dsh-github-companion

AI agents that need to talk to GitHub often end up wrapping the gh CLI, which drags in PATH requirements, version drift, and sandbox incompatibility. dsh-github-companion sidesteps all of that by speaking REST and GraphQL natively over fetch, delivering a complete, zero-dependency GitHub integration that behaves identically on Windows, Linux, and macOS.

The plugin mounts as three cordis bundles: 33 registered tools grouped into read and discovery (always on), issue writes, git-data writes, repo creation, and local clone, each switchable with conservative defaults; an in-process permission gate that lets you pick from three modes and three actions to precisely scope write access; and an Actions cost guard that refuses pushes or releases while in-progress workflow runs exist, plus a per-tag cooldown to stop debugging loops from burning billed minutes. Multi-file pushes are a single atomic git-data round-trip, repo creation is always private, and the token never touches argv, the remote URL, or logs.

It is built for DeepSeek Harness users who want their agent to handle code summarisation, issue management, PR work, release cutting, and fork syncing inside the conversation, while fine-grained PAT permissions and the permission gate keep write risk tightly scoped.