
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
dsh-kernel-kimi
Advanced tools
Kimi Code written in DSH form: the Kimi Code CLI 0.39.1 tool surface registered as DSH tools.
English | 中文
DSH runs on one simple idea: everything is a plugin. Models, tools, subagents — plug them together however you like.
So we did exactly that: we turned Kimi Code into a DSH plugin. The Kimi Code CLI 0.39.1 tool surface you already know — Read, Write, Edit, Glob, Grep, Bash, ReadMediaFile, WebSearch, FetchURL, TaskList, TaskOutput, TaskStop, WaitFor, TodoList, AskUserQuestion, Skill, Agent, AgentSwarm, CreateGoal, GetGoal, SetGoalBudget, UpdateGoal, CronCreate, CronList, CronDelete, ExitPlanMode, EnterPlanMode — is now a set of native DSH tools. Same names, same schemas, same behavior.
The payoff is simple: use the kimi CLI natively inside DSH — no different from opening Kimi Code itself. Every model stays in the environment it knows best — main agent or subagent, it feels like coming home.
WebSearch / FetchURL talk to the same Moonshot endpoints the Kimi CLI uses (api.kimi.com/coding/v1/search and /fetch) with the shared OAuth token. Distilled from Kimi Code CLI 0.39.1 (@moonshot-ai/kimi-code).
We differentially verified against the real kimi CLI: the same task on the same directory produces identical results, item by item.
lib/system-prompt.js carries the upstream Kimi Code CLI system.md (runtime
placeholders adapted to DSH); apply() registers it as the agent's sole
system-prompt section (complete: true + suppressRuntimeContext()).
lib/subagents.js ships the kernel's own subagent recipes — kimi-agent
(coder), kimi-explore, kimi-plan — each = the full system prompt with the
upstream roleAdditional block inserted. The mesh loads them and mounts this
plugin on each child with a config.tools whitelist.
Install the plugin into your profile with the official plugin command:
dsh plugin --profile web add dsh-kernel-kimi
GitHub also works (dsh plugin --profile web add github:oppnc/dsh-kernel-kimi) because lib/ ships in the repository.
This package is a plain plugin (no dsh.bundle declaration), so dsh plugin installs it as an inactive dependency — that is expected: the preset row below references it by name.
The kimi-kernel agent preset ships in dsh-kernel-mesh's presets/ directory. Copy it into the official user-preset root (or, if you run without the mesh, get the preset directory from the mesh repo):
dsh_home="${DSH_HOME:-$HOME/.dsh}"
cp -r "$dsh_home/profiles/web/node_modules/dsh-kernel-mesh/presets/kimi-kernel" "$dsh_home/.agent-presets/"
The preset already includes the kimi-surface row inside the planning group (so the plan tools can reach planMode); if you author your own preset, add it there:
- id: kimi-surface
name: dsh-kernel-kimi
Start a session on the kimi-kernel preset and pick the model kimi-kernel/k3-256k. Your main agent runs on the Kimi kernel with the full kimi tool surface.
MIT — see LICENSE.
FAQs
Kimi Code written in DSH form: the Kimi Code CLI 0.39.1 tool surface registered as DSH tools.
The npm package dsh-kernel-kimi receives a total of 22 weekly downloads. As such, dsh-kernel-kimi popularity was classified as not popular.
We found that dsh-kernel-kimi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.