@wzwjustdoit/dsh-plugin-git-bash 0.0.0-stage → 0.4.0

package/native/vendor/detours/uimports.cpp

@@ -0,0 +1,269 @@
+//////////////////////////////////////////////////////////////////////////////
+//
+//  Add DLLs to a module import table (uimports.cpp of detours.lib)
+//
+//  Microsoft Research Detours Package, Version 4.0.1
+//
+//  Copyright (c) Microsoft Corporation.  All rights reserved.
+//
+//  Note that this file is included into creatwth.cpp one or more times
+//  (once for each supported module format).
+//
+
+#if DETOURS_VERSION != 0x4c0c1   // 0xMAJORcMINORcPATCH
+#error detours.h version mismatch
+#endif
+
+// UpdateImports32 aka UpdateImports64
+static BOOL UPDATE_IMPORTS_XX(HANDLE hProcess,
+                              HMODULE hModule,
+                              __in_ecount(nDlls) LPCSTR *plpDlls,
+                              DWORD nDlls)
+{
+    BOOL fSucceeded = FALSE;
+    DWORD cbNew = 0;
+
+    BYTE * pbNew = NULL;
+    DWORD i;
+    SIZE_T cbRead;
+    DWORD n;
+
+    PBYTE pbModule = (PBYTE)hModule;
+
+    IMAGE_DOS_HEADER idh;
+    ZeroMemory(&idh, sizeof(idh));
+    if (!ReadProcessMemory(hProcess, pbModule, &idh, sizeof(idh), &cbRead)
+        || cbRead < sizeof(idh)) {
+
+        DETOUR_TRACE(("ReadProcessMemory(idh@%p..%p) failed: %d\n",
+                      pbModule, pbModule + sizeof(idh), GetLastError()));
+
+      finish:
+        if (pbNew != NULL) {
+            delete[] pbNew;
+            pbNew = NULL;
+        }
+        return fSucceeded;
+    }
+
+    IMAGE_NT_HEADERS_XX inh;
+    ZeroMemory(&inh, sizeof(inh));
+
+    if (!ReadProcessMemory(hProcess, pbModule + idh.e_lfanew, &inh, sizeof(inh), &cbRead)
+        || cbRead < sizeof(inh)) {
+        DETOUR_TRACE(("ReadProcessMemory(inh@%p..%p) failed: %d\n",
+                      pbModule + idh.e_lfanew,
+                      pbModule + idh.e_lfanew + sizeof(inh),
+                      GetLastError()));
+        goto finish;
+    }
+
+    if (inh.OptionalHeader.Magic != IMAGE_NT_OPTIONAL_HDR_MAGIC_XX) {
+        DETOUR_TRACE(("Wrong size image (%04x != %04x).\n",
+                      inh.OptionalHeader.Magic, IMAGE_NT_OPTIONAL_HDR_MAGIC_XX));
+        SetLastError(ERROR_INVALID_BLOCK);
+        goto finish;
+    }
+
+    // Zero out the bound table so loader doesn't use it instead of our new table.
+    inh.BOUND_DIRECTORY.VirtualAddress = 0;
+    inh.BOUND_DIRECTORY.Size = 0;
+
+    // Find the size of the mapped file.
+    DWORD dwSec = idh.e_lfanew +
+        FIELD_OFFSET(IMAGE_NT_HEADERS_XX, OptionalHeader) +
+        inh.FileHeader.SizeOfOptionalHeader;
+
+    for (i = 0; i < inh.FileHeader.NumberOfSections; i++) {
+        IMAGE_SECTION_HEADER ish;
+        ZeroMemory(&ish, sizeof(ish));
+
+        if (!ReadProcessMemory(hProcess, pbModule + dwSec + sizeof(ish) * i, &ish,
+                               sizeof(ish), &cbRead)
+            || cbRead < sizeof(ish)) {
+
+            DETOUR_TRACE(("ReadProcessMemory(ish@%p..%p) failed: %d\n",
+                          pbModule + dwSec + sizeof(ish) * i,
+                          pbModule + dwSec + sizeof(ish) * (i + 1),
+                          GetLastError()));
+            goto finish;
+        }
+
+        DETOUR_TRACE(("ish[%d] : va=%08x sr=%d\n", i, ish.VirtualAddress, ish.SizeOfRawData));
+
+        // If the file didn't have an IAT_DIRECTORY, we assign it...
+        if (inh.IAT_DIRECTORY.VirtualAddress == 0 &&
+            inh.IMPORT_DIRECTORY.VirtualAddress >= ish.VirtualAddress &&
+            inh.IMPORT_DIRECTORY.VirtualAddress < ish.VirtualAddress + ish.SizeOfRawData) {
+
+            inh.IAT_DIRECTORY.VirtualAddress = ish.VirtualAddress;
+            inh.IAT_DIRECTORY.Size = ish.SizeOfRawData;
+        }
+    }
+
+    DETOUR_TRACE(("     Imports: %p..%p\n",
+                  (DWORD_PTR)pbModule + inh.IMPORT_DIRECTORY.VirtualAddress,
+                  (DWORD_PTR)pbModule + inh.IMPORT_DIRECTORY.VirtualAddress +
+                  inh.IMPORT_DIRECTORY.Size));
+
+    DWORD nOldDlls = inh.IMPORT_DIRECTORY.Size / sizeof(IMAGE_IMPORT_DESCRIPTOR);
+    DWORD obRem = sizeof(IMAGE_IMPORT_DESCRIPTOR) * nDlls;
+    DWORD obOld = obRem + sizeof(IMAGE_IMPORT_DESCRIPTOR) * nOldDlls;
+    DWORD obTab = PadToDwordPtr(obOld);
+    DWORD obDll = obTab + sizeof(DWORD_XX) * 4 * nDlls;
+    DWORD obStr = obDll;
+    cbNew = obStr;
+    for (n = 0; n < nDlls; n++) {
+        cbNew += PadToDword((DWORD)strlen(plpDlls[n]) + 1);
+    }
+
+    _Analysis_assume_(cbNew >
+                      sizeof(IMAGE_IMPORT_DESCRIPTOR) * (nDlls + nOldDlls)
+                      + sizeof(DWORD_XX) * 4 * nDlls);
+    pbNew = new BYTE [cbNew];
+    if (pbNew == NULL) {
+        DETOUR_TRACE(("new BYTE [cbNew] failed.\n"));
+        goto finish;
+    }
+    ZeroMemory(pbNew, cbNew);
+
+    PBYTE pbBase = pbModule;
+    PBYTE pbNext = pbBase
+        + inh.OptionalHeader.BaseOfCode
+        + inh.OptionalHeader.SizeOfCode
+        + inh.OptionalHeader.SizeOfInitializedData
+        + inh.OptionalHeader.SizeOfUninitializedData;
+    if (pbBase < pbNext) {
+        pbBase = pbNext;
+    }
+    DETOUR_TRACE(("pbBase = %p\n", pbBase));
+
+    PBYTE pbNewIid = FindAndAllocateNearBase(hProcess, pbBase, cbNew);
+    if (pbNewIid == NULL) {
+        DETOUR_TRACE(("FindAndAllocateNearBase failed.\n"));
+        goto finish;
+    }
+
+    PIMAGE_IMPORT_DESCRIPTOR piid = (PIMAGE_IMPORT_DESCRIPTOR)pbNew;
+    DWORD_XX *pt;
+
+    DWORD obBase = (DWORD)(pbNewIid - pbModule);
+    DWORD dwProtect = 0;
+
+    if (inh.IMPORT_DIRECTORY.VirtualAddress != 0) {
+        // Read the old import directory if it exists.
+        DETOUR_TRACE(("IMPORT_DIRECTORY perms=%x\n", dwProtect));
+
+        if (!ReadProcessMemory(hProcess,
+                               pbModule + inh.IMPORT_DIRECTORY.VirtualAddress,
+                               &piid[nDlls],
+                               nOldDlls * sizeof(IMAGE_IMPORT_DESCRIPTOR), &cbRead)
+            || cbRead < nOldDlls * sizeof(IMAGE_IMPORT_DESCRIPTOR)) {
+
+            DETOUR_TRACE(("ReadProcessMemory(imports) failed: %d\n", GetLastError()));
+            goto finish;
+        }
+    }
+
+    for (n = 0; n < nDlls; n++) {
+        HRESULT hrRet = StringCchCopyA((char*)pbNew + obStr, cbNew - obStr, plpDlls[n]);
+        if (FAILED(hrRet)) {
+            DETOUR_TRACE(("StringCchCopyA failed: %d\n", GetLastError()));
+            goto finish;
+        }
+
+        // After copying the string, we patch up the size "??" bits if any.
+        hrRet = ReplaceOptionalSizeA((char*)pbNew + obStr,
+                                     cbNew - obStr,
+                                     DETOURS_STRINGIFY(DETOURS_BITS_XX));
+        if (FAILED(hrRet)) {
+            DETOUR_TRACE(("ReplaceOptionalSizeA failed: %d\n", GetLastError()));
+            goto finish;
+        }
+
+        DWORD nOffset = obTab + (sizeof(DWORD_XX) * (4 * n));
+        piid[n].OriginalFirstThunk = obBase + nOffset;
+        pt = ((DWORD_XX*)(pbNew + nOffset));
+        pt[0] = IMAGE_ORDINAL_FLAG_XX + 1;
+        pt[1] = 0;
+
+        nOffset = obTab + (sizeof(DWORD_XX) * ((4 * n) + 2));
+        piid[n].FirstThunk = obBase + nOffset;
+        pt = ((DWORD_XX*)(pbNew + nOffset));
+        pt[0] = IMAGE_ORDINAL_FLAG_XX + 1;
+        pt[1] = 0;
+        piid[n].TimeDateStamp = 0;
+        piid[n].ForwarderChain = 0;
+        piid[n].Name = obBase + obStr;
+
+        obStr += PadToDword((DWORD)strlen(plpDlls[n]) + 1);
+    }
+    _Analysis_assume_(obStr <= cbNew);
+
+#if 0
+    for (i = 0; i < nDlls + nOldDlls; i++) {
+        DETOUR_TRACE(("%8d. Look=%08x Time=%08x Fore=%08x Name=%08x Addr=%08x\n",
+                      i,
+                      piid[i].OriginalFirstThunk,
+                      piid[i].TimeDateStamp,
+                      piid[i].ForwarderChain,
+                      piid[i].Name,
+                      piid[i].FirstThunk));
+        if (piid[i].OriginalFirstThunk == 0 && piid[i].FirstThunk == 0) {
+            break;
+        }
+    }
+#endif
+
+    if (!WriteProcessMemory(hProcess, pbNewIid, pbNew, obStr, NULL)) {
+        DETOUR_TRACE(("WriteProcessMemory(iid) failed: %d\n", GetLastError()));
+        goto finish;
+    }
+
+    DETOUR_TRACE(("obBaseBef = %08x..%08x\n",
+                  inh.IMPORT_DIRECTORY.VirtualAddress,
+                  inh.IMPORT_DIRECTORY.VirtualAddress + inh.IMPORT_DIRECTORY.Size));
+    DETOUR_TRACE(("obBaseAft = %08x..%08x\n", obBase, obBase + obStr));
+
+    // If the file doesn't have an IAT_DIRECTORY, we create it...
+    if (inh.IAT_DIRECTORY.VirtualAddress == 0) {
+        inh.IAT_DIRECTORY.VirtualAddress = obBase;
+        inh.IAT_DIRECTORY.Size = cbNew;
+    }
+
+    inh.IMPORT_DIRECTORY.VirtualAddress = obBase;
+    inh.IMPORT_DIRECTORY.Size = cbNew;
+
+    /////////////////////// Update the NT header for the new import directory.
+    //
+    if (!DetourVirtualProtectSameExecuteEx(hProcess, pbModule, inh.OptionalHeader.SizeOfHeaders,
+                                           PAGE_EXECUTE_READWRITE, &dwProtect)) {
+        DETOUR_TRACE(("VirtualProtectEx(inh) write failed: %d\n", GetLastError()));
+        goto finish;
+    }
+
+    inh.OptionalHeader.CheckSum = 0;
+
+    if (!WriteProcessMemory(hProcess, pbModule, &idh, sizeof(idh), NULL)) {
+        DETOUR_TRACE(("WriteProcessMemory(idh) failed: %d\n", GetLastError()));
+        goto finish;
+    }
+    DETOUR_TRACE(("WriteProcessMemory(idh:%p..%p)\n", pbModule, pbModule + sizeof(idh)));
+
+    if (!WriteProcessMemory(hProcess, pbModule + idh.e_lfanew, &inh, sizeof(inh), NULL)) {
+        DETOUR_TRACE(("WriteProcessMemory(inh) failed: %d\n", GetLastError()));
+        goto finish;
+    }
+    DETOUR_TRACE(("WriteProcessMemory(inh:%p..%p)\n",
+                  pbModule + idh.e_lfanew,
+                  pbModule + idh.e_lfanew + sizeof(inh)));
+
+    if (!VirtualProtectEx(hProcess, pbModule, inh.OptionalHeader.SizeOfHeaders,
+                          dwProtect, &dwProtect)) {
+        DETOUR_TRACE(("VirtualProtectEx(idh) restore failed: %d\n", GetLastError()));
+        goto finish;
+    }
+
+    fSucceeded = TRUE;
+    goto finish;
+}

package/package.json

@@ -1,6 +1,122 @@
 {
   "name": "@wzwjustdoit/dsh-plugin-git-bash",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.4.0",
+  "description": "Use Git for Windows Bash as the default DSH shell with restricted-mode support",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "plugin",
+    "git-bash",
+    "sandbox",
+    "windows"
+  ],
+  "homepage": "https://github.com/wzwjustdoit/dsh-git-bash#readme",
+  "bugs": {
+    "url": "https://github.com/wzwjustdoit/dsh-git-bash/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wzwjustdoit/dsh-git-bash.git"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./agents": {
+      "types": "./lib/agents.d.ts",
+      "default": "./lib/agents.js"
+    },
+    "./discovery": {
+      "types": "./lib/discovery.d.ts",
+      "default": "./lib/discovery.js"
+    },
+    "./client": "./client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "client.js",
+    "native/bin/win32-x64/msys-token-guard.exe",
+    "native/bin/win32-x64/msys-token-guard-hook.dll",
+    "native/CMakeLists.txt",
+    "native/*.cpp",
+    "native/vendor/detours",
+    "scripts/build-native.mjs",
+    "scripts/dsh.web.startup",
+    "scripts/dsh.desktop.startup",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-tool",
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-api-remotes"
+      ]
+    }
+  },
+  "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('lib', { recursive: true, force: true })\"",
+    "build:native": "node scripts/build-native.mjs",
+    "build": "pnpm run build:native && pnpm run clean && tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "pnpm run build && node --test",
+    "pack:check": "npm pack --dry-run",
+    "prepack": "pnpm run build",
+    "prepublishOnly": "pnpm test"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.0",
+    "@deepseek-ai/dsh-bash-local": "^0.2.0-rc.0",
+    "@deepseek-ai/dsh-sandbox": "^0.2.0-rc.0",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.2.0-rc.0",
+    "@deepseek-ai/dsh-shell": "^0.2.0-rc.0",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.0",
+    "@deepseek-ai/dsh-tools": "^0.2.0-rc.0"
+  },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "3.18.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-bash-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-windows-acl": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@types/node": "24.10.1",
+    "typescript": "5.9.3"
+  },
+  "packageManager": "pnpm@11.9.0"
+}

package/scripts/build-native.mjs

@@ -0,0 +1,35 @@
+import { existsSync, mkdirSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { spawnSync } from "node:child_process";
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const sourceDir = resolve(root, "native");
+const buildDir = resolve(sourceDir, "build", "win32-x64");
+const executable = resolve(sourceDir, "bin", "win32-x64", "msys-token-guard.exe");
+const hook = resolve(sourceDir, "bin", "win32-x64", "msys-token-guard-hook.dll");
+
+function run(command, args) {
+  const result = spawnSync(command, args, { cwd: root, stdio: "inherit", windowsHide: true });
+  if (result.error) throw result.error;
+  if (result.status !== 0) process.exit(result.status ?? 1);
+}
+
+if (process.platform !== "win32") {
+  if (!existsSync(executable) || !existsSync(hook)) {
+    throw new Error("prebuilt token guard artifacts are missing: " + executable + ", " + hook);
+  }
+  console.log("using prebuilt token guard artifacts: " + executable + ", " + hook);
+  process.exit(0);
+}
+if (process.arch !== "x64") {
+  throw new Error("native token guard currently supports win32-x64, received " + process.platform + "-" + process.arch);
+}
+
+mkdirSync(buildDir, { recursive: true });
+run("cmake", ["--fresh", "-S", sourceDir, "-B", buildDir, "-A", "x64"]);
+run("cmake", ["--build", buildDir, "--config", "Release", "--target", "msys-token-guard", "msys-token-guard-hook"]);
+if (!existsSync(executable) || !existsSync(hook)) {
+  throw new Error("native build did not produce " + executable + " and " + hook);
+}
+console.log("built " + executable + " and " + hook);

package/scripts/dsh.desktop.startup/README.md

@@ -0,0 +1,27 @@
+# dsh.desktop.startup —— 经 Git Bash 启动 DSH Desktop (Electron GUI 程序)
+
+## 为什么需要它
+
+DSH 的 Windows ACL sandbox 需要 DSH 主进程的 token **default DACL 含当前用户 SID**。由 `explorer.exe` / `cmd.exe` 直接派生的进程通常不含用户 SID，会导致受限模式（`read-only` / `workspace-write`）所有命令 `exit 125`：
+
+```text
+msys-token-guard: OpenProcessToken(child default DACL) failed (Win32 5)     # exit 125
+```
+
+从 Git Bash 启动可以让 MSYS2 把该 DACL 重置为含用户 SID 的标准形状，受限模式随即恢复正常。
+
+## 文件
+
+| 文件 | 用途 |
+| --- | --- |
+| `dsh.desktop.startup.gitbash.vbs` | 隐藏窗口启动 |
+| `dsh.desktop.startup.gitbash.bat` | 前台启动 / 排查问题 |
+| `dsh.desktop.startup.gitbash.sh` | 实际启动逻辑，由 `.bat` 调用 |
+
+## 用法
+
+1. 把**整个目录**复制到任意位置（脚本内部按相对路径互相引用，可整体移动）。
+2. 设置环境变量 `DSH_GIT_BASH_PATH`，指向你日常使用的 Git for Windows 的 `bash.exe`。`.bat` 会在变量缺失或路径不存在时报错退出。
+3. 需要时设置 `DSH_DESKTOP_EXE`，指向 `DeepSeek Harness.exe` 的绝对路径。路径可用 Windows 形式或 `/c/...` 形式。
+4. 双击 `dsh.desktop.startup.gitbash.bat` 或 `dsh.desktop.startup.gitbash.vbs` 启动
+

package/scripts/dsh.desktop.startup/dsh.desktop.startup.gitbash.bat

@@ -0,0 +1,28 @@
+@echo off
+setlocal
+
+set "THE_SH_FILE=%~dp0dsh.desktop.startup.gitbash.sh"
+set "THE_SH_FILE_2=%THE_SH_FILE:\=/%"
+
+if not defined DSH_GIT_BASH_PATH (
+    echo [dsh.desktop.startup.gitbash.bat]  the env var  DSH_GIT_BASH_PATH  is not defined.
+    echo [dsh.desktop.startup.gitbash.bat]  REQUIRED: You MUST manually set env var  DSH_GIT_BASH_PATH  to your Git for Windows bash.exe, e.g. C:\Program Files\Git\bin\bash.exe
+    exit /b 1
+)
+if not exist "%DSH_GIT_BASH_PATH%" (
+    echo [dsh.desktop.startup.gitbash.bat]  Git Bash Not Found:  DSH_GIT_BASH_PATH : %DSH_GIT_BASH_PATH%
+    exit /b 1
+)
+
+if not exist "%THE_SH_FILE%" (
+    echo [dsh.desktop.startup.gitbash.bat]  .sh File Not Found: %THE_SH_FILE%
+    exit /b 1
+)
+
+"%DSH_GIT_BASH_PATH%" --login "%THE_SH_FILE_2%" %*
+set "THE_RETURN_CODE=%ERRORLEVEL%"
+
+if not "%THE_RETURN_CODE%"=="0" (
+    echo [dsh.desktop.startup.gitbash.bat]  bash exited with code: %THE_RETURN_CODE%
+)
+endlocal & exit /b %THE_RETURN_CODE%

package/scripts/dsh.desktop.startup/dsh.desktop.startup.gitbash.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# =============================================================================
+# dsh.desktop.startup.gitbash.sh — 经 Git Bash 启动 DSH Desktop (Electron GUI 程序)
+#
+# 【为什么必须经过 Git Bash 启动】
+#   DSH 的 Windows ACL 沙箱在受限模式(read-only / workspace-write)下, 会用
+#   msys-token-guard.exe 在受限 token 内启动 Git Bash。guard 需要以
+#       TOKEN_QUERY | TOKEN_ADJUST_DEFAULT
+#   打开子进程 token, 而 TOKEN_ADJUST_DEFAULT 属于"写"类权限, 在
+#   WRITE_RESTRICTED token 下必须两趟权限检查都通过。
+#
+#   若 DSH 主进程 token 的 default DACL 缺当前用户 SID(由 explorer.exe /
+#   cmd.exe 派生的进程往往如此), 第一趟检查就会失败:
+#       msys-token-guard: OpenProcessToken(child default DACL) failed (Win32 5)
+#   后果是受限模式下所有命令 exit 125 / SandboxUnavailableError。
+#
+#   MSYS2 运行时在 bash.exe 启动时, 会把自己的 token default DACL 重置为含用户
+#   SID 的标准形状 [用户 ALL, Administrators ALL, SYSTEM ALL]。凡是从 bash 派生的
+#   进程都继承这个形状, 沙箱随即恢复正常。
+#   详见 https://github.com/wzwjustdoit/dsh-git-bash 的 README "启动方式" 一节。
+#
+# 【用法】
+#   双击同目录的 dsh.desktop.startup.gitbash.bat 或 dsh.desktop.startup.gitbash.vbs
+#
+# =============================================================================
+
+set -euo pipefail
+
+# Desktop 可执行文件位置。想换安装位置就改这里, 或事先设置 DSH_DESKTOP_EXE。
+DSH_DESKTOP_EXE="${DSH_DESKTOP_EXE:-/c/Program Files/DeepSeek Harness/DeepSeek Harness.exe}"
+
+echo "[dsh.desktop.startup.gitbash.sh]  bash              = $BASH"
+echo "[dsh.desktop.startup.gitbash.sh]  msystem           = $MSYSTEM"
+echo "[dsh.desktop.startup.gitbash.sh]  DSH_GIT_BASH_PATH = $DSH_GIT_BASH_PATH"
+echo "[dsh.desktop.startup.gitbash.sh]  desktop exe       = $DSH_DESKTOP_EXE"
+echo "[dsh.desktop.startup.gitbash.sh]  cwd               = $PWD"
+
+if [ ! -f "$DSH_DESKTOP_EXE" ]; then
+    echo "[dsh.desktop.startup.gitbash.sh]  DeepSeek Harness Desktop EXE Not Found: $DSH_DESKTOP_EXE" >&2
+    exit 1
+fi
+
+# =============================================================================
+# 启动命令
+# =============================================================================
+exec "$DSH_DESKTOP_EXE"

package/scripts/dsh.web.startup/README.md

@@ -0,0 +1,33 @@
+# dsh.web.startup —— 经 Git Bash 启动 `dsh web` (node 进程)
+
+## 为什么需要它
+
+DSH 的 Windows ACL sandbox 需要 `dsh web` (node 进程) 的 token **default DACL 含当前用户 SID**。由 `explorer.exe` / `cmd.exe` 直接派生的进程通常不含用户 SID，会导致受限模式（`read-only` / `workspace-write`）所有命令 `exit 125`：
+
+```text
+msys-token-guard: OpenProcessToken(child default DACL) failed (Win32 5)     # exit 125
+```
+
+从 Git Bash 启动可以让 MSYS2 把该 DACL 重置为含用户 SID 的标准形状，受限模式随即恢复正常。
+
+## 文件
+
+| 文件 | 用途 |
+| --- | --- |
+| `dsh.web.startup.gitbash.vbs` | 隐藏窗口启动 |
+| `dsh.web.startup.gitbash.bat` | 前台启动 / 排查问题 |
+| `dsh.web.startup.gitbash.sh` | 实际启动逻辑，由 `.bat` 调用 |
+
+## 用法
+
+1. 把**整个目录**复制到任意位置（脚本内部按相对路径互相引用，可整体移动）。
+2. 设置环境变量 `DSH_GIT_BASH_PATH`，指向你日常使用的 Git for Windows 的 `bash.exe`。`.bat` 会在变量缺失或路径不存在时报错退出。
+3. 双击 `dsh.web.startup.gitbash.bat` 或 `dsh.web.startup.gitbash.vbs` 启动
+
+## 参数
+
+| 位置 | 名称 | 默认值 | 说明 |
+| --- | --- | --- | --- |
+| 环境变量 | `DSH_WEB_PORT` | `1688` | 命令行参数优先 |
+| 环境变量 | `DSH_WEB_WORKDIR` | `$HOME` | 启动目录，会成为 Web 会话的默认 workspace 根目录 |
+

package/scripts/dsh.web.startup/dsh.web.startup.gitbash.bat

@@ -0,0 +1,28 @@
+@echo off
+setlocal
+
+set "THE_SH_FILE=%~dp0dsh.web.startup.gitbash.sh"
+set "THE_SH_FILE_2=%THE_SH_FILE:\=/%"
+
+if not defined DSH_GIT_BASH_PATH (
+    echo [dsh.web.startup.gitbash.bat]  the env var  DSH_GIT_BASH_PATH  is not defined.
+    echo [dsh.web.startup.gitbash.bat]  REQUIRED: You MUST manually set env var  DSH_GIT_BASH_PATH  to your Git for Windows bash.exe, e.g. C:\Program Files\Git\bin\bash.exe
+    exit /b 1
+)
+if not exist "%DSH_GIT_BASH_PATH%" (
+    echo [dsh.web.startup.gitbash.bat]  Git Bash Not Found:  DSH_GIT_BASH_PATH : %DSH_GIT_BASH_PATH%
+    exit /b 1
+)
+
+if not exist "%THE_SH_FILE%" (
+    echo [dsh.web.startup.gitbash.bat]  .sh File Not Found: %THE_SH_FILE%
+    exit /b 1
+)
+
+"%DSH_GIT_BASH_PATH%" --login "%THE_SH_FILE_2%" %*
+set "THE_RETURN_CODE=%ERRORLEVEL%"
+
+if not "%THE_RETURN_CODE%"=="0" (
+    echo [dsh.web.startup.gitbash.bat]  bash exited with code: %THE_RETURN_CODE%
+)
+endlocal & exit /b %THE_RETURN_CODE%

package/scripts/dsh.web.startup/dsh.web.startup.gitbash.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# =============================================================================
+# dsh.web.startup.gitbash.sh — 经 Git Bash 启动 `dsh web` (node 进程)
+#
+# 【为什么必须经过 Git Bash 启动】
+#   DSH 的 Windows ACL 沙箱在受限模式(read-only / workspace-write)下, 会用
+#   msys-token-guard.exe 在受限 token 内启动 Git Bash。guard 需要以
+#       TOKEN_QUERY | TOKEN_ADJUST_DEFAULT
+#   打开子进程 token, 而 TOKEN_ADJUST_DEFAULT 属于"写"类权限, 在
+#   WRITE_RESTRICTED token 下必须两趟权限检查都通过。
+#
+#   若 DSH 主进程 token 的 default DACL 缺当前用户 SID(由 explorer.exe /
+#   cmd.exe 派生的进程往往如此), 第一趟检查就会失败:
+#       msys-token-guard: OpenProcessToken(child default DACL) failed (Win32 5)
+#   后果是受限模式下所有命令 exit 125 / SandboxUnavailableError。
+#
+#   MSYS2 运行时在 bash.exe 启动时, 会把自己的 token default DACL 重置为含用户
+#   SID 的标准形状 [用户 ALL, Administrators ALL, SYSTEM ALL]。凡是从 bash 派生的
+#   进程都继承这个形状, 沙箱随即恢复正常。
+#   详见 https://github.com/wzwjustdoit/dsh-git-bash 的 README "启动方式" 一节。
+#
+# 【用法】
+#   双击同目录的 dsh.web.startup.gitbash.bat 或 dsh.web.startup.gitbash.vbs
+#
+# =============================================================================
+
+set -euo pipefail
+
+# 监听端口: 命令行第 1 个参数 > 环境变量 DSH_WEB_PORT > 默认 1688
+PORT="${1:-${DSH_WEB_PORT:-1688}}"
+
+# 启动目录。它会成为 Web 会话的默认 workspace 根目录。
+# 想固定到别处就在调用前设置 DSH_WEB_WORKDIR。
+WORKDIR="${DSH_WEB_WORKDIR:-$HOME}"
+
+cd "$WORKDIR"
+
+echo "[dsh.web.startup.gitbash.sh]  bash              = $BASH"
+echo "[dsh.web.startup.gitbash.sh]  msystem           = $MSYSTEM"
+echo "[dsh.web.startup.gitbash.sh]  DSH_GIT_BASH_PATH = $DSH_GIT_BASH_PATH"
+echo "[dsh.web.startup.gitbash.sh]  dsh               = $(command -v dsh)"
+echo "[dsh.web.startup.gitbash.sh]  cwd               = $PWD"
+echo "[dsh.web.startup.gitbash.sh]  port              = $PORT"
+
+# =============================================================================
+# 启动命令
+# =============================================================================
+exec dsh web --port "$PORT"