maxwell-feng/dsh-kingdee
Gives the DSH agent a credential-safe way to act on a Kingdee Cloud Starry Sky tenant through its WebAPI: typed kingdee_* tools for querying, saving, submitting, auditing, un-auditing, viewing and deleting bills and base data and for invoking BOS custom services, with a full create→submit→audit→un-audit state machine, two real login paths, cursor pagination, an SSRF network defense and a companion kingdee-bos domain skill.
dsh-kingdee gives the DSH agent a first-class, credential-safe way to act on a Kingdee Cloud Starry Sky tenant through its WebAPI. Typed kingdee_* tools cover querying, saving, submitting, auditing, un-auditing, viewing and deleting bills and base data, plus invoking BOS custom services, with a full create/update → submit → audit → un-audit state machine. It is adapted for Kingdee V9.1 Enterprise Edition (backward-compatible with V9.0/V8.x), supports the official kdservice-sessionid session, stable cursor pagination (orderString, limit, startRow), direct bill-number action workflows and auto-submit/audit, and offers two real login paths (account-set username/password via AuthService.ValidateUser, or a third-party application via AuthService.LoginByAppSecret). An SSRF defense enforces an http/https whitelist and blocks localhost, loopback, private subnets and reserved segments; a companion kingdee-bos domain skill teaches field/enum/status conventions and the data-layer boundary.
Install
dsh plugin --profile web add dsh-kingdeeCopied verbatim from the README's Install block, which the README follows with a DSH 0.2.1-alpha.2 compatibility note (--profile must precede add). The README also documents registering connection details in the Plugins → kingdee settings card and putting secrets in the environment or credential store, with mock: true for an offline demo.
Compatibility
0.13.0 is verified against DeepSeek Harness 0.2.1-alpha.2 (typecheck, build and 15 unit tests pass; no live-tenant verification), and its @deepseek-ai/dsh-credentials / dsh-tools peers stay at >=0.1.7-alpha.2 <0.3.0, so 0.12.0 and 0.11.1 remain admitted on 0.2.1-alpha.2 as well. Credentials are environment-variable references resolved through the DSH credential seam, never literal config. Scope is the data/service layer of Kingdee Cloud secondary development; the platform-plugin layer (server-side C# form/list plugins, UI layout, background events) is not reachable through the WebAPI.
Details
- Repo: maxwell-feng/dsh-kingdee
- Category: Tools & Capabilities
- Stars: 1
- Version: GitHub repo maxwell-feng/dsh-kingdee; npm package dsh-kingdee at 0.13.0 (registry check 2026-10-10; registry repository field resolves back to this repo).
Alternatives
1624318455/dsh-plugin-tavily · 6Mikao9/dsh-wsl-workspace · 863683348/dsh-plugin-academic-writing