dsh-sims-agent

Connecting to a SIMS business system inside DSH has often meant hand-rolled HTTP calls, access tokens scattered across config files, and shared logic that is opaque to auditors. dsh-sims-agent consolidates that pipeline into a single, bounded management module so security teams can issue a natural-language check command while credential, configuration, and template lifecycles are handled uniformly by the host.

Three core capabilities define the plugin: connection and identity verification, which appends /auth/me to the target address and validates the business envelope and identity fields before returning CONNECTED or one of seven explicit status codes such as CONFIGURATION_REQUIRED, AUTH_REQUIRED, or TIMEOUT; credential and configuration management, where tokens are stored through the host credential service and the settings page only indicates whether a token is present, with an empty input preserving the existing binding; and explicit user-template creation and removal, letting administrators generate an isolated assistant copy by identifier and name, remove unmodified copies directly, and defer modified templates to the native Agent Preset management page without ever guessing or overwriting existing defaults or root settings.

The plugin is best suited to administrators or DevSecOps teams already running DSH 0.1.2-rc.1 or later who need a compliance-friendly bridge to a SIMS service account. It intentionally does not provide attendance, inventory, OCR, write operations, token refresh, or automatic logins. Instead it focuses on connection visibility, minimal credential exposure, and template traceability, giving security auditors a clear, inspectable trail for every step of the integration.