DeepSeek Harness Plugin Hub

发布与管理完整 Harness Profiles,发现适合你的插件。

探索

插件目录环境预设文档中心动态

社区

发布插件联系我们报告问题

相关链接

Plugin Hub GitHubDeepSeek Harness 官方项目系统状态隐私说明
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

独立、非官方社区项目,与 DeepSeek 官方无隶属、授权或背书关系。

DeepSeek Harness Plugin Hub
ProfilesPlugins分类动态文档登录管理 Profiles
ProfilesPlugins分类动态文档登录
← Plugins

dsh-outer-brain

Outer Brain

将哲学家的思维方式转化为可执行的方法:通过辩证法和实践检验约束幻觉与长会话漂移,使“已完成”成为可验证的事实,而非一种声称。

插件会安装到这里;不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add dsh-outer-brain@0.1.10
README兼容性版本

兼容性与来源证明

Outer Brain 以 dsh-outer-brain 发布,当前版本为 0.1.10。Plugin Hub 会校验它的 manifest,并保存精确安装来源,便于复现安装结果。

DSH 兼容范围
*
运行环境
any
发布来源
npm
Registry 更新时间
2026/11/4

版本

0.1.10stable
2026/10/24
0.1.9stable
2026/10/24
0.1.8stable
2026/10/24
查看其余 7 个版本收起版本
0.1.7stable
2026/10/24
0.1.6stable
2026/10/24
0.1.5stable
2026/10/24
0.1.3stable
2026/10/24
0.1.2stable
2026/10/24
0.1.1stable
2026/10/23
0.1.0stable
2026/10/22

相关插件

正在加载相关插件…

最新版
0.1.10
DSH
*
HMR
重启进程
Tree shaking
未声明可安全裁剪
解包体积
625 kB
文件数
40
Surface
any
许可证
MIT
发布源
npm
GitHub
★ 0
周下载
420
安全扫描
✓ v0.1.10 扫描通过
最近提交
2026/10/24
查看源码 ↗项目主页 ↗
README Badge

点击下方 Badge 复制 Markdown,粘贴到 README 即可。

这是你的 Plugin?认领权益 · 优先安全扫描

验证 package.json 声明的 GitHub 仓库,即可管理这个公开页面。认领后,Hub 会优先安排当前版本的安全扫描,并在通过后公开展示结果。

认领这个 Plugin →
报告问题

相关插件

继续浏览 agents-orchestration 分类下经过校验的插件。

Headless@deepseek-ai/dsh-headlessdsh one-shot bundle:基于 dsh-base 的直接核心 Agent/Session 运行器,不包含 Host、HTTP 或浏览器层Experimental Agent Team Profile@deepseek-ai/dsh-experimental-agent-team-profile在一个实验性捆绑包中提供 Agent Teams 协作、工具和 Web UIExperimental Ralph Bundle@deepseek-ai/dsh-experimental-ralph-bundle使用全新代理执行明确请求的重复工作。Subagent Codex@deepseek-ai/dsh-subagent-codex基于官方 app-server 协议的一次性 Codex 子代理提供程序

README

dsh-outer-brain

English | 中文

A philosopher's way of thinking, made executable — dialectics and practice-testing instead of prompt-level discipline. Built to govern two things that get worse the longer an agent runs: hallucination and long-session drift.

Most tools try to make the model smarter. This one doesn't. It gives the agent:

  • a way to think — find the principal contradiction, refuse false dichotomies, let practice rather than rehearsal settle a claim;
  • a way to check itself — a ledger, executable criteria, and outside review, so "done" is a fact rather than an assertion.

Two failure modes, and why length makes them worse

An agent is bad at catching itself doing either of these:

What goes wrongHow it shows upWhat governs it
HallucinationThe ledger turns green and the summary reads well, but the deliverable does not exist. "Last time it was like this." "The conditions aren't right so I can't."Criteria must actually run a command and read the exit code; evidence without a receipt (verbatim command / path / URL) carries zero weight; after the machine gate passes, a jury of three non-communicating reviewers rules by majority
Long-session driftTwenty turns in, the agent is optimising something nobody asked for, or re-running the same command while calling it progressThe contradiction tree keeps the principal contradiction pinned so it cannot quietly migrate; stalled catches semantic circling while spin catches mechanical repetition (OR-ed together); overturned claims are recorded instead of silently forgotten

Install

Option A — Desktop app (most users)

Open Settings → Plugins, find dsh-outer-brain, enable it.

Option B — CLI profile (web, tui, …)

dsh plugin --profile web add dsh-outer-brain

⚠️ This command alone does NOT mount the plugin. dsh plugin forwards its arguments verbatim to pnpm — it only adds the package to that profile's dependencies. Mounting is decided by dsh.profile.bundles.

You must also add the package name to dsh.profile.bundles in the profile's package.json:

{
  "dependencies": {
    "dsh-outer-brain": "^0.1.0"
  },
  "dsh": {
    "profile": {
      "bundles": [
        "dsh-outer-brain"
      ]
    }
  }
}

Without the bundles entry, the package installs cleanly, nothing runs, and no error is raised — it will look like the plugin is broken.

Then restart DSH.

It starts silent. Say "开机制" (turn the mechanism on) to activate it, "关机制" to dismiss it. That is deliberate — a tool for catching bad work should not be watching you all the time.

The 12 tools

ToolWhat it does
brain_taskDeclare the task: your words + my reading of them + why this approach + the result I want
brain_planDelivery ledger: milestones, artifacts, executable criteria, definitions (is / not / limit)
brain_verifyRun the criteria (the mechanism really executes the command and reads the exit code) + convene the jury automatically
brain_contraContradiction tree: two paths reaching the same endpoint with different results (Φ≠0), with eight disposal moves
brain_observeEvidence pool: claim / prior / expectation / observation / receipt, scored by likelihood ratio
brain_settleEnd-of-round settlement: water level into history, hazards closed out, off-contract observations captured
brain_statusCurrent water level, alarms, outstanding debts
brain_lift_checkLift criteria: is a proposed lift a real take, a fixation, or simply not liftable yet
brain_dissolveLift receipt: what became of the contradiction that was supposed to be resolved (dissolved / transformed / still there) — see known limitations
brain_escalateEscalate: what I need / why I cannot do it myself / where I would resume from
brain_terminateTermination declaration: achieved (list verifiable facts) / unreachable (name the missing condition) / redirected
brain_boundaryThe mechanism's own boundaries: register the walls the mechanism itself ran into

Configuration

Most behavior is tunable in cordis.patch.yml. The key settings:

enabled: true        # master switch: false ⇒ no tools registered, no injection
ledger: 'ledger'     # evidence never dies + time-decay applied on read
decay: 0.35          # time-decay rate
cap: 3               # max items handled per round
leanSelect: true     # withdraw only "topic-selection" nudges; criteria are untouched
jury:
  enabled: true
  maxTokens: 16384   # verdict JSON + long reasons need headroom; too small ⇒ truncated ⇒ unclear

The state file defaults to DSH's working directory (process.cwd()), which means a .outer-brain-diag.log and state JSON appear next to wherever DSH was started. Set workDir in cordis.patch.yml to pin them to a fixed location:

workDir: '/path/to/outer-brain-state'

Known limitations (0.1.0)

Three paths in this release do not work end to end. They are listed here rather than hidden, because the whole point of this plugin is that advertised capabilities should exist.

AreaWhat breaks
brain_dissolveResolves the id against the task/question tree instead of the contradiction tree, so passing a contradiction id (e.g. C0) reports "node not found". Lift receipts cannot be closed through this tool in 0.1.0.
Unknown poolbrain_settle captures off-contract observations, but nothing is wired to classify / absorb / reject them. If any stay open past the water line, "achieved" becomes permanently unreachable.
brain_terminateblocked_evidence is validated and echoed in the receipt, but is not persisted onto the milestone record.

Honest limits

  • This is an early 0.1.0 mechanism, designed for single-machine personal use. It is not a substitute for a mature workflow.
  • It injects a system prompt into your session and intercepts some "done" claims. That is how it works, not a side effect. Say "关机制" at any time to turn it off.
  • The jury needs a model that supports structured output; a small maxTokens truncates verdicts, which looks like "vague criteria" but is really "the output never finished".
  • The mechanism has its own defect history. One failure mode kept recurring during development: the function was written, the unit test passed, but nobody called it — it computed numbers that never reached a decision. Each case was fixed, and it proves one thing: a tool can stop you from fooling yourself; it cannot stop itself.

License

MIT

Changelog

每一版「改了什么、为什么改、怎么自己验」都在 CHANGELOG.md。