DSH on Windows：每次工具调用少等四秒

DeepSeek Harness 每次起子进程，都会把命令包成 pwsh -NoLogo -NoProfile -NonInteractive -Command "<命令>"。

钩子是每次工具调用前后自动跑的小脚本，管权限检查、提示注入、删除拦截这些。它们本身只是一条「可执行文件 + 参数」的命令，用不着 shell。这层包装在 Windows 上能让每个钩子多花几秒，而钩子每调一次工具就跑一遍。

插件做的事很简单：命令不需要 shell 时直接交给系统创建进程，其余照旧走 pwsh。装完之后，每次工具调用少等约四秒。

效果

同一台机器、同一个 DSH 版本、同样一串工具调用：

钩子每次工具调用都要跑一遍，所以体感差别是每次操作省四秒多。

这两个数只在一种环境测过：Windows 11、DSH 0.2.1-rc.2、单机。你的机器可能不一样，见下面的「先量一下」。

先量一下

装之前先看看你现在有多慢。让它跑一次工具调用（比如让助手改一个文件），掐一下从发出到返回的秒数。

• 本来就在半秒内：这个插件对你没用，别装。
• 一两秒以上：值得试。

插件本身是保守的——只有「首 token 是绝对路径、没有 shell 元字符」才直连，其余一律退回原来的 pwsh 路径，命令语义不变。

安装（推荐：插件）

插件不改 app.asar，DSH 升级也不失效。

1. 把 plugin/index.js 放到：

%USERPROFILE%\.dsh\profiles\desktop\plugins\dsh-pwsh-fast\index.js

2. 在 %USERPROFILE%\.dsh\profiles\desktop\cordis.patch.yml 末尾加一段（路径里的用户名换成你的）：

- insert:
- id: "dsh-pwsh-fast"
name: "file:///C:/Users/<你的用户名>/.dsh/profiles/desktop/plugins/dsh-pwsh-fast/index.js"

3. 重启 DSH。

想确认有没有生效，把 index.js 里的 DEBUG 改成 true，重启后跑几个工具调用，同目录会出现 pwsh-fast.log，里面会写哪些命令走了直连、哪些退回。

卸载

从 cordis.patch.yml 删掉那一段，重启，就回到原样。app.asar 从头到尾没被改过。

备选：改 app.asar

如果你的 DSH 版本拿不到 PwshLocalExecutor（插件启动时会静默跳过），可以改用 install.py 直接改 app.asar。

python install.py            # 只看，不改
python install.py install    # 备份后安装
python install.py revert     # 从备份恢复

脚本会做这些：

1. 读目标文件的 SHA-256。与官方原版一致才继续；
2. 与「已装补丁」的指纹一致就直接退出；
3. 与两个都不一致，说明 DSH 版本变了，拒绝执行；
4. 装之前把整个 app.asar 复制成 app.asar.bak-<时间戳>；
5. 新文件先写成 app.asar.new，校验头部结构，通过才替换。

改 app.asar 前必须先完全退出 DSH，文件被占用时无法替换。

它做了什么

插件和 install.py 改的是同一处逻辑。

文件：dsh/node_modules/@deepseek-ai/dsh-pwsh-local/lib/index.js

内容：PwshLocalExecutor.prototype.argv(spec) 原本无条件返回 pwsh 包装的 argv。
现在先调一次 splitSimpleCommand(command)，切成 argv 就直连；切不了就原样回退。

切不了的情况：

• 管道、重定向、;、$、反引号、#
• 换行或回车
• 弯引号（PowerShell 认、切词器不认）
• 引号不配对
• 首 token 不是绝对路径
• 目标是 .cmd / .bat / .ps1（这些必须经 shell）
• 参数里带 --%

没有改超时、缓冲区、退出码处理。

已知边界

• 退出码：直连保留原退出码；经 pwsh 包装时 2 和 7 会被转成 1。DSH 只把 2 当 block 语义、0 当解析 JSON。查过 16041 次钩子调用，exit 2 一次都没出现。
• 大输出：2000 行完整返回，尾部标记在。
• 版本绑定：install.py 按文件指纹认版本，DSH 升级后指纹会变，脚本会拒绝执行。插件不绑版本，升级后照常工作。

许可

MIT，见 LICENSE。插件和脚本修改的 @deepseek-ai/dsh-pwsh-local 同样是 MIT（Copyright (c) 2026 DeepSeek），完整声明在 NOTICE。

DSH on Windows: four seconds off every tool call

Every time DeepSeek Harness spawns a process, it wraps the command as pwsh -NoLogo -NoProfile -NonInteractive -Command "".

Hooks are the small scripts that run around every tool call — permission checks, prompt injection, the delete guard. Each one is just an executable plus arguments; it doesn't need a shell. On Windows that wrapper can add seconds to every hook, and a hook runs on every tool call.

This plugin hands such commands straight to the OS and falls back to pwsh for everything else. The result: about four seconds less waiting per tool call.

Powered by DSH — a plugin, not a fork.

Result

Same machine, same DSH version, same sequence of tool calls:

Hooks run on every tool call, so in practice this saves about four seconds per operation.

These numbers were measured in one environment only: Windows 11, DSH 0.2.1-rc.2, single machine. Yours may differ — see "Measure first".

Measure first

Before installing, check how slow you actually are. Run one tool call (ask the assistant to edit a file, for example) and time it from request to response.

• Under half a second: the plugin won't help you, skip it.
• A second or more: worth trying.

The plugin is conservative. It only goes direct when the first token is an absolute path and no shell metacharacter is present; everything else returns to the original pwsh path, so command semantics don't change.

Install (plugin, recommended)

The plugin never touches app.asar, so DSH upgrades won't wipe it.

1. Copy plugin/index.js to:

%USERPROFILE%\.dsh\profiles\desktop\plugins\dsh-pwsh-fast\index.js

2. Append this to %USERPROFILE%\.dsh\profiles\desktop\cordis.patch.yml, replacing the username:

- insert:
- id: "dsh-pwsh-fast"
name: "file:///C:/Users//.dsh/profiles/desktop/plugins/dsh-pwsh-fast/index.js"

3. Restart DSH.

To confirm it's active, set DEBUG to true in index.js and restart. After a few tool calls, pwsh-fast.log will appear next to the file, listing which commands went direct and which fell back.

Uninstall

Remove that block from cordis.patch.yml and restart. app.asar was never modified.

Alternative: patch app.asar

If your DSH version doesn't expose PwshLocalExecutor (the plugin exits silently), use install.py instead.

python install.py            # check only
python install.py install    # back up, then patch
python install.py revert     # restore from backup

What the script does:

1. Reads the SHA-256 of the target file. Proceeds only if it matches the stock build.
2. Exits immediately if the file already matches the patched fingerprint.
3. Refuses to run if neither matches — that means DSH was upgraded.
4. Copies the whole app.asar to app.asar.bak- first.
5. Writes the new file as app.asar.new, validates the header structure, then swaps it in.

DSH must be fully closed before patching; the file is locked while it runs.

What it changes

The plugin and install.py implement the same logic.

File: dsh/node_modules/@deepseek-ai/dsh-pwsh-local/lib/index.js

PwshLocalExecutor.prototype.argv(spec) originally returned the pwsh-wrapped argv unconditionally. It now calls splitSimpleCommand(command) first: if the command splits into argv, it goes direct; otherwise it falls back unchanged.

When it refuses to go direct:

• Pipes, redirection, ;, $, backticks, #
• Newlines or carriage returns
• Smart quotes (PowerShell treats them as quotes, the tokenizer doesn't)
• Unbalanced quotes
• First token is not an absolute path
• Target is .cmd / .bat / .ps1 (these need a shell)
• Any argument contains --%

Timeouts, buffers and exit-code handling are untouched.

Known limits

• Exit codes: direct execution preserves the original code; through pwsh, 2 and 7 are rewritten to 1. DSH only treats 2 as a block signal and 0 as "parse JSON". Across 16,041 hook invocations on the test machine, exit 2 never occurred.
• Large output: 2,000 lines came back complete, tail marker intact.
• Version pinning: install.py identifies versions by file fingerprint and refuses to run after a DSH upgrade. The plugin isn't version-bound and keeps working.

License

MIT, see LICENSE. The @deepseek-ai/dsh-pwsh-local package it modifies is MIT as well (Copyright (c) 2026 DeepSeek); the full notice is in NOTICE.