@max-null/dsh-guardian
DeepSeek Harness 的 Guardian 状态引擎——断言计数、编辑审查队列，以及基于会话事件的无反馈循环监控
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @max-null/dsh-guardian@0.2.1Guardian 以 @max-null/dsh-guardian 发布，当前版本为 0.2.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
本插件属于 @max-null/* 插件系列——这一系列共同构成 SSID（思灵 · Seek Soul in Darkness） 桌面体验。SSID 是整合它们的盒：dsh-capture · dsh-chat-rail · dsh-chinese-thinking · dsh-draft-polish · dsh-guardian · dsh-habit · dsh-memory · dsh-node-appearance · dsh-plugin-center · dsh-quick-toolbar · dsh-skill-mcp-center · dsh-ssid-panels · dsh-ssid-zh-ui · dsh-achievements。
This plugin belongs to the @max-null/* family — a set of plugins that together form the SSID (思灵 · Seek Soul in Darkness) desktop experience.
Guardian state engine for the DeepSeek Harness — three trigger-line monitors over session events, with live reminder injection and a UI snapshot service.
M2 of SSiD (思灵), ported from fractal's guardian: assertion counting, the edit review queue, and no-feedback-loop monitoring.
| Trigger line | Rule |
|---|---|
| Assertion count | Scans assistant messages for unverified claims (不支持/做不到/只有 N 种/不存在/无法 X/远低于/过于 X). Counts per session, decays by 1 every 3 clean turns, segments into levels [1,3]+. |
| Edit review queue | Successful write/edit tool calls enqueue {filePath, sessionId, turn}. FIFO cap 20, dedup per file+session. Reminder lists them at turn end. |
| No-feedback loop | Per turn: edits without bash/pwsh increment the counter; any exec resets it. 3 consecutive edit-only turns inject a "build a feedback loop first" warning. |
本插件是会话行为监控类：不新增任何按钮、面板或设置项。它在会话过程中维护断言计数、编辑审查队列与「无反馈环」监测，效果体现在模型行为的约束上。
按《SSiD 开发手册》§9 截图规范：截图须回答「装完会多出/变成什么」的入口与面板。 本插件无界面元素（no UI surface），故不适用该项要求，改以上述行为效果说明代替。
# cordis.yml (or via the bundle patch):
- id: guardian
name: '@max-null/dsh-guardian'
Requires storage, system-prompt in the host composition (dsh-base ships
both). Installs as a bundle: dsh plugin --profile <name> add @max-null/dsh-guardian.
ctx.guardian — the engine:
snapshot() → { session, reviewQueue } for UI panelssessionState(sessionId) → per-session statesystemPrompt.context reminders (guardian:assertion,
guardian:no-feedback, guardian:review), evaluated per assembly from the
most recently active session.| Field | Default | Meaning |
|---|---|---|
decayTurns | 3 | Clean turns before one assertion point decays |
assertionThresholds | [1, 3] | Ascending thresholds segmenting levels 1-3 |
noFeedbackThreshold | 3 | Consecutive edit-only turns before the warning |
reviewQueueMax | 20 | Review queue FIFO cap |
globalRoot | $DSH_HOME/storages/guardian | JSON storage root |
One JSON unit (guardian, version 1) under $DSH_HOME/storages/guardian:
sessions table (per-session state) + the global slot (review queue).
In-memory is authoritative during a run; state flushes at turn end.
A failed flush is logged to stderr and dropped: the serialized write chain stays usable, and neither the event entry point nor the chain lets a failure escape into the host process. The state is advisory and rebuildable, so losing one update is the intended blast radius — a rejected write must never take the kernel down.
npm install --legacy-peer-deps # DSH peer types resolve via tsconfig paths
npm test # vitest: 31 tests (incl. write-failure resilience)
npm run typecheck # tsc against adjacent deepseek-harness lib/types
npm run build # emit dist/
The npm registry carries unsynchronized DSH rc versions, so dev tooling resolves
@deepseek-ai/*types throughtsconfig.jsonpaths pointing at an adjacentdeepseek-harnesscheckout (../deepseek-harness). Runtime peer resolution is unaffected — the host composition supplies the real packages.