumented ones back to the agent while it still remembers why the variable exists. verify runs the project's typecheck at the turn boundary before the agent can declare success; a failure steers the agent back to work, and a capped round limit forces an honest report rather than a false one. The remaining four — checkpoint, secret-guard, git-context, and notify — round out the set and can be disabled independently if you prefer best-in-class alternatives.

Everything runs on documented DSH extension points with no harness patching, plain ESM with no build step, and a single runtime import from the DSH ecosystem. A missing formatter, a dead notifier, or a non-repo directory degrades to a log line, never to a lost tool call. Subprocess calls are bounded by a shared helper that enforces a timeout, an output cap, and a full process-tree kill. Built for developers who want the agent's done to mean it actually compiles, especially in multi-workspace deployments where each agent needs its own repo context.