dsh-policy-ledger

Official repository. The only official repository of this package, maintained by PerryLink. Same-name repositories under other accounts are not affiliated. Apache-2.0.

Status: KEEP — install-only companion. Not a duplicate of dsh-plugin-doctor: this answers "what is installed, what does the tarball contain, why did the install fail?" with a read-only capability snapshot, tarball assertions and install-log diagnosis. dsh-plugin-doctor does package-structure, cordis and sandbox-smoke checks. Use both when you need both questions answered.

Read-only install doctor: capability snapshot, tarball assert and install diagnosis.

Status: alpha / public-synthetic / partial / not counted / not GA. No customer evidence, customer data, or production-readiness claim.

English · 简体中文 · Español · Português · हिन्दी

dsh plugin --profile <profile> add dsh-policy-ledger

⭐ If this helps, a star makes it easier for the next person to find it. Nothing is gated behind it.

Workflow diagram for dsh-policy-ledger: local input, plugin, local output.

Workflow: local input → plugin → local output. No model call is required.

Real dsh-policy-ledger terminal output

Real local test run; no model or network call.

Install

Install and verify:

dsh plugin --profile <profile> add dsh-policy-ledger
dsh --profile <profile> --dump-config | grep dsh-policy-ledger

Uninstall:

dsh plugin --profile <profile> remove dsh-policy-ledger

Install channels

npm is the recommended channel; the others are for pinning or offline use.

npm (recommended): dsh plugin --profile <profile> add dsh-policy-ledger
git channel: dsh plugin --profile <profile> add github:PerryLink/dsh-policy-ledger
tarball: pnpm pack then dsh plugin --profile <profile> add ./dsh-policy-ledger-<version>.tgz
1024 store: npm i -g dsh1024 then dsh1024 plugin --profile <profile> add dsh-policy-ledger

What it does

Read-only install doctor: capability snapshot, tarball assert and install diagnosis. Runs locally on DeepSeek Harness. The table below is the exact tool surface; the examples use the real command surface.

Input and output stay local; nothing is uploaded.

Tools

Tool names and descriptions are kept in English to match the runtime output.

Tool	Purpose	Risk
`trust.capability_snapshot`	Extract declared capabilities and R0–R3 risk from a local npm `.tgz`: tools, bundle/client/bin/skill, build scripts, outbound hosts, credential references	R0 local read
`trust.diff`	Compare two stored snapshots: added/removed capabilities, risk escalation, blockers	R0
`trust.assert_tarball`	Re-read a tarball and compare it with a stored snapshot: pass/missing/extra/changed/unknown	R0
`install.diagnose`	Classify an install log into stage, root cause and three actions; return unknown rather than guess	R0
`install.probe`	Check disk free, write permission, proxy, optional registry RTT, node/pnpm	R0
`install.bundle`	Write a redacted incident ZIP (diagnosis + evidence lines)	R1 local write

Quick start

dsh plugin --profile <profile> add dsh-policy-ledger
dsh --profile <profile> --dump-config | grep dsh-policy-ledger

Examples

Fixture-backed example

Input: ACCEPTANCE.csv

Command: pnpm test

Acceptance row:

req_id	metric	threshold	actual	pass	source	counted
SKU-03-A01	能力快照抽取（3 包）	3/3	3	true	public/synthetic	false

This is a fixture-backed acceptance row, not a customer run; no output is invented.

Limits

Public/synthetic only; no customer data or customer evidence.
Alpha/partial, not counted, no GA or production-readiness claim.
No model or network call unless a tool explicitly says so.
The exact per-tool boundaries are in the table and ACCEPTANCE.csv.

Public sample

Public/synthetic fixtures live in fixtures/; ACCEPTANCE.csv records the public checks with counted=false.

Development

pnpm install --frozen-lockfile
pnpm build && pnpm lint && pnpm typecheck && pnpm test

Compatibility

Surface	Status
Harness	`dsh >=0.2.1-rc.3 <0.3.0`
Node	`>=24.9.0 <25`
Platforms	All; local files only
Data	No network, no model call, no upload

Permissions & data

Runs locally; no network, no model call, no upload.
Public/synthetic fixtures only; no customer data, no customer evidence.
Alpha/partial; not counted, no GA or production-readiness claim.

Sibling packages and family indexes: dsh-pim-lint · dsh-eval-pack

Each entry is a separate package with its own tool surface and version; install only the ones you need.

Package	Why it is relevant
`dsh-plugin-doctor`	Package structure, Cordis wiring and sandbox smoke checks.
`dsh-plugin-kit`	Plugin authoring and scaffolding kit.

Family

DSH domain plugin family (15 packages + 2 suites)

Package	npm
dsh-einvoice	npm
dsh-docx-redline	npm
dsh-policy-ledger	npm
dsh-ghg	npm
dsh-bankrec	npm
dsh-ap-three-way	npm
dsh-ifc-qto	npm
dsh-qms-capa	npm
dsh-legal-intake	npm
dsh-legal-clause	npm
dsh-freight-audit	npm
dsh-hs-candidate	npm
dsh-travel-recon	npm
dsh-pim-lint	npm
dsh-eval-pack	npm
dsh-finops-suite	npm
dsh-contract-suite	npm

Mainline family — 92 current install specs

Package	npm
dsh-aqua-input-check	npm
dsh-archive-check	npm
dsh-bid-ca-precheck	npm
dsh-bid-qual-check	npm
dsh-contract-stance	npm
dsh-customs-doc-check	npm
dsh-demurrage-ledger	npm
dsh-drill-script-check	npm
dsh-eia-guide-check	npm
dsh-emergency-plan	npm
dsh-essay-rubric-check	npm
dsh-evidence-check	npm
dsh-export-ctl-check	npm
dsh-fmea-table-check	npm
dsh-forecast-penalty	npm
dsh-gongwen-flow-check	npm
dsh-gongwen-word-check	npm
dsh-guard-plan-qc	npm
dsh-hazchem-check	npm
dsh-hazplan-check	npm
dsh-hidden-risk-map	npm
dsh-hs-classify	npm
dsh-icd-rule-check	npm
dsh-lawcite-adapter	npm
dsh-lc-doc-check	npm
dsh-learning-gap-check	npm
dsh-medrec-qc	npm
dsh-nsfc-form-check	npm
dsh-nurse-record-check	npm
dsh-origin-rvc-check	npm
dsh-ota-review-check	npm
dsh-paper-doc-adapter	npm
dsh-permit-report-check	npm
dsh-pipeline-check	npm
dsh-pleading-draft	npm
dsh-policy-brief-draft	npm
dsh-power-loss-split	npm
dsh-power-ticket-check	npm
dsh-ppap-check	npm
dsh-protest-deadline	npm
dsh-railway-window	npm
dsh-repair-order-qc	npm
dsh-review-reply-check	npm
dsh-rulefile-check	npm
dsh-safety-brief-check	npm
dsh-site-log-check	npm
dsh-soe-decision-check	npm
dsh-soilwater-check	npm
dsh-sop-sync-check	npm
dsh-spc-gbt-adapter	npm
dsh-tender-extract	npm
dsh-tender-matrix	npm
dsh-warranty-calc	npm
dsh-auto-review	npm
dsh-autotier	npm
dsh-budget	npm
dsh-cert-mcp	npm
dsh-checkpoint-rewind	npm
dsh-claude-move	npm
dsh-click	npm
dsh-composer-history	npm
dsh-data-quality	npm
dsh-defend	npm
dsh-doublecheck	npm
dsh-draw	npm
dsh-fast	npm
dsh-fund-research	npm
dsh-industry-research	npm
dsh-laya	npm
dsh-library	npm
dsh-local-ai	npm
dsh-lsp-actions	npm
dsh-mask	npm
dsh-mcp-panel	npm
dsh-memento	npm
dsh-observe	npm
dsh-output-styles	npm
dsh-permission-rules	npm
dsh-plugin-guide	npm
dsh-plugin-upgrade	npm
dsh-reach	npm
dsh-research-report	npm
dsh-score	npm
dsh-session-sync	npm
dsh-talk	npm
dsh-test-drive	npm
dsh-translate	npm
	npm
	npm
	npm
	npm
	npm

License

Apache-2.0. See LICENSE, NOTICE, THIRD-PARTY-NOTICES.

dsh-policy-ledger

Instalar

README