dsh-tool-repair
面向 DeepSeek Harness 的模式引导工具调用修复
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:monotykamary/dsh-tool-repair#bbfdff52ece52729214390623a057ebae9682624Tool Repair 以 dsh-tool-repair 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →Schema-guided tool-call repair for DeepSeek Harness
Validate first. Repair only what is unambiguous. Validate again before anything executes.
A malformed tool call passing through schema-guided repair into a validated DeepSeek Harness call
dsh-tool-repair is a native Cordis plugin and DSH bundle for provider outputs that almost form a valid tool call. It wraps the provider-neutral llm/stream waterfall, inspects finalized tool-call blocks against the exact schemas sent in that request, and commits a repair only when DSH's authoritative JSON Schema validator accepts the result.
The plugin is an external companion rather than one of the Harness monorepo's packages. The official DSH application pins the version it tests and layers the bundle into its shipped Web and Headless profiles, while this repository keeps its own release and maintenance cycle.
flowchart LR
Model[Model / gateway] --> Stream[DSH llm/stream]
Stream --> Check{Exact request schema}
Check -->|valid| Same[Byte-for-byte passthrough]
Check -->|recoverable| Repair[Deterministic repair]
Repair --> Recheck{Revalidate}
Recheck -->|valid| Log[assistant/message + tool/call]
Recheck -->|invalid| Reject[Fail closed]
Log --> Runtime[DSH ToolRuntime]
Runtime --> Policy[Policy + tool body]
Repairing after ToolRuntime starts would let the durable assistant message disagree with what executed. Repairing before the provider finishes would guess from partial JSON. The finalized block-end is the first point that has the complete call, the request's schema snapshot, and time to replace provider replay metadata before the agent loop logs the message.
| Input problem | Behavior |
|---|---|
| Valid arguments | Returned byte-for-byte unchanged. |
| Balanced malformed JSON | Repaired through jsonrepair, then schema-validated. |
GLM <arg_key> / <arg_value> wrappers at key or value boundaries | Stripped only for configured provider/model routes and only when the result validates. |
| Complete GLM key/value argument pairs | Decoded when every key/value tag is complete and the remaining envelope names the same tool. |
Optional property sent as null | Removed when the property is not required and its schema rejects null. |
| Array/object sent as a JSON string | Parsed when the property schema accepts the parsed collection. |
| Known alternate field name | Renamed only through an explicit per-tool alias map and only to a property in the live schema. |
These rules matter most for mutating tools: schema validity cannot prove that an auto-completed file body or command contains the model's full intent.
Requirements: Node.js ^22.19.0 || >=24, pnpm 11 for this checkout, DeepSeek Harness ^0.1.0-rc.7, and Cordis ^4.0.1.
The package is included in the tested DSH distribution. For another profile or checkout:
# Registry install into one profile
pnpm dlx @monotykamary/dsh@0.1.0 plugin --profile web add dsh-tool-repair
# Local development checkout
pnpm install
pnpm run install:local
The local installer builds the package, records any dependency it replaces, links this checkout through the DSH plugin command, and verifies one active dsh-tool-repair row. It never starts or restarts DSH. Reload the selected profile after installation.
pnpm run install:local -- --profile headless
DSH_HOME=/path/to/home pnpm run install:local -- --profile web
pnpm run install:local -- --skip-build
pnpm run uninstall:local -- --profile web
The uninstaller removes only a local link proven to belong to this checkout and restores the exact previous dependency specification.
The bundle inserts one row with id dsh-tool-repair. A later profile patch can replace its config:
- id: dsh-tool-repair
config:
grammarLeakModels:
- glm
repairJsonSyntax: true
dropOptionalNulls: true
parseStringifiedCollections: true
aliases:
read:
path: [file_path, filePath]
debug: false
| Key | Bundle value | Meaning |
|---|---|---|
grammarLeakModels | [glm] | Case-insensitive substrings matched against provider/model; only matching routes receive grammar-token handling. |
repairJsonSyntax | true | Permit jsonrepair only after the input passes the balanced-container check. |
dropOptionalNulls | true | Treat schema-invalid null optional properties as omitted. |
parseStringifiedCollections | true | Parse embedded JSON only where the property requires an array or object. |
aliases | {} | Explicit tool → canonical field → aliases[] map. No aliases are implicit. |
debug | false | Log tool identity, status, rule names, and bounded diagnostics; arguments are never logged. |
An empty grammarLeakModels list disables marker-specific mutation while leaving schema-guided JSON and collection repairs active. Unknown config keys fail plugin loading.
GenerateOptions request.next().A tool definition can change while a response streams. Validation against the request snapshot establishes what the model was asked to produce; ToolRuntime's later validation against the current definition remains authoritative for execution.
The plugin adds no prompt section and changes no tool schema. Valid calls and ordinary assistant text are unchanged. A recovered call proceeds as if the provider had emitted the canonical JSON. An ambiguous configured grammar leak returns a normal denied tool result explaining that the complete call must be regenerated.
There is no steady-state prompt cost. A successful repair can avoid a full error-and-retry model round trip; an unrepairable call adds only the ordinary bounded tool error already returned by DSH.
None. The request prefix, tool schemas, and system prompt are untouched. Repairs affect only the newly generated assistant suffix.
import { repairToolCall } from 'dsh-tool-repair'
const outcome = repairToolCall({
name: 'read',
arguments: '{"<arg_key>path":"README.md"}',
schema: request.tools?.find(tool => tool.name === 'read'),
grammarLeak: true,
config,
})
if (outcome.status === 'repaired') {
console.log(outcome.arguments)
}
The package also exports repairToolCallStream and BlockedCallStore for tested embedding. These APIs accept DSH's public message, schema, and stream types; they do not construct another registry or execution pipeline.
pnpm install --frozen-lockfile
pnpm run check
# Inspect the exact npm payload; prepack runs the complete check again
pnpm pack --dry-run
# Release after the repository and npm metadata are ready
pnpm publish --access public
pnpm run check type-checks source, emits declarations and the ESM runtime bundle, runs the complete tests, and verifies built exports, bundle metadata, required files, and absence of Pi host dependencies or source-checkout paths.
grammarLeakModels narrowly, especially when an agent edits documentation about those tokens.run_code labels. Cosmetic label omission is resolved there; this package handles provider serialization corruption without fabricating missing work inputs.MIT © Tom Nguyen. See LICENSE and THIRD_PARTY_NOTICES.md.