👥 dsh-background-agents
- 1024 store channel:
npm i -g dsh1024 once, then dsh1024 plugin --profile web add dsh-background-agents (counts toward the deepseek1024.com install ranking).
Interactive long-session background agents plus persistent multi-agent team rooms for DeepSeek Harness — start a durable child agent that keeps working while you keep talking.
Steer live conversations and coordinate a team across sessions; everything survives restarts through the harness's own storage.
English · 简体中文 · Español · Português · हिन्दी
Compatibility
Host 0.1.2-alpha.2 and later fails closed on the session event vocabulary, so this plugin no longer writes its log-only fact events (background-agents/fact, team-room/fact) there: facts route to the logger/panel channel instead and the projections degrade to an empty fold. Older rc lines (through 0.1.1-rc.2) keep the ignorable-marker discipline. The client half now rides the current client packages (dsh-api-session-controller, dsh-client-web) and the current subagent remote (interruptByParent, prompt with a client-minted requestId; the old history RPC is gone — result peeks read the child session's conversation projection).
0.1.2-rc.1 (adapted 2026-09-04): the session envelope keeps its ignorable field for stored-log read compatibility only - Session.append still cannot stamp it (the third parameter is SurfaceIntent for surface event types only, never an options bag), so fact-gate behavior is unchanged.
0.1.3-alpha.1 (adapted 2026-09-06): the CI harness pin moves to the master checkout (d347e7039) - the handle seam (open → read → close) of the session-persistence service. The published 0.1.2-rc.1 runtime predates open(), so the cold bg_result read feature-detects the seam and falls back to load() - same behavior on both lines. Verified 2026-09-06 against the dsh-v0.1.3-alpha.1 master checkout (full gate chain + profile install smoke).
0.1.5-alpha.1 (adapted 2026-09-09): SessionHandleReadResult now returns { eventState, events }, so the cold bg_result read destructures .events from the handle seam (the published load() fallback is unchanged). The CI harness pin moves to the public tag commit 5dda764ed3aa (the local checkout is 13 infra commits ahead and unreachable from CI) and the compat probes install the alpha line. Peers widen to >=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 (prerelease-tuple rule: the first arm alone does not match 0.1.5-alpha.1) and devDeps pin 0.1.5-alpha.1. Verified 2026-09-09 against dsh-v0.1.5-alpha.1 (full gate chain). The earlier 0.1.3-alpha.1 claim is superseded: that prerelease falls outside both peer arms.
0.1.5-rc.1 (adapted 2026-09-10): dependency pins move to the published 0.1.5-rc.1 line; no seam change affects this plugin's behavior.
0.1.5-rc.2 (adapted 2026-09-11): dependency pins move to the published 0.1.5-rc.2 line; no seam change affects this plugin's behavior.
| Surface | Status |
|---|
| Harness | DeepSeek Harness dsh-v0.1.5-rc.2 (GitHub tag, verified 2026-09-11; dev and runtime pins 0.1.5-rc.2, peers >=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0) |
| Node | ^22.19.0 || >=24.0.0 |
| Platforms | All (host tools; optional Web sidebar panel and team rooms via the storage-domain capability) |
| Model | Any (children inherit the parent's route; childProvider/childModel override) |
What you get
dsh-background-agents upgrades DSH's fire-and-forget background jobs into two coordinated surfaces:
- Five steering tools —
background_agent starts a durable, continuable child on the official subagent seam (optional tool_filter — removes tools, never grants new ones; persona; max_depth; childProvider/childModel route). bg_message delivers a later turn; bg_list reports status (or the descendant tree with parentId/depth); bg_result reads the latest result text (reasoning fallback flagged textSource: 'reasoning'); bg_stop requests interruption.
- Progress and archive —
autoReport injects one throttled progress line after each child turn; reportDelivery: wakeup starts a parent turn when idle. The idle sweep archives quiet children and bg_message wakes them back up (autoArchive: false parks quiet watchers instead).
- Dashboard projection + Web panel — the
backgroundAgents session projection folds the parent log into rows; a sidebar panel shows live status, jump, message, stop, and result peek. Everything reconstructs from the durable log — no separate database.
- Team rooms (v0.5.0+) — the
/room command family plus eight room_* tools build persistent multi-agent rooms: members (each an independent session), a message bus (directed/broadcast), a shared task board, and a shared timeline — stored in the team_rooms storage domain (SQLite or JSONL) and recovered across DSH restarts. Cross-member task handoffs route through the official approval seam.
Quick start
# 1. install the bundle into your profile
dsh plugin --profile web add "github:PerryLink/dsh-background-agents#main"
# or from npm (published releases)
dsh plugin --profile web add dsh-background-agents
# 2. restart and verify the row
dsh --profile web --dump-config | grep -A4 'id: background-agents'
The bundle patch carries the plugin row; provider is required. The repo commits its build output (lib/), so git installs need no build step. The plugin needs the subagent spine already mounted (any profile built on @deepseek-ai/dsh-base has it). Team rooms mount wherever the storage domain is composed (@deepseek-ai/dsh-storage-domain); the five bg_* tools work without it.
Then, in any session, just ask the model — or call the tools directly:
background_agent "watch the repo for test failures and keep me posted" (label: test-watch)
bg_list
bg_message <agentId> "also check the snapshot tests now"
bg_stop <agentId>
Install & uninstall
- git channel (latest
main): dsh plugin --profile web add "github:PerryLink/dsh-background-agents#main" — committed lib/, no prepare or allowBuilds step.
- npm channel (published releases):
dsh plugin --profile web add dsh-background-agents.
- tarball channel:
pnpm pack in this repo, then dsh plugin --profile web add ./dsh-background-agents-<version>.tgz.
- uninstall:
dsh plugin --profile web remove dsh-background-agents (or remove the row from the profile patch).
Configuration
Every tunable is a validated Schemastery Config field — change it in cordis.yml, never in code. Only provider is required.
| Key | Default | Meaning |
|---|
provider | (required) | ctx.subagents provider name for continuable starts (spawn) |
autoReport | true | Inject one progress line into the parent after each child turn |
reportDelivery | quiet | quiet appends the line to the next model request; wakeup starts a parent turn when idle |
reportThrottleMs | 15000 | Minimum gap between two progress injections for one child |
reportSummaryMaxChars | 300 | Hard cap on the injected progress-line text (ellipsized) |
resultMaxChars | 4000 | Hard cap on the bg_result text (ellipsized, flagged truncated) |
maxBackgroundAgents | 4 | Hard cap on non-archived background agents per parent session |
autoArchive | true | Idle-archive toggle; when false, the sweep never archives quiet children |
idleTimeoutMinutes | 120 | Idle window after which a quiet child is archived (>= 1) |
idleSweepIntervalMs | 60000 | Archive sweep period |
maxLabelChars | 120 | Display-label cap (ellipsized) |
childProvider | (inherit) | Provider route for child model requests |
childModel | (inherit) | Model id for child model requests |
maxChildDepth | (none) | Config ceiling for a start's max_depth argument |
allowedChildTools | (none) | Allowlist for names; empty/absent = no limit |
Tools & surfaces
| Surface | Kind | Notes |
|---|
background_agent | tool | Start a durable, continuable child (label, tool_filter, persona, max_depth) |
bg_message | tool | Deliver a later turn to a child by agent id |
bg_list | tool | Status of your agents (or the descendant tree with recursive: true) |
bg_result | tool | Fetch a child's latest assistant output text |
bg_stop | tool | Request interruption of the current turn |
/room | command | create|join|leave|list|send|tasks|task add|assign|claim|done|delete |
room_list_rooms / room_post / room_read | tools | Message bus: roster, post (broadcast/directed), read history |
room_list_tasks / room_create_task / room_claim_task | tools | Shared task board |
room_transfer_task / room_complete_task | tools | Handoff (approval-gated) and completion |
backgroundAgents projection | session projection | Dashboard rows folded from the parent log, including per-agent metrics totals (tokens, turn wall time, error count) |
teamRoom projection | session projection | Shared timeline folded from team-room/fact events |
| Web sidebar panel | client | Live status, jump, message, stop, result peek, per-agent cost/status totals, JSON export/copy |
How it works — and why it survives restarts
Everything rides the official subagent seam: startContinuable, followup, interrupt, listChildren — the plugin performs no lifecycle routing of its own, never touches another session's Agent, and never kills a process tree (stop = request interruption, teardown belongs to the continuation manager).
The plugin writes every fact through one structured channel and one model-visible channel:
background-agents/fact structured fact events — the registered / message / stop / progress / archived facts plus the per-turn metrics samples (tokens, turn wall time, error flag), appended to the parent log as log-only records with the envelope's ignorable: true marker; readers that do not know the type skip the records instead of refusing the log. Hosts whose Session.append predates the marker (every released rc line through 0.1.0-rc.8 and 0.1.1-rc.2, and the 0.1.2-rc line (which keeps the envelope field for stored-log read compatibility only and still cannot stamp it), drop it silently — the stamping fix exists on harness master only — making unmarked sessions unresumable on stricter builds) are detected before the first append (peer-version pre-check, then a probe of the returned envelope) and fact appends are skipped with a one-time warning — the durable store, the notices, and the tools keep working, and the projections degrade to an empty fact fold.
tool/result replay metadata — the same facts in logs written before the structured channel (folded only while a row has no structured provenance).
- injected
user/message notices (model-visible), source { kind: 'plugin', plugin: 'dsh-background-agents' } — the throttled progress lines and archive notices (canonical [background-agent <id>] … prefix).
- the official
subagent-settled notice — the child's durable "settled" fact.
- Team rooms mirror the same discipline: every delivered room message is a durable
user/message in the member's own log, and the shared timeline mirrors as log-only team-room/fact events in the team_rooms storage domain.
The backgroundAgents projection folds the structured channel and keeps the legacy folds; the dashboard value and bg_list facts reconstruct on every reopen without parsing human-readable notice text. When the catalog itself is unavailable, bg_list returns an explicit unrecoverable marker — it never fabricates an empty list.
How this relates to the built-in subagent tools
The harness core ships its own subagent tools (subagent, send_message, interrupt_agent, and the child-side report tool). This plugin's bg_* tools are their session-scoped companions; both can be mounted together:
| Built-in tool | This plugin | Difference |
|---|
subagent (backgroundMode: 'continuable') | background_agent | Same startContinuable seam; this plugin adds per-child tool_filter/persona/max_depth validation and the per-session cap |
send_message | bg_message | Same delivery semantics; bg_message addresses this conversation's background agents and maintains the projection facts |
interrupt_agent | bg_stop | Same interrupt semantics; bg_stop also records a structured stop fact |
child-side report tool | autoReport | The built-in is called by the child model itself; this plugin injects throttled progress after every child turn automatically |
What the core tools lack: bg_list, bg_result, idle archiving, and the per-parent folded panel projection.
Not in scope: scheduled triggering (the schedule seam exists), cross-machine/remote agents, and any change to the official subagent activation contract.
Not this plugin
| Project | What it does | The boundary |
|---|
| titanwings/dsh-automation | Scheduled coding tasks in fresh agent sessions | It owns when tasks run (scheduling). This plugin owns interactive steering of one long-lived conversation — no scheduler seam, no cron. |
| vlln/dsh-task-status | Status bar for background jobs (progress + output tail) | It displays tool-level jobs. This plugin creates and steers agent sessions; its dashboard is one panel of it, not the product. |
| YYTbit/dsh-plugin-agent-dashboard | Multi-agent dashboard skill | Display-oriented. This plugin's rows are actionable: jump into the child session, send messages, stop — through the official control plane. |
Permissions & data
- Permissions: the workshop manifest declares
session:append, subagent:spawn, and tools:register.
- Data: team rooms live in the
team_rooms storage domain (SQLite or JSONL — zero extra services); background-agent facts ride the parent session log. No separate database, no network.
- Session log:
background-agents/fact and team-room/fact events are appended with the envelope's ignorable: true marker on hosts that honor it (pre-marker hosts are detected and fact appends are skipped — see allowUnmarkedFacts); the model-visible progress lines and room deliveries are real user/message records.
Security boundaries
- Official seam only. Start, message, and stop are thin adapters over
startContinuable / followup / interrupt; stop requests interruption and never kills processes.
tool_filter only restricts. It removes tools from the child's view — never grants new ones; names are validated against allowedChildTools.
- Approval-gated handoffs.
room_transfer_task routes through the official approval seam and fails closed when no answerer grants it.
- Model-visible ⟺ logged. Every delivered room message is a durable
user/message in the member's own log; the shared timeline mirrors as log-only team-room/fact events.
- No scheduling, no cross-machine agents. Children are process-local continuable sessions of the deployment.
Cross-ecosystem inbound (P2)
External agent runtimes — OpenAI Agents SDK, CrewAI, and similar — can publish into a team room through a minimal newline-delimited JSON-RPC 2.0 bridge over stdio. This is a JSON-RPC direct-connect minimal set, not the official ACP wire protocol: full ACP compatibility waits for the upstream seam.
Enable it with two Config fields and point inbound.command at a launcher that emits one JSON notification per line on stdout:
# cordis.yml (plugin row)
inbound:
enabled: true
command: "python external_runtime.py --room <room-id>"
The runtime emits three notification kinds; method is the event name and params.name is the external agent's display name:
{"jsonrpc":"2.0","method":"agent_started","params":{"name":"researcher","room":"<room-id>","traceId":"t-1"}}
{"jsonrpc":"2.0","method":"agent_message","params":{"name":"researcher","room":"<room-id>","traceId":"t-1","message":"found the failing test"}}
{"jsonrpc":"2.0","method":"agent_finished","params":{"name":"researcher","room":"<room-id>","traceId":"t-1","status":"ok","usage":{"inputTokens":100,"outputTokens":40}}}
Each maps onto the room's existing surfaces: agent_started opens a task-board card, agent_message posts to the message bus, and agent_finished completes the card and posts the outcome. Invalid messages fail closed — they are dropped and a JSON-RPC error is written back. External runtimes are not DSH sessions, so the room owner's member session stands in as the sender; a room with no owner member drops the event. Start and stop are owned by the plugin fiber through a disposer; an unspawnable inbound.command degrades to a logged warning (the bridge stays dormant, nothing else is affected).
Known limitations
- Team rooms require the storage domain to be composed; without
@deepseek-ai/dsh-storage-domain, the /room command and room_* tools are disabled (the five bg_* tools still load).
provider must name a continuable-capable provider (prepareContinuable); a missing provider makes background_agent fail until it appears.
maxBackgroundAgents is a shared budget across every continuable direct child of the session, including ones the built-in subagent tool started.
- One-shot children are never listed or messaged —
bg_list keeps continuable rows only.
- Children are process-local: the schedule seam owns "when", this plugin owns steering a live conversation.
- Cost metrics are raw token/duration totals, not currency: the harness exposes no per-model pricing table to the plugin or the browser, so the cost panel and export never convert tokens to money (they show
— when the adapter reports no token accounting).
Development
pnpm install # tooling only; harness packages resolve against a sibling checkout
pnpm run typecheck # strict TS, node + client programs
pnpm test # vitest: unit + end-to-end tests (real subagent seam, scripted LLM, jsdom panel)
pnpm run build # lib/index.js (node half) + lib/client.js (web client bundle)
pnpm run gen-aliases # re-map harness package paths after the checkout moves
A keyless end-to-end demo drives a real parent session and a background child through a deterministic scripted LLM (no API key; dev/ is gitignored — adapt the paths to your checkout):
$env:DSH_HOME = 'D:/deepseek-harness/Project/Plugins/dsh-background-agents/dev/dsh-home'
pnpm dsh --profile headless --patch dev/cordis.yml "【父会话】驱动后台 agent 演示"
Topics
dsh, dsh-plugin, deepseek-harness, subagent, background-agent, background-agents, agent-dashboard, conversation-steering, team-rooms, multi-agent, message-bus, task-board, collaboration
Contributors
- @PerryLink — creator and maintainer: the background-agent runtime on the official subagent seam, the team-room hub, the Web UI sidebar panel, the session projections, docs, CI/CD and releases.
PerryLink DSH Plugin Family
This project is one of the 37 DeepSeek Harness plugins maintained by PerryLink. If this one helps you, the others likely will too:
| Plugin | One-liner |
|---|
| dsh-auto-review | Second-model auto-review on the approval chain, fail-closed by default |
| dsh-budget | Cost governance for DeepSeek Harness: budgets, carbon, and latency in one panel. |
| dsh-checkpoint-rewind | Claude Code /rewind-equivalent: snapshots, session forks, one-shot restore |
| dsh-claude-move | Migrate Claude Code sessions, memory, skills and CLAUDE.md into DSH |
| dsh-click | Cross-platform native desktop control for DeepSeek Harness — Windows first. |
| dsh-composer-history | Terminal-style input history for the web composer: arrows, Ctrl+R search |
| dsh-data-quality | Dataset quality checks and citation cross-checks (the optional numeric bridge consumed here) |
| dsh-defend | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. |
| dsh-doublecheck | Engineering-discipline guard: requirements grill, test gates, adversary review |
| dsh-draw | Unified static-image generation routing for DeepSeek Harness. |
| dsh-fast | Read-only performance diagnostics for DeepSeek Harness. |
|
Install from the DSH Desktop Market
All PerryLink plugins are browsable in the built-in DSH Desktop Market: Market → Sources → add source → paste https://perrylink-dsh-catalog.perrylink.workers.dev/catalog-source.json → select it. Installation still goes through the Market's npm-identity verification and your confirmation.
License
Apache License 2.0 © 2026 dsh-background-agents contributors