dsh-tool-failure-circuit-breaker
阻止重复相同失败工具调用的 DeepSeek Harness 插件
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:icyaaaww/dsh-tool-failure-circuit-breaker#75e9ac872631ccf1c4f9c772abc62acffed75125Tool Failure Circuit Breaker 以 dsh-tool-failure-circuit-breaker 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A DeepSeek Harness guard plugin that stops an agent from dispatching the same tool with identical arguments after that call has already failed repeatedly. It saves tool latency, network requests, command execution, and provider cost when a model retries an unchanged operation that cannot succeed.
The plugin is deliberately narrower than the official @deepseek-ai/dsh-repeat-tool-reminder: the official plugin advises on every repeated call but never blocks one. This plugin observes only authoritative failed tools/result outcomes and denies the next identical dispatch after a configured threshold.
The package targets and has been composed against DeepSeek Harness 0.1.1-rc.2.
From this checkout's parent directory:
dsh plugin --profile web add ./dsh-tool-failure-circuit-breaker
For a source checkout of Harness, replace dsh with pnpm dsh.
The included bundle inserts this row:
- id: tool-failure-circuit-breaker
name: dsh-tool-failure-circuit-breaker
config:
maxFailures: 2
include: []
exclude: []
errorPreviewChars: 300
maxFailures: completed identical failures allowed before the next attempt is denied. Default: 2.include: * wildcard tool-name patterns to guard. Empty guards every tool.exclude: * wildcard tool-name patterns that bypass the guard.errorPreviewChars: maximum characters from the latest failure repeated in the denial. Default: 300.Use exclude for tools whose intended contract requires unchanged polling calls.
Failure chains are isolated per live agent and keyed by tool name plus canonical JSON arguments. Object key order does not change identity. A successful tool result, a new user message, or a failed call with different arguments opens the previous circuit. Calls made without an agent are ignored.
The guard listens at tools/pre-execute, so a denied retry never reaches the tool body. It observes the immutable tools/result event and does not count its own denial as another operational failure.
When open, the model sees its original tool error. Once blocked, it receives:
The identical <tool> call already failed <count> consecutive times. Last failure: <message>. Change the arguments or approach, inspect external state, or ask the user instead of retrying unchanged.
The denial is recorded as the normal tool result, so replay and model history remain consistent with Harness behavior. The plugin adds no tool schema and no tokens until it blocks a call.
npm test