DeepSeek Harness Plugin Hub

发布与管理完整 Harness Profiles,发现适合你的插件。

探索

插件目录环境预设文档中心动态

社区

发布插件联系我们报告问题

相关链接

Plugin Hub GitHubDeepSeek Harness 官方项目系统状态隐私说明
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

独立、非官方社区项目,与 DeepSeek 官方无隶属、授权或背书关系。

Subagent Watchdog — DeepSeek Harness 插件(DSH Plugin)
DeepSeek Harness Plugin Hub
ProfilesPlugins分类动态文档登录管理 Profiles
ProfilesPlugins分类动态文档登录
← Plugins
S

dsh-subagent-watchdog

Subagent Watchdog

DSH 插件:针对以明确的 max-tokens 终止结束的原生可继续子代理,提供安全的一次自动继续恢复。无计时器、无轮询、无私有 API。

插件会安装到这里;不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add github:quaner1234-cmd/dsh-subagent-watchdog#c46279d27063a6a40f172a25c8f0ddabd1a67281
README兼容性版本

兼容性与来源证明

Subagent Watchdog 以 dsh-subagent-watchdog 发布,当前版本为 0.1.0。Plugin Hub 会校验它的 manifest,并保存精确安装来源,便于复现安装结果。

DSH 兼容范围
*
运行环境
any
发布来源
github
Registry 更新时间
2026/8/23

版本

0.1.0stable
2026/8/23

相关插件

正在加载相关插件…

最新版
0.1.0
DSH
*
HMR
重启进程
Tree shaking
未声明可安全裁剪
解包体积
未提供
文件数
未提供
Surface
any
许可证
MIT
发布源
github
GitHub
★ 2
周下载
0
最近提交
2026/8/24
查看源码 ↗
README Badge

点击下方 Badge 复制 Markdown,粘贴到 README 即可。

这是你的 Plugin?认领权益 · 优先安全扫描

验证 package.json 声明的 GitHub 仓库,即可管理这个公开页面。认领后,Hub 会优先安排当前版本的安全扫描,并在通过后公开展示结果。

认领这个 Plugin →
报告问题

相关插件

继续浏览 agents-orchestration 分类下经过校验的插件。

Headless@deepseek-ai/dsh-headlessdsh one-shot bundle:基于 dsh-base 的直接核心 Agent/Session 运行器,不包含 Host、HTTP 或浏览器层Experimental Agent Team Web Profile@deepseek-ai/dsh-experimental-agent-team-web-profile用于 Agent Teams Remote 和 UI 插件的实验性 Web 配置层Subagent Codex@deepseek-ai/dsh-subagent-codex基于官方 app-server 协议的一次性 Codex 子代理提供程序Subagent Claude Code@deepseek-ai/dsh-subagent-claude-code基于官方 Agent SDK 的一次性 Claude Code 子代理提供方

README

dsh-subagent-watchdog

A DSH plugin that safely recovers native continuable subagents from one high-confidence failure: explicit max-tokens termination.

When a native continuable DSH subagent ends because it hit max-tokens, Watchdog automatically continues the same child conversation once, then stops. No loops.

Why

When you delegate a task to a continuable subagent in DSH and the child runs out of output tokens mid-task, the runtime ends the turn with stopReason: 'max-tokens', reports the failure to the delegating agent, and stops. The work sits unfinished; the parent has to notice the failure, decide it is recoverable, and manually continue the child.

Watchdog does exactly that one recovery — deterministically, at most once — using only official DSH seams.

What it does

  • First max-tokens on a continuable child — Watchdog observes the terminal turn/end { kind: 'max-tokens' }, starts one official durability checkpoint (sessions.flush) while the child session is still live, waits for normal settlement and checkpoint resolution, then sends exactly one continuation through the official subagents.followup() seam. The same durable child conversation cold-resumes in a new activation epoch with a short instruction to continue the unfinished task from its existing state.
  • Recovered run completes normally — Watchdog stays silent. No messages, no markers, nothing further.
  • Second failure (max-tokens again, or an explicit runtime/provider error) — Watchdog stops intervening and delivers one notice to the delegating parent with the failure facts and the official manual options (manual send_message, interrupt_agent, or re-delegating a fresh subagent).
  • Never recovered — one-shot subagents (DSH exposes no resume seam for them), normal completion, clean aborts, refusals, unknown future stop reasons, and any first-seen outcome that is an error rather than max-tokens. Provider/model errors are reported, never auto-retried.
  • No persistence / unverifiable children — recovery decisions verify the child's durable log through the official persistence seam when available; a child whose continuable mode cannot be verified is skipped, never guessed. Without durable session logs the restart-safe "already continued" marker cannot be consulted across restarts, so protection there rests on the process-lifetime guard alone.

The continue-once guarantee is enforced against the child's durable session id (stable across activation epochs) plus a continuation marker written into the child's own durable log — repeated events, plugin restarts, or duplicate settlements cannot cause a second automatic continuation.

Install

Through the ordinary DSH plugin path (verified on dsh 0.1.1-rc.2):

dsh plugin --profile <profile> add dsh-subagent-watchdog

or from a local tarball:

npm pack
dsh plugin --profile <profile> add ./dsh-subagent-watchdog-0.1.0.tgz

The package declares dsh.bundle.patch; dsh plugin add reconciles it into the profile's bundle stack automatically. Zero dependencies, no build step, Node >= 20.

Safety and non-goals

  • At most one automatic continuation per child task/recovery chain.
  • max-tokens is the only automatic recovery trigger.
  • No timers, no polling, no custom persistence, no private runtime APIs — official seams only.
  • No second LLM deciding whether recovery is needed; no dashboard, no DAG, no team manager, no heuristic stuck detector.

Compatibility

Live-tested end-to-end against @deepseek-ai/dsh 0.1.1-rc.2 only. No broader compatibility is claimed or tested.

Verification and evidence

  • Local suite: 38 scenarios over both shipped artifacts (lib/index.js and the derived dynamic-package body) against real cordis/dsh-subagent/dsh-session dispatch — node --test test/watchdog.test.mjs.
  • Final packaged re-validation directly observed a real native continuable child end with explicit max-tokens, the same durable child session id start a new activation under a fresh runId 68 ms after settlement, exactly one durable subagent-watchdog/relay marker remain present across later inspection, and the recovered activation complete normally with no watchdog failure notice.
  • The checkpoint-before-followup ordering and genuine AbortSignal plumbing are supported by prior instrumented live probes plus the deterministic suite; they were not independently emitted as explicit records in the final packaged trace.

The full verified seam survey and evidence log lives in docs/DSH-SEAMS.md. The final acceptance phase crossed its original one-run/STOP boundary during debugging; that protocol deviation and the resulting evidence calibration are recorded in docs/PROTOCOL-DEVIATION-2026-08-23.md.

License

MIT