DeepSeek Harness Plugin Hub

发布与管理完整 Harness Profiles,发现适合你的插件。

探索

插件目录环境预设文档中心动态

社区

发布插件联系我们报告问题

相关链接

Plugin Hub GitHubDeepSeek Harness 官方项目系统状态隐私说明
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

独立、非官方社区项目,与 DeepSeek 官方无隶属、授权或背书关系。

Loop Continue — DeepSeek Harness 插件(DSH Plugin)
DeepSeek Harness Plugin Hub
ProfilesPlugins分类动态文档登录管理 Profiles
ProfilesPlugins分类动态文档登录
← Plugins
L

dsh-loop-continue

Loop Continue

当模型进行了叙述但未调用工具时,继续 DeepSeek Harness 代理回合。

插件会安装到这里;不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add github:yunxiyang/dsh-loop-continue#43bb4c2080c5c98e851d1036b84ee354e3aae631
README兼容性版本

兼容性与来源证明

Loop Continue 以 dsh-loop-continue 发布,当前版本为 0.2.0。Plugin Hub 会校验它的 manifest,并保存精确安装来源,便于复现安装结果。

DSH 兼容范围
*
运行环境
web
发布来源
github
Registry 更新时间
2026/9/11

版本

0.2.0stable
2026/9/11
0.1.3stable
2026/9/11
0.1.1stable
2026/9/10
查看其余 1 个版本收起版本
0.1.0stable
2026/9/10

相关插件

正在加载相关插件…

最新版
0.2.0
DSH
*
HMR
重启进程
Tree shaking
未声明可安全裁剪
解包体积
未提供
文件数
未提供
Surface
web
许可证
MIT
发布源
github
GitHub
★ 1
周下载
0
最近提交
2026/9/16
查看源码 ↗
README Badge

点击下方 Badge 复制 Markdown,粘贴到 README 即可。

这是你的 Plugin?认领权益 · 优先安全扫描

验证 package.json 声明的 GitHub 仓库,即可管理这个公开页面。认领后,Hub 会优先安排当前版本的安全扫描,并在通过后公开展示结果。

认领这个 Plugin →
报告问题

相关插件

继续浏览 agents-orchestration 分类下经过校验的插件。

Headless@deepseek-ai/dsh-headlessdsh one-shot bundle:基于 dsh-base 的直接核心 Agent/Session 运行器,不包含 Host、HTTP 或浏览器层Experimental Agent Team Web Profile@deepseek-ai/dsh-experimental-agent-team-web-profile用于 Agent Teams Remote 和 UI 插件的实验性 Web 配置层Subagent Codex@deepseek-ai/dsh-subagent-codex基于官方 app-server 协议的一次性 Codex 子代理提供程序Subagent Claude Code@deepseek-ai/dsh-subagent-claude-code基于官方 Agent SDK 的一次性 Claude Code 子代理提供方

README

dsh-loop-continue

Continue a DeepSeek Harness agent turn when the model only narrated its next action and forgot the tool call.

The agent loop closes a turn as completed the moment a step emits text and no tool call. A model that writes "now I will re-apply the change" and stops looks finished to the loop, even though the work is half done.

This plugin listens on agent/turn-stopping, replays the current turn's own session log, and only asks a judge model one strict true/false question when the shape matches that failure mode. true steers the same turn to run one more step; false (or an unparseable answer) lets the turn close.

Install

Install into a profile with the dsh CLI. Its plugin subcommand forwards to pnpm inside the profile directory, so add/remove behave as usual:

dsh plugin --profile <profile> add dsh-loop-continue

Then restart the profile. The profile's package.json gains the dependency and dsh.profile.bundles entry, and the bundled cordis.patch.yml inserts the guard into the layer stack — no manual patch editing is required.

To remove it:

dsh plugin --profile <profile> remove dsh-loop-continue

Working from a local checkout instead? Point the profile at the directory:

dsh plugin --profile <profile> add link:/path/to/dsh-loop-continue

Source edits under lib/ are picked up only on restart.

Config

fielddefaultin cardmeaning
maxContinuations10yeshard cap on steering per turn (no infinite loop)
maxSteps10yesnewest steps shown to the judge
maxTailChars2000yestrailing-text budget split across the first and last halves
judgePromptbuilt-inyesinstruction telling the judge what counts as unfinished
steerTextbuilt-inyesmessage injected when the guard steers
debugfalseyeslog every evaluation (needs a restart)
judgeProvidernullnooverride provider; null/unset = derive from the session route
judgeModelnullnooverride model; null/unset = derive from the session route
judgeMaxTokens64nojudge output cap
judgeTemperature0nojudge sampling temperature

Deterministic gates

No model call runs unless the turn both:

  1. ended on a text-only step (no tool call), and
  2. called at least one tool earlier (so a plain one-shot answer is untouched).

This keeps the extra judge call off ordinary finished turns and only spends it where the model plausibly dropped a pending action.

Stopping early

Steering is not free: each continuation costs a judge round-trip plus one more agent step. So the guard also watches whether a steer worked.

When it steers, it records how far the session log had grown. The next time the same turn stops, it checks whether any assistant step in between actually called a tool. If the model only narrated again, the steer was ignored and the turn is closed instead of spending the remaining budget on the same refusal. A model that answers the steer with a real tool call keeps its normal budget.

Configuring the guard

The guard resolves its config on every evaluation rather than freezing it at mount, so a change reaches the very next turn-stopping check. Two ways to set values:

  • the user settings file, ~/.dsh/settings.yaml, under a loop-continue: key, or
  • the profile's own cordis.patch.yml.

Prefer leaving judgeProvider/judgeModel unset. The guard then judges with the model the current conversation is already running, which is by definition a working route; set them only to judge with a different model on purpose.

Editing the prompts

Both prompt texts ship as defaults and are plain config fields, so you can retune the guard without touching code. The package ships a browser half, so the editor is a card under Settings > Plugins > plugin config. It starts collapsed like every other plugin card; click the header to open it:

Loop Continue - resume an unfinished turn
  judgePrompt - decision policy   [textarea]
  steerText - resume message      [textarea]
  max steering per turn           [3]     0..100
  steps in the summary            [10]    1..100
  trailing-text budget (chars)    [2000]  100..20000
  debug - log every verdict       [ ]

The prompts save on blur, not per keystroke: the Host validates and persists the whole document on every write, and one write per keystroke of a 740-character policy paragraph is wasteful. The numeric fields and the toggle save immediately. Every change except debug applies to the next turn-stopping check with no restart; debug is read when the plugin is loaded, so it needs one.

The same fields are editable in ~/.dsh/settings.yaml, which is also the surface to use when the plugin runs headless with no browser half loaded:

loop-continue:
  judgePrompt: >-
    You inspect one coding-agent turn that just ended. Reply with exactly one
    word: true if the trailing text promises work that no tool call performed,
    false otherwise.
  steerText: >-
    You described an action but did not call any tool. Emit the tool call now.

Both surfaces write the same namespace, so a value set in the card shows up in the file and vice versa.

What each field controls:

  • judgePrompt — the judge's whole decision policy. The judge sees a deterministic summary (tool calls per step, trailing text, the human request) and must answer one word. Tighten it if the guard steers turns that were actually finished; loosen it if it misses dropped actions.
  • steerText — what the model is told when a turn is steered. This is the message the model acts on, so phrase it as an instruction to emit the call.

To revert, delete the fields; the built-ins come back.

Hot mount

cordis.patch.yml ships a plain insert — only id + name, no config and no !!js expressions — so a market hot-mount can add or remove this plugin as a minimal row. No user-specific endpoint, provider, or key is baked into the patch: policy is resolved at runtime as described above.

A patch-layer change is replayed in full on every reload (applyEntryPatches clones the entry list before applying), so a row adds and removes cleanly and never accumulates.

Whether a patch edit takes effect without a restart depends on the host:

  • Under the CLI (dsh profile), runProfile installs an HMR service and registers the profile and user patch files with it, so patch edits are applied live.
  • Under DSH Desktop 2.0.3 that path is not taken — the desktop shell composes the profile itself (dsh-app-boot helpers) and never loads cordis-plugin-hmr, so a cordis.patch.yml edit needs a profile restart.

Edits to lib/*.js always need a restart: the dsh HMR service is created with root: [], so no source directory is watched for module replacement.