
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@ruihuahe/dsh-agent-codex
Advanced tools
中文 | English
@ruihuahe/dsh-agent-codex supplies the version-locked static Codex coding-tool contract used by the DeepSeek Harness Codex mode preset. Installing this package alone changes no global runtime state: the preset mounts individual exports in one agent scope, so Agent Manager can inspect and toggle each declared row after a user copies the system preset.
The catalog is derived from OpenAI Codex revision 136f75e7b7fca7d327fe0f23368ed5482804ea5f, under Apache-2.0. Exact source paths and the DSH compilation boundary are in SOURCES.md; the required attribution is in NOTICE. This package's own code is MIT-licensed.
The static catalog includes exec_command, write_stdin, apply_patch, view_image, update_plan, request_user_input, request_permissions, the four subagent controls, and the three MCP resource operations. Each name has an independent export and preset agentTool row.
The model sees only tools that the running DSH host truly registers:
view_image needs attachments and an image-capable model route.mcpResources service; ordinary MCP callable tools alone do not fabricate resource support.apply_patch keeps the Codex patch grammar and add/update/delete effects, but DSH transports it as JSON { "patch": "..." }, not a freeform call. It is registered only on a host that exposes the versioned public single-file deletion seam, so every directive remains inside the same observed-state and sandbox policy as ordinary filesystem tools.
write_stdin follows the public ShellProcess contract. It can poll output with empty input and sends Ctrl-C as a process-tree kill; the current host seam does not expose arbitrary interactive stdin writes, which therefore fail explicitly.
The spawn-agent export accepts a host-owned provider configuration, defaulting to spawn:
- id: spawn-agent
name: '@ruihuahe/dsh-agent-codex/spawn-agent'
config:
provider: spawn
LLM provider and model selection remain owned by DeepSeek Harness Model Center; this package does not configure either.
pnpm run typecheck
pnpm test
pnpm run build
pnpm run pack:check
FAQs
Static Codex CLI coding-agent tools for DeepSeek Harness
The npm package @ruihuahe/dsh-agent-codex receives a total of 0 weekly downloads. As such, @ruihuahe/dsh-agent-codex popularity was classified as not popular.
We found that @ruihuahe/dsh-agent-codex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.