dsh-reviewed-development-orchestrator
已审阅 DeepSeek Harness 的五阶段软件开发编排
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:FriendsHL/dsh-reviewed-development-orchestrator#d7274e3b55fe93bd28b19d85da9db5f4bf252decReviewed Development Orchestrator 以 dsh-reviewed-development-orchestrator 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A public DeepSeek Harness bundle that enforces a reviewed software-development process through five fresh DSH SubAgent sessions:
Designer -> Design Reviewer -> Implementer -> Code Reviewer -> QA
The single model-facing tool is run_reviewed_development. Review failures stop the run, and QA cannot report completion merely by claiming tests passed: a QA PASS is accepted only when every approved test-plan command has a matching successful shell call and result in the QA child session.
The bundle inserts one runtime plugin, reviewed-development-orchestrator. That plugin registers one tool and uses the existing DSH spawn SubAgent provider. It does not copy presets, replace the Agent loop, or install a second transcript store. Spawned roles inherit the initiating Agent's preset, model route, workspace, sandbox policy, and delegated approval policy.
Each role receives a fixed persona, structured-output schema, and tool restriction. Each child session remains the durable source for its complete prompt, output, tool evidence, provider descriptor, lineage, and selected preset. The parent receives a compact ordered summary with child session ids.
PASS, CHANGES_REQUIRED, or BLOCKED. It is instructed to return BLOCKED when the design or test plan includes a prohibited release operation. Only PASS starts implementation.BLOCKED when the implementation report indicates a prohibited release operation. Only PASS starts QA.PASS, FAIL, or BLOCKED. It is instructed not to execute a test command that includes or performs a prohibited release operation and to return BLOCKED. A reported PASS is cross-checked against recorded shell events before the run becomes completed.The orchestrator implements no dedicated commit, push, publish, merge, or promotion operation. All five fixed personas prohibit those actions; the review and QA personas also define the blocking behavior above. These are behavioral workflow gates rather than a security guarantee: inherited shell tools retain whatever authority the deployment sandbox grants. Deployments that need enforcement must restrict credentials, network access, tools, and filesystem permissions outside this plugin. Version 0.1 does not automatically revise work after a failed gate.
DSH is in developer preview. Pin a reviewed commit:
dsh plugin --profile web add github:FriendsHL/dsh-reviewed-development-orchestrator#<commit>
The bundle contributes:
- insert:
- id: reviewed-development-orchestrator
name: dsh-reviewed-development-orchestrator
config:
providerName: spawn
maxDepth: 3
For local development:
dsh plugin --profile web add link:/absolute/path/to/dsh-reviewed-development-orchestrator
| Field | Default | Purpose |
|---|---|---|
providerName | spawn | Registered fresh in-process spawn provider. |
maxDepth | 3 | Absolute delegation-depth cap applied to every role. |
maxTokens | inherited | Optional positive token limit applied symmetrically to every role. |
shellToolName | bash (pwsh on Windows) | Supported shell tool whose persisted calls/results prove QA execution; other names are rejected. |
designerTools | inherited | Optional non-empty allowlist for the Designer. |
reviewerTools | inherited | Optional non-empty allowlist shared by both reviewers. |
qaTools | inherited | Optional non-empty QA allowlist; it must contain shellToolName. |
The orchestration tool is always denied inside child roles. Tool filtering controls model visibility and dispatch, not filesystem security; the host sandbox remains authoritative. Unknown configured tools fail when the child starts.
run_reviewed_development accepts a non-empty standalone task. Optional provider and model overrides must be supplied together. Optional max_tokens applies to all five roles.
Terminal statuses are completed, changes_required, failed, blocked, cancelled, and error. Phase records include the role, child session id, stop reason, duration, verdict where applicable, summary, and validated structured result. Inspect the listed child sessions for complete evidence.
Repository changes follow the same separation enforced at runtime: design and mapped test plan, independent design review, implementation by a development SubAgent, independent code review, and QA execution with fresh evidence. See CONTRIBUTING.md and the accepted design.
pnpm run check
# Build the DSH checkout once before the Web startup case.
DSH_CHECKOUT=/absolute/path/to/deepseek-harness pnpm run test:integration
The keyless installed-package suite packs the real npm artifact, installs it through dsh plugin into isolated Headless and Web profiles, and verifies:
spawn provider in order;minimal preset;The deterministic adapter proves bundle loading, orchestration, tools, lifecycle, persistence, and gates without an API key. It does not replace an optional real-provider smoke.
See Architecture for the runtime design and limitations.
MIT