
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@qing3a/dsh-event-auditor
Advanced tools
Harness 事件流审计面板:观察事件类型、分发模式、计数与最近事件,帮助插件作者理解 harness 内部发生了什么
Harness 事件流审计面板:观察事件类型、分发模式、计数与最近事件,帮助插件作者理解 DeepSeek Harness 内部发生了什么。
状态:✅ 已在本地 DSH 源码环境验证运行(2026-08-14)。v0.3:settings 热改 + headless dump + waterfall 运行时捕获实证(74 事件/12 waterfall 全部捕获,mock-llm 方案)。
emit 事件(agent 生命周期 / 会话 / 工具 / subagent / 配置)DSH_EVENT_AUDIT_DUMP)/audit 面板(纯静态页)+ /api/audit/events JSON 接口(支持 ?since= 增量)# 开发模式(需 Node >= 22 + pnpm)
git clone https://github.com/your-handle/dsh-event-auditor.git
cd dsh-event-auditor && pnpm install && pnpm build
cd <path-to-deepseek-harness>
dsh plugin --profile <profile> add link:$(pwd)/dsh-event-auditor
dsh --profile <profile>
# 打开 http://localhost:<port>/audit
dsh plugin --profile <profile> remove @qing3a/dsh-event-auditor
| 键 | 默认 | 说明 |
|---|---|---|
enabled | true | 总开关 |
bufferSize | 500 | 环形缓冲上限 |
truncateAt | 4096 | 单条参数序列化上限(字节) |
groups.agent/session/tools/subagent | true | 分组开关 |
groups.config | false | 配置类事件默认关闭 |
groups.waterfall | true | waterfall 事件观察(v0.2) |
事件清单与声明位置:docs/event-producer-consumer.zh.md(仓库生成内容)。
waterfall 事件(tools/execute、approval/request 等)v0.2 已启用,签名逐条从源码确认(next 均无参),观察性透传 next()。
MIT
FAQs
Harness 事件流审计面板:观察事件类型、分发模式、计数与最近事件,帮助插件作者理解 harness 内部发生了什么
The npm package @qing3a/dsh-event-auditor receives a total of 25 weekly downloads. As such, @qing3a/dsh-event-auditor popularity was classified as not popular.
We found that @qing3a/dsh-event-auditor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.