Skip to main content
Glama

Codex-DSH-Orchestrator

License: MIT Node.js 22+ DSH bridge

English | 简体中文

Codex-DSH-Orchestrator는 DeepSeek Harness(DSH)와의 제한된 협업을 위한 Codex 우선 오케스트레이션 레이어이자 호출자 측 MCP 브리지입니다. Codex가 구현, 조사, 디버깅, 긴 로그 작업을 DSH에 위임한 다음, 평소 워크플로를 벗어나지 않고도 해당 세션을 관찰하거나 계속하거나 취소할 수 있습니다. Claude Code는 공유 호출자 통합 레이어를 통해 계속 지원되며, 다른 호출자는 호스트 동작이 검증될 때까지 의도적으로 보류됩니다.

이 저장소의 공유 브리지 런타임은 업스트림 dsh-Agentlink project를 독립적으로 유지보수한 파생 프로젝트입니다. 이 프로젝트는 업스트림 MIT 라이선스와 저작권 표기를 유지하며, DeepSeek, OpenAI 또는 업스트림 유지관리자와 제휴하거나 보증을 받지 않습니다.

프로젝트 경계

Codex-DSH-Orchestrator는 호출자 측 오케스트레이션 및 MCP 브리지 프로젝트입니다. 지원되는 호출자를 독립적으로 실행되는 DSH Web Host에 연결합니다. 이 프로젝트는 해당 Host를 시작, 소유, 인증하지 않으며 DSH 요청을 자동 승인하지 않습니다. DSH Cordis 번들이 아닙니다.

Related MCP server: deepseek-subagent-mcp

프로젝트 구성 요소

  • skill/codex-dsh-orchestrator/ — 프로젝트 전용 Codex 오케스트레이션 스킬 및 에이전트 메타데이터.

  • skill/codex-dsh/ — 공유 Codex 호출자 호환 스킬.

  • skill/claude-code-dsh/ — 유지 관리되는 Claude Code 호출자 호환 스킬.

  • src/ — 호출자 중립적인 공유 MCP 브리지 런타임 및 설치 도구.

  • test/ — 로컬 모의 호스트, 안전성, 호환성 및 통합 테스트.

  • docs/project-overview.md — 상세 소유권 및 아키텍처 맵.

dsh-Agentlink라는 이름은 호환성과 법적 명확성을 위해 런타임 식별자와 업스트림 귀속 표기로 남아 있으며, 공식 프로젝트 제목은 아닙니다.

호출자 지원

호출자

상태

설정 또는 사용 가능 여부

Codex

✅ 지원됨

npm run setup

Claude Code

✅ 지원됨

npm run setup:claude -- --project /absolute/path/to/project

ZCode

⏸ 보류됨

검증된 호출자 확장 작업이 재개되면 첫 번째 후보

OpenCode

⏳ 계획됨

아직 사용할 수 없음

Workbuddy

⏳ 계획됨

아직 사용할 수 없음

현재 이 저장소에서 설치 경로가 있는 항목은 지원됨으로 표시된 호출자뿐입니다. 계획됨 항목은 방향성일 뿐 출시 약속이 아닙니다.

설치

먼저 환경을 준비하세요. Node.js 22+, 지원되는 호출자(Codex 또는 Claude Code), 그리고 정상 작동하는 DSH CLI가 필요합니다. 테스트된 크로스플랫폼 기준은 x64 Node.js 22 및 24입니다. 다른 Node.js 메이저 버전과 ARM64 환경은 현재 테스트 매트릭스 범위에 포함되지 않습니다. DSH에서 원하는 모델을 한 번 구성하세요. 공유 브리지는 위임 에이전트가 지원되는 프로필을 명시적으로 요청하지 않는 한 그 활성 경로를 그대로 사용합니다.

이식성 및 설치 경계

  • 다른 머신에서는 새 클론을 사용하세요. 단일 워크트리 디렉터리를 복사하지 마세요. 해당 .git 파일은 소스 클론의 워크트리 메타데이터를 가리킵니다. 같은 머신에서는 소스 클론에서 git worktree add로 워크트리를 만드세요.

  • 깨끗하고 재현 가능한 체크아웃을 위해 npm ci를 우선 사용하세요. 의도적으로 lockfile을 업데이트하려는 경우에만 npm install을 사용하세요.

  • npm run setup은 절대 경로의 Node.js 실행 파일과 빌드된 브리지 진입점을 호출자 구성에 기록합니다. 체크아웃을 안정적인 도구 디렉터리에 유지하세요. 이동하거나 Node.js 설치를 변경하거나 다른 워크트리로 전환한 후에는 다시 빌드하고 setup을 다시 실행하고, 기존 항목을 검토한 뒤 명시적 승인이 있을 때만 --replace를 사용하세요.

  • Codex MCP 설정과 Codex 스킬 설치는 별개입니다. npm run setup은 MCP 항목을 등록하지만 skill/codex-dsh-orchestrator/는 설치하지 않습니다. 그 스킬은 평소의 Codex 스킬 워크플로를 통해 설치하고 활성화한 다음, $codex-dsh-orchestrator 명령을 신뢰하기 전에 발견 가능한지 확인하세요. Claude Code 설치 설정은 아래에서 설명하는 대로 프로젝트 스킬과 분리되어 관리됩니다.

  • DSH_BRIDGE_HOME은 신뢰할 수 있는 로컬 파일시스템에 두세요. 이전 브리지 홈을 다른 머신에 복사하지 말고, 그 머신에서는 새 홈을 사용하세요. DSH 대화 기록은 DSH Web Host에 속하며, 브리지 작업 매핑, 커서, 클레임은 자동으로 이전되지 않습니다.

  • Windows desktop-auto 방식은 옵트인입니다. 이미 실행 중인 DSH Desktop Host와 지원되는 Windows 프로세스/루프백 검색 전제조건이 필요합니다. CI는 이 동작들을 목킹하므로 실제 Desktop 설치나 로그인을 입증하지 않습니다. 셋업 위저드는 DSH Desktop을 시작하고 중지하거나 로그인하지 않습니다.

AI 에이전트로 설치

다음 저장소 URL과 프롬프트를 Codex나 다른 코딩 에이전트에 전달하세요.

Install Codex-DSH-Orchestrator from https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.
Check Node.js 22+, the DSH CLI, and my DSH Web Host first. Clone it into a location I approve,
run npm ci and npm run check. For Codex, run npm run setup -- --yes, then install and verify
the shipped Codex skill separately through my normal Codex skill workflow. For Claude Code, run
npm run setup:claude -- --yes --project /absolute/path/to/my/project.
For Claude Code, let setup install the project MCP entry and shipped project skill; use --replace and --replace-skill only after reviewing existing files.
If dsh_agentlink or the legacy dsh_collab entry already exists, show me the conflict before using --replace.
Do not start or stop dsh web for me. Tell me when I need to reload the selected caller and approve project MCP trust.

수동 설치

  1. 환경을 확인하세요. DSH CLI 0.1.0-rc.6이 현재 테스트 대상입니다.

    node --version
    dsh --version
  2. 공식 DSH Web Host를 별도의 터미널에서 시작하세요.

    dsh web
  3. 리포지토리를 클론하고 의존 패키지를 설치하세요.

    git clone https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.git
    cd Codex-DSH-Orchestrator
    npm ci
  4. 호출자를 설정하세요.

    For Codex의 경우:

    npm run setup
    npm run doctor

    Windows에서 DSH Desktop과 포트가 자주 바뀌는 루프백을 사용한다면 자동 검색을 명시적으로 선택하세요.

    npm run setup -- --desktop-auto

    Codex 위저드는 Codex TOML 구성을 백업하고 approval_mode = "prompt"로 MCP 항목을 설치합니다. skill/codex-dsh-orchestrator/는 설치하지 않습니다. 그 스킬은 평소 Codex 스킬 워크플로로 설치하고 사용토록 한 다음 발견 가능한지 확인하세요. 정적(staitc) 셋업은 여전히 sed --version 실행을 요구합니다. --desktop-auto는 CLI가 PATH에 없어도 이미 실행 중인 Desktop Host를 검증할 수 있고, 빠져 있는 패키지 버전을 호환성 경고로 보고합니다. 절대 DSH Desktop을 시작하거나 중지하지 않습니다. 기존 브리지 항목을 두 방식 중 하나로 전환하려면 항목을 검토한 뒤 --replace를 반드시 추가해야 합니다. Codex를 다시 시작한 다음 /mcp 또는 Codex Settings에서 dsh_agentlink가 연결되었는지 확인하세요. 완전 수동으로 TOML을 설정하려면 수동 Codex MCP 구성 문서를 참고하세요.

    Claude Code 2.1.199 이상인 경우 .mcp.json을 공유할 프로젝트를 지정해 셋업 명령을 실행하세요.

    npm run setup:claude -- --project /absolute/path/to/your/project
    cd /absolute/path/to/your/project
    claude mcp get dsh_agentlink

    Claude 셋업은 해당 프로젝트의 .mcp.json과 .claude/skills/claude-code-dsh/SKILL.md만 수정하며 관련 없는 서버 항목은 보존합니다. 다음 항목을 각각 보고합니다.

    • MCP 등록

    • 프로젝트 신뢰

    • Claude 스킬 상태

    • Claude 승인 지원

    • DSH 권한/샌드박스 소유권

    • DSH Host 연결성

    프로젝트에서 Claude Code를 열고 /mcp에서 대기 중인 서버를 승인하세요. 브리지는 dsh_resolve_approval을 사람의 조작이 필요한 것으로 표시합니다.

    무인 기본 실행을 하려면 --yes를 추가하세요. 기존 MCP 항목을 업데이트하려면 먼저 검토하고 --replace를 추가하고, 기존 Claude 프로젝트 스킬을 업데이트하려면 먼저 검토하고 --replace-skill을 추가하세요. 스킬을 직접 관리하려면 --no-skill을 추가하세요. 두 설치 프로그램은 모두 이전 dsh_collab 항목을 인식하며, 명시적 교체 승인 후에만 dsh_collab을 dsh_agentlink로 전환합니다. 두 설치 프로그램 모두 DSH를 시작하여, DSH 권한/샌드박스 설정을 바꾸지 않으며, 호출자를 재시작하지 않습니다.

doctor는 DSH_BRIDGE_HOME 아래 브리지의 fail-closed 잠금 위치를 읽기 전용으로 보고하고 절대 삭제하지 않습니다. 따라서 잠금이 있더라도 실행하기에 안전합니다.

이 소스 패치는 새 projection/chunk 플러드가 조정 원장(coordination ledger)를 확장하지 못하게 막지만, 기존의 5 MB 이상인 원장은 압축하지 않습니다. 검사를 위해 이전 브리지 홈은 보존하세요. 새 위임은 별도 DSH_BRIDGE_HOME을 사용할 수 있습니다. 대화의 원천은 브리지 원장이 아니라 DSH session.history에 있습니다. 보수적인 복구 경계는 알려진 이슈를 참조하세요.

이 브리지(러타임 이름 dsh_agentlink)는 호출자 측 플러그인이며 DSH Corda 번들이 아닙니다. dsh plugin --profile ... add ...로 설치하지 마세요.

왜 Codex-DSH-Orchestrator인가?

DSH의 Harness 기능 활용

DSH는 복잡한 작업을 위해 영속 세션, 도구 실행, 서브에이전트, 사람의 감독을 결합합니다. Codex-DSH-Orchestrator를 사용하면 주 호출자(현재 Codex 또는 Claude Code)가 같은 작업 환경에서 두 번째 Harness를 논의하고 조정할 수 있습니다.

또 하나의 네이티브 서브에이전트 그 이상

네이티브 서브에이전트는 여전히 호출자 자체 에이전트 트리 안에 있습니다. 공유 브리지는 별도의 사용자 설정 Harness를 추가합니다. 그 세션은 DSH Web에서 계속 보이며, DSH 자체 워커와 모델 라우트를 사용할 수 있고, 주 호출자가 관찰하거나 계속하거나 취소할 수 있습니다.

시간과 비용 절약

  • 시간 절약. 구현, 조사, 추출, 긴 로그 작업을 DeepSeek V4 라우트처럼 DSH에서 구성된 빠른 모델로 라우팅하고, 주 에이전트는 계획과 검증을 계속하세요.

  • 비용 절약. 실행 중심 워크로드를 저렴한 DeepSeek 라우트로 옮기면 비싼 주 모델의 소모를 줄일 수 있습니다.

실제 속도와 비용은 선택한 모델·공급자·배포·네트워크·작업에 따라 달라집니다. 설치 후에는 평소처럼 Codex나 Claude Code에서 계속 작업하다가, DSH가 더 나은 실행 경로일 때 상속요청하면 됩니다.

사용 방법

dsh web 실행 중이고 호출자가 MCP 설정을 로드하고 신뢰했다면, Codex나 Claude Code에 자연어로 요청하세요. 예:

Codex-DSH-Orchestrator를 사용해 현재 저장소에서 이 구현을 DSH에 의해 위임하고, DSH Web에서 계속 볼 수 있게 하며, 진행 상황을 보고하고 승인 전에 먼저 문의하세요.

그러면 호출자는 작업을 위임하고 그 이벤트 스트림을 관찰하고, 같은 세션을 계속하고, 답변을 받거나 작업을 취소할 수 있습니다. 구성된 DSH Web origin을 열어 동일한 세션을 검사하고 조작할 수 있습니다. Windows에서 옵트인 DSH_HOST_MODE=desktop-auto 런타임은 자주 바뀌는 임시 포트를 사용하는 대신 DSH Desktop이 소유한 검증된 루프백 리스너를 발견할 수 있습니다. 명시적인 DSH_HOST_URL은 항상 우선합니다.

새로 일임하기 전에 호출자는 이미 알려진 진행사실과 읽기 전용 작업공간 증거(목표, 완료 작업, 가능한 Git HEAD/status 및 변경 경로, 관련 코드/Markdown 경로, 관련 테스트, 제약 조건, 미해결 이슈)을 압축 핸드오프 형태로 구성합니다. DSH에게 핵심 경로를 먼저 읽고, 막히지 않는 한 저장소전체 스캔을 피하라고 지시합니다. 핸드오프에는 비밀 값, 원본 대용량 diff, 파일 본분, 호출자 대화, 내부 추리를 포함하지 않습니다. 이는 호출자를 위한 안내이지 새 파일시스템 권한이 아닙니다. dsh-Agentlink는 이전 호출자 대화 상태를 자동으로 받지 않습니다. 동일한 BridgeTask에 대해서 호출자는 dsh_followup을 사용하며, 일치하는 task id를 알 수 없으면 임의의 이전 id를 추측하지 않고 새 임대를 시작합니다.

사용자가 기존 DSH Desktop 세션을 명시적으로 식별했을 때, 호출자는 먼저 dsh_find_sessions로 범위가 한정된 루트 세션 메타데이터을 읽은 다음, 반환된 정확한 세션 id와 새 메타데이터 전제조건으로 dsh_attach_session을 사용할 수 있습니다. 세션 제목은 전달 탐색 도구일 뿐 첨부자 정체는 아닙니다. 첨부는 오류 id가 아닌 유휴 루트 세션만 받아들이며 브리지 로컬 매핑/작업공간 소유 상태를 생성하거나 재활용하고, 대화 본문을 반환하거나 유지하지 않고 감독을 위해 history를 조정할 수 있습니다. 이 과정은 DSH 세션을 만들거나 이름을 바꾸거나, 프롬프트를 내보내지 않으며 모델 라우팅을 바꾸지 않습니다. 이후 작업을 계속해야 할 때 후속 dsh_followup이 압축 핸드오프를 전달합니다.

Codex 작업에 걸쳐 세션을 재사용하는 것은 보수적인 세 가지 선택입니다: same-known-task, attached-existing-task, 또는 new-session입니다. 동일한 작업 스트림에 대해서만 동일한 알려진 BridgeTask를 재사용하십시오. 명시적 연속 증거가 있는 새 작업의 경우, 메타데이터 전용 dsh_find_sessions를 통해 정확히 하나의 canonical-cwd, 매핑된, 유휴 루트 세션을 찾아 dsh_followup로 계속하기 전에 최신 사전 조건으로 연결하십시오. 제목이나 유사성으로 재사용하지 말고, discovery를 위해 기록을 읽지 마십시오. 모호하거나, 실행 중이거나, 오래되었거나, cwd가 없거나, 매핑 충돌이 있는 후보는 fail closed 방식으로 실패하십시오. 재사용은 핸드오프와 저장소 읽기 작업을 절약할 수 있지만 입력 토큰을 증가시킬 수 있으므로, 연속성이 여전히 유효한 동안에만 비용 최적화로 작용합니다. 재사용과 재검색 회피는 공급자 프롬프트 캐시 적중이나 토큰 할인을 증명하지 않습니다. 공급자 캐시 증거는 DSH가 문서화된 집계 사용량 텔레메트리를 공개하지 않는 한 노출되지 않습니다.

MCP 도구

  • dsh_host_status — connect 전용 Host 상태 및 기능

  • dsh_find_sessions — 기존 루트 세션의 제한된 메타데이터 전용 검색; 기록이나 raw 프로젝션 없음

  • dsh_attach_session — 최신 id/title/cwd/update 사전 조건을 사용해 정확히 하나의 유휴 루트 세션에 안전하게 연결; 프롬프트나 모델 변경 없음

  • dsh_delegate — 루트 세션을 생성하고 초기 프롬프트를 큐에 넣습니다. 선택적으로 inherit|flash|pro|modlens-flash|modlens-pro 및 카탈로그가 지원하는 reasoningEffort를 선택할 수 있습니다. 기본적으로 분리되어 있습니다(waitSeconds=0). workspaceMode는 브리지 로컬 클레임이며 DSH 샌드박스 선택자가 아닙니다.

  • dsh_followup — 동일한 루트 세션을 명시적 mode="queue"|"steer"(기본 queue)로 계속합니다. 프롬프트 전에 동일한 의미론적 모델 프로필과 검증된 추론 노력을 선택적으로 선택할 수 있습니다.

  • dsh_continue — dsh_followup의 호환성 별칭

  • dsh_status — 가용성, 실행, 계보, 큐, 보류 중인 상호작용, 최종 메시지, 커서, 워크스페이스 클레임 의미론

  • dsh_tail — 브리지 작업 커서를 사용한 제한된 이벤트 요약

  • dsh_wait — 지속 이벤트, 상태 변경, 보류 중인 상호작용 또는 종료 상태를 최대 30초 대기

  • dsh_observe — dsh_wait의 호환성 별칭; 브리지 커서가 raw 세션 seq 커서를 대체합니다

  • dsh_cancel — scope="turn"|"queue"

  • dsh_list — 파생된 현재 상태로 보강된 작업 매핑 목록

  • dsh_answer_question — 대기 중인 질문 rpcId에 대한 형식화된 답변

  • dsh_resolve_approval — 대기 중인 승인 rpcId에 대한 형식화된 allow_once|reject 응답

  • dsh_release_workspace — DSH 세션을 닫지 않고 영구적인 브리지 워크스페이스 클레임을 명시적으로 해제

모델 라우팅은 위임과 후속 작업 모두에 대해 옵트인(opt-in) 방식이며 이전 버전과 호환됩니다. modelProfile과 reasoningEffort가 생략되면 작업은 session.models.current를 읽고 routable을 확인하며 session.selectModel을 호출하지 않습니다. 의미론적 매핑은 flash/pro -> deepseek-official/deepseek-v4-{flash,pro}이고, modlens-flash/modlens-pro -> deepseek-modlens/deepseek-v4-{flash,pro}입니다. 요청한 제공자, 모델, 추론 노력은 실행 중인 session.models 카탈로그에 존재해야 합니다. 선택은 초기 또는 후속 프롬프트 전에 실행되고 다시 읽힙니다. 불일치가 있으면 프롬프트를 전송하지 않고 fail closed 처리합니다.

명시적 사용자 선택이 항상 우선합니다. 명시적 선택이 없으면 주요 호출자는 inherit를 유지하고, 일상적인 검색/구현/테스트 수리에 Flash를, 아키텍처 또는 어려운 다단계 디버깅에 Pro를, 시각적 증거가 필수적일 때 해당 ModLens 프로필을 사용할 수 있습니다. dsh-Agentlink는 텍스트 프롬프트만 전송합니다. DSH Host와 ModLens 도구가 접근할 수 있는 절대 로컬 이미지 경로를 포함하되 이미지 바이트는 업로드하지 않습니다. selectionReason은 선택적 감사 근거를 제공하며 DSH로 전송되지 않습니다.

로컬에서 검증된 DSH rc.6 collapsed Code Mode 경로에서, 시각적 핸드오프는 외부 run_code 전송을 사용하고, 그 프로그램 내부에 주입된 tools SDK를 통해 등록된 modlens_read_image를 호출합니다. 호출자는 이 외부 이벤트를 예상된 것으로 취급하고, 셸/브라우저/OCR/이미지 라이브러리 폴백을 금지하며, 중첩된 결과 또는 명시적인 중첩/종료 오류를 기다려야 합니다. 플러그인의 문서화된 내부 제한 시간은 전체 위임 데드라인이 아닙니다. 이것은 버전 범위로 한정된 호환성 지침이며, 이후 Host는 검증된 실제 기능이 다를 경우 이를 따라야 합니다.

중요한 DSH rc.6 부작용: session.selectModel은 선택을 이후 세션을 위한 DSH의 전역 기본값으로도 저장합니다. 위임 및 후속 결과는 명시적 선택이 언제든지 modelRouting.persistsAsDshDefault=true 및 경고를 보고합니다. 해당 유지가 허용되지 않으면 라우팅 필드를 생략하십시오. 삽입 기도 후 선택 검증에 실패하면 프롬프트는 전송되지 않지만, 요청한 선택은 이미 DSH의 전역 기본값으로 되어 있을 수 있습니다.

dsh_wait는 지속적인 브리지 상태를 관찰합니다. 어시스턴트 델타/청크 프레임 및 최상위 session/projection 스냅샷은 건너뜁니다. 따라서 이들은 작업 버전을 증가시키거나 대기자를 깨우지 않습니다. 종료된 후에도 최종 메시지 전체는 상태/테일(tail)을 통해 계속 관찰 가능합니다.

로드맵

다음은 계획된 방향일 뿐이며, 구현된 기능 또는 릴리스 약속은 아닙니다.

  1. 더 많은 호출자 진입점 — 호출자 확장이 재개되면 ZCode를 먼저 평가하고, 이후 OpenCode, Workbuddy, Claude Desktop MCP 및 기타 호출자를 공유 Integration Pack 아키텍처로 고려합니다.

  2. 에이전트 호출 및 정보 전송 — 질문, 승인, 오류, 최종 답변의 신뢰성을 유지하면서 프롬프트 구성, 컨텍스트 패키징, 출력 다이제스트 및 압축을 개선합니다.

  3. DSH 플러그인 인지 세션 — 프리셋 기반 플러그인의 현재 agentPreset 경로를 유지하고, 읽기 전용 프리셋/역량 검증 및 확정 프리셋 보고를 추가하며, 플러그인이 형식화된 후속 생성 초기화가 실제로 필요함을 입증할 때만 선언적 세션 시작 프로파일을 도입합니다.

  4. 더 많은 통합 — 공유 Runtime과 호출자 호환성 계약이 안정화된 후 확장합니다.

추가 문서

라이선스

MIT

알파 노트: DSH는 아직 개발자 프리뷰 상태이며, 이 커뮤니티 프로젝트는 DeepSeek 및 OpenAI와 독립적입니다. 0.1.0-alpha.1에는 shared-ledger 동시성 버그가 있으며, 0.1.0-alpha.2에서 수정되었습니다. 업그레이드하거나 동시 브리지 프로세스를 실행하기 전에 알려진 이슈를 읽으십시오.

Available Tools

15 tools
dsh_answer_questionA

Answer one currently pending typed DSH question request. The requestId, task lineage, question ids/order, and selections are validated locally before one non-retried /api/respond write.

NameRequiredDescriptionDefault
taskIdYes
answersYes
requestIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (all false), the description adds meaningful behavioral detail: validations are performed locally, the operation results in exactly 'one non-retried /api/respond write'. This discloses retry semantics and the mutation path, which is useful for an agent deciding whether to invoke or expect idempotency. It does not contradict any annotation; readOnlyHint false aligns with 'write'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description earns its two sentences. The first sentence front-loads the core action in clear terms, and the second adds dense behavioral context without fluff or redundant repetition of the schema. Every phrase contributes to helping an agent understand the tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter write tool with no output schema, the description is largely complete: it explains the core action, known validation, and write behavior. Optional parameters like sinceCursor and expectedRevision lack any contextual hint in the description or schema property descriptions, which is the main gap preventing a perfect score.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema description coverage at 0%, the description carries the naming burden. It partially succeeds by referencing 'requestId', 'task lineage', 'question ids/order', and 'selections', mapping loosely to requestId, taskId, answers[].id, and answers[].selected. However, optional parameters sinceCursor and expectedRevision are omitted, and there is no explicit mapping to the schema's custom field or the shape of the answers array.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action ('Answer') and resource ('one currently pending typed DSH question request'), making it immediately obvious what the tool does. It lacks an explicit distinction from sibling tools like dsh_continue or dsh_followup, but the phrase 'currently pending typed DSH question request' narrows the purpose enough for an agent to separate it from general session or status tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'currently pending typed DSH question request' implies when to use the tool: when there is a pending question to be answered. However, the description does not explicitly say when not to use it or which sibling alternative to prefer (e.g., dsh_continue, dsh_followup). Usage guidance is implied rather than stated, leaving some room for an agent to misroute a call.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_attach_sessionA

Attach one idle existing root DSH session to the bridge using its exact sessionId and fresh discovery preconditions. This creates or reuses bridge-local mapping/claim state and starts normal supervision reconciliation: it does not prompt DSH, create or rename a DSH session, return or persist conversation bodies, or change model routing. After success, use dsh_followup with a compact handoff when work should continue.

NameRequiredDescriptionDefault
sessionIdYes
allowBlankNo
expectedCwdYesAbsolute cwd copied from the selected dsh_find_sessions result.
expectedTitleYesExact title copied from dsh_find_sessions, including null when no title is present.
workspaceModeNoBridge-local cooperative workspace claim only; it does not configure the DSH sandbox.exclusive-write
expectedUpdatedAtYes

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are all false, giving little guidance beyond the lowest-level safety flags. The description compensates well by stating that it creates/reuses bridge-local state, starts reconciliation, and will not perform a list of DSH-related mutations or data transformations. It does not cover failure modes, error returns, or potential side effects on the bridge beyond what is described, but the core behavior is laid out clearly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three front-loaded sentences: the action, the effects/exclusions, and the follow-up instruction. It is effective and relevant. It is slightly dense with multiple compound clauses, but every phrase adds behavioral or routing value, so it is not wasted text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description carries the burden of saying what happens on success: creating/reusing mapping/claim state and starting supervision, with a defined next step. It nicely scopes out many side effects (does not prompt, create, rename, persist, or route). What is missing is any guidance on failure cases, e.g., what happens if the discovery preconditions don't match, or whether the tool can outright fail. That keeps it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema descriptions cover 50% (expectedCwd, expectedTitle, workspaceMode). The description adds a small amount of contextual glue by calling the expected fields 'fresh discovery preconditions' and emphasizing 'exact', which clarifies expectedUpdatedAt and expectedTitle. But it does not explain allowBlank at all, and the role of expectedUpdatedAt is only inferable as a precondition after attaching session's stale or not. This is better than empty, but does not fully close the schema's coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb-resource pair: 'Attach one idle existing root DSH session to the bridge using its exact sessionId and fresh discovery preconditions.' It also enumerates what the tool does not do (prompt DSH, create or rename sessions, return/persist conversations, change routing), which effectively distinguishes it from sibling tools such as dsh_followup and dsh_delegate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear triggers: attach when there is an idle existing root DSH session and you have exact sessionId plus fresh discovery preconditions. It also states the follow-up path ('After success, use dsh_followup with a compact handoff when work should continue'), which is useful routing guidance. It stops short of explicitly listing alternatives to not use under certain circumstances, and could have said 'do not use if the session is not idle'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_cancelA
Destructive

scope=turn cancels only the active root turn and preserves queued work. scope=queue non-atomically removes each item from the latest mux queue snapshot.

NameRequiredDescriptionDefault
scopeNoturn
taskIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as destructive, and the description adds genuinely useful behavior beyond that: the turn scope explicitly preserves queued work, and queue removal is described as non-atomic and based on the latest mux queue snapshot. This is meaningful transparency about what gets destroyed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, front-loads the primary scope behavior, and either sentence earn its place. No redundant text, no restating of the tool title or generic cancellation wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive 4-parameter tool with no output schema, the description does not explain return behavior, partial failure states, or the semantics of sinceCursor/expectedRevision. The scope behavior and non-atomic queue removal are helpful, but important invocation context is still missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage and the description only explains the scope enum. taskId, sinceCursor, and expectedRevision are left completely unexplained, so the agent cannot infer the meaning of important parameters like optimistic concurrency guards or cursor-based synchronization.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states concrete behavior for each scope: scope=turn cancels the active root turn and preserves queued work, while scope=queue removes queued items. It is clear about what the tool operates on, though it does not explicitly distinguish itself from sibling tools by name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for choosing a scope, including that it not’s queued work and that queue removal is non-atomic. It does not provide when-not-to-use guidance or name alternatives like dsh_continue or dsh_release_workspace, so it stops short of very explicit routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_continueA

Compatibility alias for dsh_followup. Continue the same known BridgeTask and root DSH session instead of creating another delegation for the same work. Never guess an old task id; start a fresh delegation when no matching task id is known. queue targets the next turn; steer targets the active turn's next step. Optional semantic model routing is catalog-validated and re-read before the prompt; selection failure sends no prompt, but an attempted session.selectModel may already have persisted as the DSH global default. Omit routing to inherit. The write is never automatically retried.

NameRequiredDescriptionDefault
modeNoqueue
promptYes
taskIdYes
sinceCursorNo
modelProfileNoOptional semantic route selected and re-verified before this follow-up prompt; omit to inherit the session route. Explicit selection persists as the DSH default.
reasoningEffortNoOptional effort id advertised by the selected live session catalog model.
selectionReasonNoOptional audit explanation for the route choice; never sent to DSH.
expectedRevisionNo

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Although annotations provide no safety hints and idempotentHint=false, the description exposes non-obvious behavior: model routing is catalog-validated and re-read before the prompt, failure may skip the prompt but can still persist a selectModel global default, and 'the write is never automatically retried.' This is exactly the kind of behavioral context an agent cannot infer from the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but not bloated; every sentence contributes meaningful guidance. It front-loads purpose and task-id safety rules, then details routing and retry semantics. Minor structural improvement would be grouping routing caveats more cleanly, but the overall length is appropriate.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the absence of an output schema and the complexity of the tool, the description covers critical fallback behavior and model-routing pitfalls. It is not fully complete because it omits the meaning of sinceCursor/expectedRevision and any return-value guidance, which would matter to an agent trying to verify the tool's result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 38%, and the description valuably annotates mode, model routing, and the task-id rule. However, key parameters such as sinceCursor and expectedRevision are never mentioned, and prompt is only implicit. The description partially compensates for the low coverage but leaves important gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Compatibility alias for dsh_followup' and specifies the exact operation: 'Continue the same known BridgeTask and root DSH session.' It also distinguishes this tool from creating another delegation, so an agent can clearly recognize its role relative to siblings like dsh_delegate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit decision rules: use this when a matching task id is known, and 'start a fresh delegation when no matching task id is known.' It also clarifies mode boundaries ('queue targets the next turn; steer targets the active turn's next step'), which is strong guidance for correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_delegateA

Create a root session on the configured official DSH Web Host and queue the initial prompt. Before calling, put a compact handoff in prompt from known progress plus read-only Git/workspace evidence; identify focus paths and tell DSH to read those focus paths first instead of scanning the whole repository unless blocked. An explicit user choice of modelProfile or reasoningEffort always takes precedence. Otherwise the caller may choose pro for complex work and a modlens profile for visual work whose local image paths are included in the prompt; omit routing fields to inherit DSH's configured model. Explicit selection uses session.selectModel, which also persists the selection as the DSH default for later sessions. Detached by default. workspaceMode is only a bridge-local cooperative claim and does not select or verify the DSH sandbox.

NameRequiredDescriptionDefault
cwdYesExisting absolute directory visible to the DSH Host.
titleNo
promptYes
agentPresetNoDSH agent composition/preset name. This does not express workspace ownership or verified sandbox policy.
waitSecondsNo
modelProfileNoSemantic route: flash/pro use deepseek-official; modlens-flash/modlens-pro use deepseek-modlens for visual work; inherit keeps the current route. Explicit user choice takes precedence over caller heuristics.
workspaceModeNoBridge-local cooperative workspace claim only; it is not a DSH Host filesystem sandbox selector or verifier.exclusive-write
reasoningEffortNoOptional effort id. It must be advertised by the selected model in session.models.
selectionReasonNoOptional audit explanation for the caller's explicit or autonomous profile choice; never sent to DSH.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

It discloses several non-obvious behaviors: the call is detached by default, explicit model selection persists as the DSH default via session.selectModel, and workspaceMode is only a cooperative local claim, not a sandbox verifier. These go beyond the uninformative annotations. The description doesn't say what the call returns, but it still carries substantial transparency burden well.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the main purpose and then organized around actionable instructions. It is longer than minimal but each sentence earns its place; the only slight redundancy is repeating that explicit user choices take precedence before explaining session.selectModel persistence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and several complex fields, the description completes most of the Agent's decision loop: what to prepare, how to route, and why workspaceMode is not a sandbox claim. It leaves a small gap by not stating what the call returns or how to coordinate with dsh_wait, dsh_find_sessions, and dsh_attach_session, but those appear as siblings and are inferable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 67%, and the description adds meaning beyond the schema for prompt construction, modelProfile routing and precedence, and the workspaceMode caveat. It doesn't elaborate on waitSeconds or the literal return identity, but the most decision-critical parameters are given practical semantic context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence clearly states the action: "Create a root session on the configured official DSH Web Host and queue the initial prompt." It identifies a specific verb and resource, and the "root session" phrasing distinguishes it from sibling attach/followup tools that work on existing sessions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives concrete pre-call guidance: include a compact handoff with read-only evidence, identify focus paths, and tell DSH to read those first. It also explains when to choose pro versus modlens profiles and when to omit routing fields. It does not explicitly name "use dsh_attach_session instead for existing sessions," but the focus on initial root session makes the intended case clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_find_sessionsA
Read-onlyIdempotent

Read bounded metadata for existing root sessions from DSH session.list. It can filter titles exactly or by a case-sensitive substring, or narrow candidates by an exact canonical cwd, an unambiguous BridgeTask mapping, or idle state; it returns no history or raw projections. These filters narrow candidates but never authorize automatic selection, history reads, attachment, or prompting. Use the returned exact sessionId and precondition fields with dsh_attach_session; never select a session by title alone.

NameRequiredDescriptionDefault
cwdNoOptional absolute existing workspace path; matches only sessions whose advertised cwd resolves to the same canonical directory.
titleNo
idleOnlyNoReturn only sessions whose root turn is not running.
mappedOnlyNoReturn only sessions with one unambiguous existing BridgeTask mapping.
maxResultsNo
titleMatchNoexact
includeBlankNo

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive behavior, and the description adds valuable limits beyond annotations: it returns no history/raw projections, filters never authorize automatic selection or attachment, and results are limited to bounded metadata. This gives an agent a precise behavioral contract.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the core operation and followed by filter semantics and a critical usage warning. Every sentence earns its place; there is no redundant filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter tool with no output schema and only 43% schema description coverage, the description covers the main purpose, key filters, return usage, and boundary behavior. It omits maxResults and includeBlank semantics, so it is not fully complete, but it is notably stronger than the median tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description maps four semantic filters to parameters: exact/case-sensitive title matching (title/titleMatch), canonical cwd (cwd), idle state (idleOnly), and BridgeTask mapping (mappedOnly). However, schema coverage is only 43%, and maxResults and the opaque includeBlank are never explained. The description partially compensates but leaves real gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Read bounded metadata for existing root sessions from DSH session.list.' It then lists the exact filter dimensions and states what the tool does not return ('no history or raw projections'), which clearly separates it from session-history and attach-type siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit downstream directive: use the returned exact sessionId and precondition fields with dsh_attach_session, and never select a session by title alone. It does not fully enumerate when to prefer this tool over every sibling, but it gives strong context on how to consume the result.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_followupA

Continue the same known BridgeTask and root DSH session instead of creating another delegation for the same work. Never guess an old task id; start a fresh delegation when no matching task id is known. queue targets the next turn; steer targets the active turn's next step. Optional semantic model routing is catalog-validated and re-read before the prompt; selection failure sends no prompt, but an attempted session.selectModel may already have persisted as the DSH global default. Omit routing to inherit. The write is never automatically retried.

NameRequiredDescriptionDefault
modeNoqueue
promptYes
taskIdYes
sinceCursorNo
modelProfileNoOptional semantic route selected and re-verified before this follow-up prompt; omit to inherit the session route. Explicit selection persists as the DSH default.
reasoningEffortNoOptional effort id advertised by the selected live session catalog model.
selectionReasonNoOptional audit explanation for the route choice; never sent to DSH.
expectedRevisionNo

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations show the tool is not read-only and not idempotent, but the description adds important behavioral context: the write is never automatically retried, and an attempted session.selectModel may persist as the DSH global default even when selection fails. This goes beyond what the annotations say, though it does not cover all possible side effects like auth failures or destruction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but well organized: core purpose first, followed by a guardrail about task IDs, then mode behavior, routing caveats, and retry semantics. Each sentence earns its place and there is minimal redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a write tool with no output schema and 8 parameters, the description covers the essential behavior needed to select the tool and make a correct call, including the no-guess rule, mode semantics, routing side effects, and no automatic retry. It is not fully complete because some non-required paramters like expectedRevision and sinceCursor remain semantically under-specified and the description does not mention what the agent should expect in return.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds real semantics for mode and model routing: queue targets the next turn, steer targets the active turn's next step, and routing can be omitted to inherit the session route. However, schema description coverage is low at 38%, and parameters like sinceCursor and expectedRevision are not explained in the description, leaving gaps for an agent that needs to use them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action: continue the same known BridgeTask and root DSH session rather than creating a new delegation for the same work. It also gives a clear decision rule about known vs unknown task IDs, which helps distinguish the tool from sibling tools like dsh_delegate and dsh_continue.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use the tool, when not to use it, and what to do instead: never guess an old task ID and start a fresh delegation if no matching task ID is known. It also clarifies the queue and steer modes and the consequences of selection failure, leaving little ambiguity about correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_host_statusA
Read-onlyIdempotent

Report the connect-only bridge state and current official DSH Web Host capabilities.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already disclose that this is read-only and idempotent, and the description reinforces that by saying 'report.' It adds some context about what is reported but does not disclose return format or potential operational behavior such as network dependency or staleness. No contradiction exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, information-dense sentence with no filler. Every phrase contributes meaning, and the main subject is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only status tool with strong annotations, this description is adequate. It could be slightly more complete by saying what shape the report takes or what counts as a 'capability,' but the operational risk and ambiguity are low.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantic burden on the description. The schema is empty and correctly set to disallow additional properties.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Report') and names the two things being reported: the connect-only bridge state and DSH Web Host capabilities. It is reasonably specific, though it does not explicitly differentiate itself from the sibling dsh_status tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus alternatives like dsh_status or dsh_observe. It implies a general status-checking use case but does not state exclusions or conditions for selecting another sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_listA
Read-onlyIdempotent

List bridge task mappings enriched with current derived DSH status and bridge-local workspace claim semantics when the Host is reachable.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint, idempotentHint, and destructiveHint false. The description adds meaningful behavioral context by mentioning 'current derived DSH status' and 'bridge-local workspace-local claim semantics', which are beyond what annotations reveal. It also conditionally scopes enrichment to Host reachability, although it does not specify behavior when the Host is unreachable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one sentence, front-loaded with the action and resource, and uses no filler. It packs the key qualifiers (status enrichment, local workspace-local semantics, Host reachability) into a compact but coherent phrase. Every element contributes meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With zero parameters and no output schema, an agent relies almost entirely on this description to understand what it will get. The description says mappings are enriched, but never describes the return shape, ordering, or what happens when Host is unreachable. It is enough for basic selection, but incomplete for confidently predicting behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, and the schema coverage is complete by that baseline. There is therefore no parameter-semantic gap for the description to fill. Per the rubric, zero-parameter tools receive a baseline score of 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action and resource: 'List bridge task mappings' with enrichment. It clearly indicates this is a read-only listing of bridge task mappings, which differentiates it in topic from most siblings. However, it does not explicitly distinguish itself from dsh_find_sessions or dsh_status, so sibling differentiation is only implied.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'when the Host is reachable' hints at an operating condition, and calling the tool after 'bridge task mappings' suggests it is for enumerating current mappings. But the description never states when the tool should be preferred over siblings or when not to use it. The usage is implied rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_observeB
Read-onlyIdempotent

Compatibility observation alias. Prefer dsh_wait plus dsh_tail task cursors.

NameRequiredDescriptionDefault
taskIdYes
afterCursorNo
waitSecondsNo

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already communicate read-only, idempotent, and non-destructive behavior, so the description's burden is lower. The description adds deprecation/compatibility context and indicates that the intended operation is covered by dsh_wait plus dsh_tail, which is behavior that annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Both sentences are short and front-loaded, and there is no wasted wording. It loses a point because the description is under-specified rather than merely concise, especially around what the compatibility alias does and how its parameters behave.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a compatibility-only alias, the description provides adequate routing and safety context. However, because there is no output schema and the description never states what the call returns or how cursor/wait semantics behave, the overall picture is incomplete for an agent that actually needs to invoke this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not compensate at all, saying nothing about taskId, afterCursor, or waitSeconds. An agent must infer the meaning of all three parameters from bare names, patterns, defaults, and constraints, which is insufficient for correct invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description identifies dsh_observe as a 'compatibility observation alias' and points to dsh_wait/dsh_tail, so an agent knows roughly where it belongs. However, it never states what the observation actually does, what resource it targets, or what kind of result the agent should expect, leaving the purpose somewhat vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Prefer dsh_wait plus dsh_tail task cursors" is an explicit routing instruction with named alternatives, which is genuinely useful. What is missing is the corresponding 'when not to use' and 'when it is acceptable to use this compatibility alias' guidance, though 'compatibility' provides part of that context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_release_workspaceA
Destructive

Explicitly release this bridge task's persistent workspace claim. This does not close the DSH session or stop other clients from editing the directory.

NameRequiredDescriptionDefault
taskIdYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the operation as non-readonly and potentially destructive, but the description adds valuable behavioral context: it releases a claim while leaving the session open and not affecting other clients' editing. This goes beyond the annotations with meaningful side-effect disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two crisp sentences deliver the core action and the key negative side effect without redundant framing. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter operation with this scope, the description fully covers the action, the affected resource, and the main misinterpretation risk. The absence of an output schema does not leave a serious gap because the tool's primary purpose and non-effects are clearly stated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema only defines taskId with a pattern and provides no description. The tool description references 'this bridge task's persistent workspace claim,' which suggests taskId identifies the relevant bridge task, but it does not explicitly explain the parameter semantics or where the value comes from in the schema. With schema coverage at 0%, the description could compensate more.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('release') with a specific resource ('persistent workspace claim') and immediately clarifies the boundary ('does not close the DSH session...'). This clearly identifies what the tool does and distinguishes it from session-level or editing commands.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'explicitly release this bridge task's persistent workspace claim' makes the intended situation clear, and the statement about not closing the session or blocking other clients provides a useful when-not condition. It does not name alternative sibling tools, but the exclusion is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_resolve_approvalA
Destructive

Resolve one pending DSH sandbox-escalation approval as allow_once or reject. Never auto-allows; keep this tool behind the caller's human approval prompt before permitting allow_once.

NameRequiredDescriptionDefault
taskIdYes
outcomeYes
requestIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare destructiveHint=true, readOnlyHint=false, and idempotentHint=false. The description adds a policy-level behavioral trait: the tool does not auto-allow and must be gated by human approval. However, it does not disclose what actually changes on allow_once vs reject, such as side effects to the DSH sandbox or any return feedback.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler: the first states the core action and allowed outcomes, the second gives the critical safety guardrail. It is front-loaded and all content is relevant to safe invocation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter mutation with no output schema, this description is thin. It does not explain what the optional sinceCursor and expectedRevision are for, how a pending approval is selected, or what the result of resolving one is. The safety guardrail is useful, but the rest of the invocation context is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it only repeats the allow_once/reject concept from the outcome enum. It gives no semantics for taskId, requestId, sinceCursor, or expectedRevision; the agent has to rely on parameter names and schema constraints alone to understand how to identify and resolve the right pending request.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action ('Resolve') applied to a specific resource ('one pending DSH sandbox-escalation approval') and states the two possible outcomes ('allow_once or reject'). This is precise and clearly distinguishes the tool from the listed sibling tools, none of which are described as resolving the approval workflow.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a direct operational constraint: never auto-allow and keep the tool behind the caller's human approval prompt before using it to allow_once. This tells the agent when it is appropriate to invoke this tool. It doesn't explicitly compare against alternative tools, but no sibling appears to serve the same approval-resolving purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_statusB
Read-onlyIdempotent

Return separate availability/execution state, root and descendant sessions, queue depths, pending interactions, final message, bridge cursor/watermarks, and bridge-local workspace claim semantics.

NameRequiredDescriptionDefault
taskIdYes

TDQS

B3.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds value by revealing the shape of the returned state: separate availability/execution state, root versus descendant sessions, queue depths, pending interactions, and bridge-local workspace semantics. This clarifies what the status contains beyond what the generic read-only annotation implies.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Everything is packed into one dense, roughly 30-word sentence with no filler or repeated structured data. It is front-loaded with the action 'Return' and then lists distinct pieces of state. The slash-separated enumeration is compact, though slightly harder to parse than a structured list would be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only one-parameter tool, the description gives a good sense of what the output will cover and the input schema covers the expected ID format. However, the terms 'bridge cursor/watermarks' and 'bridge-local workspace claim semantics' are not explained, and there is no output schema to clarify the exact return representation. This leaves interpretation gaps for an agent despite the invocation being straightforward.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has one required parameter, taskId, with a pattern but no written semantics, and the description does not explicitly explain what taskId refers to. However, the tool name and the status content strongly imply taskId is the dsh task being inspected. The parameter is self-evident enough to be callable, but the description does not compensate for the missing parameter documentation in a meaningful way.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a clear verb 'Return' and names a specific resource: the status object containing availability/execution state, sessions, queue depths, pending interactions, final answer, and bridge-related cursors/watermarks. It distinguishes itself from siblings like dsh_host_status and dsh_find_sessions by listing compound status content, but it does not explicitly state that the tool returns this for the given taskId.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use dsh_status versus dsh_wait, dsh_tail, dsh_observe, or dsh_continue. The description implies this is a read-only snapshot, but it never states that it is non-blocking, that it should be used for a point-in-time check, or that other tools cover waiting/tailing/observing behavior.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_tailB
Read-onlyIdempotent

Read bounded event digests using bridge coordination cursors. Conversation content is fetched from DSH history when reachable and is never copied into bridge persistence.

NameRequiredDescriptionDefault
taskIdYes
maxBytesNo
maxEventsNo
sinceCursorNo

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, and non-destructive behavior. The description adds useful beyond-annotation context: content is fetched from DSH history when reachable and is never copied into bridge persistence. This helps the agent understand external reachability and data-hygiene semantics, though failure behavior when history is unreachable is not disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences from the core behavior without fluff. The action, the resource, the mechanism, and the key data-handling constraint are all stated efficiently and front-loaded into the first sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description is responsible for shaping an adequate mental model. It does not explain the meaning of the four parameters, how a cursor should be obtained or advanced, or what a digest structurally contains. The description is useful but not complete enough for a correct invocation beyond trial and error.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, so the description must compensate for the undocumented parameters. It hints at the 'bounded' nature of maxBytes/maxEvents and at 'cursors' for sinceCursor, but it never maps these concepts to any named parameter or explains their roles. taskId remains completely unaddressed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('Read') and resource ('bounded event digests'), so an agent knows what the tool does. It also adds the mechanism ('bridge coordination cursors'), though it does not explicitly differentiate it from sibling tools like dsh_observe or dsh_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives. The phrase 'bounded event digests' implies a history/tail-style use case, but the description never states conditions, exclusions, or which sibling tool might be more appropriate. This is essentially absent guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_waitA
Read-onlyIdempotent

Wait at most 30 seconds for a new task cursor, status/availability change, terminal state, or pending interaction. It never waits for whole-task completion.

NameRequiredDescriptionDefault
taskIdYes
timeoutSecNo
sinceCursorNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, and non-destructive behavior, so the description's task is lighter here. It adds useful behavior not present in the annotations: the operation is time-bounded to 30 seconds and will not keep waiting until a task completes. It also describes the event categories that trigger a return, which a caller otherwise could not infer from the schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very efficient: one sentence states the core behavior and timeframe, and the second sentence narrows expectations with an explicit negative. The wording is front-loaded so the agent sees the crucial limitations immediately. There is no filler or repetition of available structured metadata.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple, read-only, idempotent wait tool with three flat parameters and no output schema, the description covers the main gaps: bounding timeout, trigger conditions, and non-completion behavior. The only shortfall is that it does not say what the tool returns when a timeout or event occurs, but this is largely inferable from a wait tool with a cursor parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it only partially does. 'At most 30 seconds' maps clearly to timeoutSec, and 'new task cursor' hints at sinceCursor, but taskId is not explicitly described and the cursor mechanics remain vague. The parameter names and schemas are fairly self-explanatory, but the description does not fully replace the missing per-parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the specific operation: wait at most 30 seconds for a new cursor, status/availability change, terminal state, or pending interaction. It does not just repeat the tool name and it explicitly bounds what it is not doing by saying it never waits for whole-task completion. It avoids naming a sibling tool, but the event categories are precise enough to separate it from status, tail, and observe tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear when-to-use context: when the agent needs to wait for cursors, state changes, terminal states, or pending interactions. The phrase 'It never waits for whole-task completion' is an explicit exclusion that prevents misuse. It does not point to a specific alternative tool, but the intended use is reasonably delineated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 15 tool updatesv0.1.0-alpha.4
    • First observeddsh_answer_question
    • First observeddsh_attach_session
    • First observeddsh_cancel
    • First observeddsh_continue
    • First observeddsh_delegate
    • First observeddsh_find_sessions
    • First observeddsh_followup
    • First observeddsh_host_status
    • First observeddsh_list
    • First observeddsh_observe
    • First observeddsh_release_workspace
    • First observeddsh_resolve_approval
    • First observeddsh_status
    • First observeddsh_tail
    • First observeddsh_wait

TDQS

A3.7/5.0

Scored across 15 tools

Disambiguation3/5

Most tools are distinct and the descriptions carefully narrow their responsibilities, but dsh_continue is an explicit compatibility alias for dsh_followup and dsh_observe blurs into dsh_wait/dsh_tail territory. The duplicated entry points are documented clearly enough that an agent can choose correctly, though they still reduce clarity.

Naming Consistency4/5

Naming is generally predictable: almost every tool uses the dsh_ prefix and snake_case, with clear action nouns like find_sessions, attach_session, resolve_approval, and release_workspace. Minor deviations such as dsh_status, dsh_list, dsh_tail, and the alias-style dsh_continue/dsh_observe keep it from being perfectly systematic.

Tool Count4/5

Fifteen tools is a reasonable size for a session/bridge management server, and the set stays around the core lifecycle area. The count is slightly inflated by the compatibility aliases dsh_continue and dsh_observe, which could be removed or hidden without losing functional scope.

Completeness4/5

The toolset covers the major workflow: find/attach sessions, delegate work, follow up, observe status, cancel work, answer questions, and handle approvals. The most obvious gap is the lack of an explicit session close/detach or full task-level teardown operation, though much of the surrounding lifecycle is present.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers