dsh_agentlink
Codex-DSH-Orchestrator
English | 简体中文
Codex-DSH-Orchestrator 是一个以 Codex 为先的编排层和调用方侧 MCP 桥接器,用于与 DeepSeek Harness(DSH)进行有边界的协作。它让 Codex 可以把实现、调研、调试和长日志处理等工作委派给 DSH,然后在不离开正常工作流的前提下观察、继续或取消这些会话。Claude Code 仍通过共享的调用方集成层获得支持;其他调用方被有意暂缓,直到其宿主行为得到验证为止。
本仓库中的共享桥接运行时是上游 dsh-Agentlink 项目 的独立维护衍生版本。该项目保留上游 MIT 许可证和版权归属,与 DeepSeek、OpenAI 或上游维护者无关联,也未获得其认可。
项目边界
Codex-DSH-Orchestrator 是调用方侧的编排和 MCP 桥接项目。它将受支持的调用方连接到独立运行的 DSH Web Host;它不启动、不拥有、也不认证该 Host,并且绝不对 DSH 请求进行自动批准。它不是 DSH Cordis 捆绑包。
Related MCP server: DSH Subagent MCP
项目组成
skill/codex-dsh-orchestrator/ — 项目专属的 Codex 编排技能及其 agent 元数据。
skill/codex-dsh/ — 共享的 Codex 调用方兼容技能。
skill/claude-code-dsh/ — 保留的 Claude Code 调用方兼容技能。
src/ — 共享的、调用方无关的 MCP 桥接运行时和设置工具。
test/ — 本地 mock-host、安全、兼容性和集成测试。
docs/project-overview.md — 详细的职责与架构图。
dsh-Agentlink 名称保留在运行时标识符和上游归属中,以确保兼容性和法律明确性;它不是该项目的公开名称。
调用方支持
调用方 | 状态 | 设置或可用性 |
Codex | ✅ 支持 |
|
Claude Code | ✅ 支持 |
|
ZCode | ⏸ 暂缓 | 经验证的调用方扩展工作恢复后的首选 |
OpenCode | ⏳ 计划中 | 暂不可用 |
Workbuddy | ⏳ 计划中 | 暂不可用 |
目前,只有标记为 Supported 的调用方在本仓库中存在安装路径。计划中的条目只是方向,并不是发布承诺。
安装
先准备环境:你需要 Node.js 22+、受支持的调用方(Codex 或 Claude Code)以及可用的 DSH CLI。经过测试的跨平台基线是 x64 Node.js 22 和 24;其他 Node.js 主版本和 ARM64 环境不在当前测试矩阵覆盖范围内。在 DSH 中只配置一次你偏好的模型;共享桥接会继承该生效路由,除非某个被委派方明确请求受支持的语义配置文件。
可移植性和安装边界
在另一台机器上,请全新 clone。不要只复制单个 worktree 目录:其
.git文件指向源 clone 的 worktree metadata。同一台机器上请使用git worktree add从 source clone 创建 worktree。进行干净、可复现的安装时优先使用
npm ci。仅在你确实想更新 lockfile 时才使用npm install。npm run setup会把构建后的桥接入口和绝对路径写进调用方配置。请把检出放在稳定的工具目录中。移动它、更换 Node.js 安装或切换到另一个 worktree 后,请重新构建并重新运行 setup,同时审查现有条目,并在明确同意时才能加--replace。Codex MCP setup 与 Codex skill 安装是两回事。
npm run setup会注册 MCP 条目,但不会安装skill/codex-dsh-orchestrator/。请通过常规的 Codex skill 工作流安装并启用该技能,确保其可被发现,然后才能依赖$codex-dsh-orchestrator。DSH_BRIDGE_HOME请放在可靠的本地磁盘上。不要把旧的 bridge 主目录传给新机器;在新机器上用一个全新的主目录即可。DSH 会话历史属于 DSH Web Host;桥接任务映射、游标、claim 等不会自动迁移。Windows 上的
desktop-auto是可选加载项。它需要已经运行的 DSH Desktop Host,以及受支持的 Windows 进程/loopback discovery 前置条件;CI 会对这些行为进行 mock,不能证明真实的 Desktop 安装或登录。setup 向导绝不会启动、停止或登录 DSH Desktop。
通过 AI agent 安装
将下面的仓库 URL 和提示词发送给 Codex 或其他编码 agent:
Install Codex-DSH-Orchestrator from https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.
Check Node.js 22+, the DSH CLI, and my DSH Web Host first. Clone it into a location I approve,
run npm ci and npm run check. For Codex, run npm run setup -- --yes, then install and verify
the shipped Codex skill separately through my normal Codex skill workflow. For Claude Code, run
npm run setup:claude -- --yes --project /absolute/path/to/my/project.
For Claude Code, let setup install the project MCP entry and shipped project skill; use --replace and --replace-skill only after reviewing existing files.
If dsh_agentlink or the legacy dsh_collab entry already exists, show me the conflict before using --replace.
Do not start or stop dsh web for me. Tell me when I need to reload the selected caller and approve project MCP trust.手动安装
检查环境。DSH CLI
0.1.0-rc.6是当前测试目标。node --version dsh --version在自己的终端中启动官方 DSH Web Host。
dsh webClone 仓库并安装依赖。
git clone https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.git cd Codex-DSH-Orchestrator npm ci配置调用方。
对于 Codex:
npm run setup npm run doctor在 Windows 上,面对 DSH Desktop 及其动态变化的 loopback 端口时,请显式选择自动发现:
npm run setup -- --desktop-autoCodex wizard 会备份 Codex TOML 配置,并在 MCP 条目中安装
approval_mode = "prompt";但不会安装skill/codex-dsh-orchestrator/。请通过你的 Codex skill 工作流安装和启用该技能,然后验证它可被发现。静态 setup 仍要求dsh --version;而--desktop-auto可以在 CLI 不在PATH上时改为验证已在运行的 Desktop Host,并将该缺失软件包版本报告为兼容性警告。它绝会启动或停止 DSH Desktop。把既有 bridge 条目切换到任一模式,仍要求先审查再添加--replace。重启 Codex 后,使用/mcp或 Codex Settings 确认dsh_agentlink已连接。若要完全手动处理 TOML,请参阅 Manual 配置说明。对于 Claude Code 2.1.199 或更新版本,请把 setup 命令指向应共享
.mcp.json的项目:npm run setup:claude -- --project /absolute/path/to/your/project cd /absolute/path/to/your/project claude mcp get dsh_agentlinkClaude setup 只修改那个项目的
.mcp.json和.claude/skills/claude-code-dsh/SKILL.md,不动其他 server,并会分别报告以下各项:MCP 注册
项目信任
Claude skill 状态
Claude 审批支持
DSH 权限 / 沙箱所有权
DSH Host 可达性
在该项目中打开 Claude Code,用
/mcp批准待连接的 server;bridge 会把dsh_resolve_approval标记为需要人工交互。添加
--yes可使用默认值。若要更新现有 MCP 条目,先审查再加--replace;若要更新现有 Claude 项目 skill,先审查并添加--replace-skill;若要自己管理 skill,添加--no-skill。两个安装器都识别旧的dsh_collab条目,并且只在明确替换批准时才把它迁移到dsh_agentlink。它们都不会启动 DSH、修改 DSH 权限/沙箱设置或重启调用方。
doctor 只读地报告 DSH_BRIDGE_HOME 下 bridge 的 fail-closed lock 位置,并且绝不清理它们,因此即使在锁存在时运行 doctor 也是安全的。
这一源码补丁能停止新的 projection/chunk 洪流带来的协调账本扩张,但不会压缩已有的 5 MB+ 账本。请保留旧 bridge 目录,以利检查;新的委派可使用独立的 DSH_BRIDGE_HOME。DSH 的 session.history 仍是对话的权威来源,而非 bridge 账单。关于保守的恢复边界,请参考 来已知的问题。
该 bridge(运行时名称 dsh_agentlink)是调用方侧插件,不是 DSH Cordis bundle。请勿使用 dsh plugin --profile ... add ... 安装它。
为什么用 Codex-DSH-Orchestrator?
使用 DSH 的工作台能力
DSH 为复杂工作整合了持久会话、工具调用、子 agent 和人工监督。Codex-DSH-Orchestrator 让你当前的主调用方(目前是 Codex 或 Claude Code)能在保持工作流的同时,通过第二 harness 进行讨论与协作。
不仅是又一个原生子 agent
原生子 agent 仍在调用方自己的 agent 树内部。本共享 bridge 增加的是一个独立、由用户配置的 harness:它的会话在 DSH Web 中可见、可使用 DSH 自身的 worker 和模型路由,并能被主调用方观察、继续或取消。
节省时间与成本
省时。 把实现、调研、提取和长日志处理交给 DSH 中配置的快速模型(如 DeepSeek V4 路由),同时你的主 agent 继续负责规划和验证。
省成本。 将执行密集型 work 转移到成本更低的 DeepSeek 路由,可以降低更昂贵主模型的消耗。
实际速度和成本取决于所选模型、部署、网络和任务。安装后,你还能继续照常在 Codex 或 Claude Code 中工作,并在 DSH 是更合适的执行路径时直接请求委派即可。
使用
当 dsh web 正在运行,且你的调用方已加载并信任 MCP 配置后,你可以用自然语言让 Codex 或 Claude Code,例如:
Use Codex-DSH-Orchestrator to delegate the implementation of this task to DSH. Keep it visible in DSH Web, Report progress, and ask me before any approval.
它则会委派该任务、观察其事件流、继续同一会话、与你协作问答,或取消工作。打开配置好的 DSH Web origin 来查看和操作同一个会话。在 Windows 上,可选的 DSH_HOST_MODE=desktop-auto 运行模式能自行发现 DSH Desktop 已验证的 loopback 监听器,而不是依赖其动态 临时端口;显式的 DSH_HOST_URL 始终优先。
在新委派前,调用方只根据已有的进度和只读工作区证据,在 prompt 中构建一个紧凑的交接说明:目标、已完成工作、Git HEAD/状态和变更路径(若能用、重点的代码/文档路径、相关测试、限制和未解决的问题。它让会读那个焦点路径,除非被阻断否则不进行全仓库扫描。该交接不包含 secrets、原始大 diff、文件正文、调用方对话和内部推理。这是对调用方的指引,不是新增的文件系统授权;dsh-Agentlink 不会自动获得先前的调用方会话状态。对于已知 BridgeTask,调用方使用 dsh_followup;如果没有匹配的已知 task id,它会开启新委派,而不是猜测旧 id。
当用户明确指向现存 DSH Desktop 会话时,调用方可先使用 dsh_find_sessions 读取有限的 root-session metadata,再用 dsh_attach_session 并传它返回的 session id 和新的 metadata 前置条件。标题只是发现的辅助,绝不是附加身份的标识。attach 只接受空闲的 root 会话,会创建或复用 bridge 本地的映射和 worktree claim 状态,也可以为监督而 match 历史,但不会返回或持久化对话主体。它既不会 DSH,也不会创建/重命名 DSH 会话、发送 prompt 或改变模型路由。若工作要继续,后续的 dsh_followup 中会携带紧凑的交接说明。
跨 Codex 任务复用会话是一个保守的三选一:same-known-task、attached-existing-task 或 new-session。只对同一个工作流复用同一个已知 BridgeTask;对于有明确延续证据的新任务,只通过纯元数据的 dsh_find_sessions 发现恰好一个 canonical-cwd、已映射、空闲的根会话,并在继续 dsh_followup 之前以新的前置条件附加。绝不按标题或相似性复用,也绝不为发现而去读取历史;对含糊不清、运行中、过期、缺少 cwd 或映射冲突的候选一律失败关闭。复用可以省去交接和读取仓库的工作,但可能增加输入 token,因此只有在连续性仍然相关时才是一种成本优化。复用和避免了重新扫描并不能证明提供了提示词缓存命中或 token 折扣;除非 DSH 发布文档化的聚合用量遥测,否则不会暴露这些 provider 缓存证据。
MCP 工具
dsh_host_status— 仅连接层面的 Host 状态与能力dsh_find_sessions— 对有界会话做有界、仅元数据的发现;不涉及历史或原始投影dsh_attach_session— 使用新的 id/title/cwd/update 前置条件仅附加到一个准确的空闲根会话;不改变提示词或模型dsh_delegate— 创建根会话并入队初始提示词;可选用inherit|flash|pro|modlens-flash|modlens-pro以及目录支持的reasoningEffort;默认是分离的(waitSeconds=0);workspaceMode是网桥本地声明,而不是 DSH 沙箱选择器dsh_followup— 以显式mode="queue"|"steer"(默认queue)继续同一根会话;可在提示词之前选择相同的语义模型配置和刚验证的推理强度dsh_continue—dsh_followup的兼容别名dsh_status— 可用性、执行、谱系、队列、待处理交互、最终消息、游标及工作区声明的语义dsh_tail— 使用桥接任务游标获取有界的事件摘要dsh_wait— 最多等待 30 秒,等待一个持久事件、状态变化、待处理交互或终态dsh_observe— 围绕dsh_wait的兼容别名;桥接游标取代属性会话头部游标dsh_cancel—scope="turn"|"queue"dsh_list— 任务映射,附有当前派生的状态dsh_answer_question— 针对待处理问题 rpcId 的类型化回答dsh_resolve_approval— 针对待处理审批 rpcId 的类型化allow_once|reject响应dsh_release_workspace— 在不关闭 DSH 会话的情况下,显式释放持久的桥接工作区声明
模型路由是显式选择,并且对委派和后续操作都向后兼容。当省略 modelProfile 和 reasoningEffort 时,操作读取 session.models.current,验证 routable,并且不会调用 session.selectModel。语义映射为:flash/pro 对应 flash/pro 的 deepseek-official/deepseek-v4-{flash,pro},modlens-flash/modlens-pro 对应 deepseek-modlens/deepseek-v4-{flash,pro}。被请求的 provider、model 和 effort 必须存在于实时 session.models 目录中。初始提示词或后续提示词发送前会执行并重新读取该选择;任何不匹配都将失败关闭且不会发送该提示词。
用户的显式选择始终优先。否则,一条主调用路径可保留 inherit(继承),日常搜索/实现/测试修复用 Flash,架构或困难的多步调试用 Pro,而在视觉证据至关重要时使用相应的 ModLens 配置。dsh-Agentlink 只传输文本提示:要包含 DSH Host 和 ModLens 工具可访问的绝对本地图片路径;它不会上传图片字节。selectionReason 提供可选审计说明,不发送给 DSH。
在本地验证过的 DSH rc.6 compact Code Mode 路径上,视觉交接使用外层 run_code 传输,并通过程序内部通过注入的 tools SDK 调用注册的 modlens_read_image。调用方应将其视作预期,禁止 shell/浏览器/OCR/图像库回退,并等待嵌套结果或显式的嵌套/终端错误。插件文档中记载的内层超时不是整个委派的整体截止线。这是版本特定范围的兼容性说明;如果后来版本的 Host 能力有此不同,推迟以它们验证过的实时能力为准。
重要的 DSH rc.6 副作用: session"thread" 也会把该选择保存为 DSH 之后会话的端点。无论何时发生显式选择,委派和后续结果都会报告 modeMapping.persistsAsDshDefault=true 并给出警告。如果不接受这种持久化,请忽略路由字段。如果写入后选择验证失败,则不会发送提示词,但该请求的选择可能已经是全局默认值。
"Dual 启动时 " dsh_wait " does state reading,同时观察持久桥接状态。助理的 delta/chunk 帧以及顶级 session/projection 快照将被跳过,因此它们不会推进任务修订唤醒 waiters;在轮次结束后,完整最终消息仍可通过 status/tail 观察到。
路线图
以下只是一个计划方向,并不是已实现的需求,也不是发布承诺。
1 请求 更多调用方入口 — 待调用方恢复启动时先评估 ZCode,然后再考虑 OpenCode、Work 和 Claude Code MCP 等调用方,并采用相同的 Integration Pack 架构。
2. Agent调用与信息传输 — 改善 prompt 组织、上下文打包、输出摘要和压缩,同时保证提问、审批、错误及最终答案依然可靠。
3. 支持插件的 DSH 的会话 — 保留现有 agentPreset 路径给基于 preset 的插件,加入只读 preset/能力校验和 resolved-preset 上报,只有插件证明需要类型化后安装时才引入声明式会话启动配置。
4. 更多集成 — 在共享 Runtime 和调用方兼容契约稳定后继续扩张。
更多文档
介绍 项目概览 — 公共身份、组件归属与技术架构
架构与安全模型 — 身份、状态、恢复、审批、取消与工作区的协调
多调用方扩展架构 — Codex、Claude Code 及未来调用方共享的 Runtime 与 Integration Pack 边界
推迟的路径 — 有意延迟的工作、激活触发器与保持的安全边界
自动化验证 — 一下兼容性和操作厂商验收检查
已知问题 — 现有的升级和并发注意事项
许可证
Alpha 说明:DSH 仍处于开发者预览阶段,此项目是独立于 DeepSeek 和 OpenAI 的社区项目。0.1.0-alpha.1 存在一个共享账本并发 bug;此问题在 0.1.0-alpha.2 修复。在升级或并发运行桥接进程之前,请先阅读已知问题。
Available Tools
15 toolsdsh_answer_questionA
Answer one currently pending typed DSH question request. The requestId, task lineage, question ids/order, and selections are validated locally before one non-retried /api/respond write.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes | ||
| answers | Yes | ||
| requestId | Yes | ||
| sinceCursor | No | ||
| expectedRevision | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (all false), the description adds meaningful behavioral detail: validations are performed locally, the operation results in exactly 'one non-retried /api/respond write'. This discloses retry semantics and the mutation path, which is useful for an agent deciding whether to invoke or expect idempotency. It does not contradict any annotation; readOnlyHint false aligns with 'write'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description earns its two sentences. The first sentence front-loads the core action in clear terms, and the second adds dense behavioral context without fluff or redundant repetition of the schema. Every phrase contributes to helping an agent understand the tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter write tool with no output schema, the description is largely complete: it explains the core action, known validation, and write behavior. Optional parameters like sinceCursor and expectedRevision lack any contextual hint in the description or schema property descriptions, which is the main gap preventing a perfect score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With schema description coverage at 0%, the description carries the naming burden. It partially succeeds by referencing 'requestId', 'task lineage', 'question ids/order', and 'selections', mapping loosely to requestId, taskId, answers[].id, and answers[].selected. However, optional parameters sinceCursor and expectedRevision are omitted, and there is no explicit mapping to the schema's custom field or the shape of the answers array.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action ('Answer') and resource ('one currently pending typed DSH question request'), making it immediately obvious what the tool does. It lacks an explicit distinction from sibling tools like dsh_continue or dsh_followup, but the phrase 'currently pending typed DSH question request' narrows the purpose enough for an agent to separate it from general session or status tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'currently pending typed DSH question request' implies when to use the tool: when there is a pending question to be answered. However, the description does not explicitly say when not to use it or which sibling alternative to prefer (e.g., dsh_continue, dsh_followup). Usage guidance is implied rather than stated, leaving some room for an agent to misroute a call.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_attach_sessionA
Attach one idle existing root DSH session to the bridge using its exact sessionId and fresh discovery preconditions. This creates or reuses bridge-local mapping/claim state and starts normal supervision reconciliation: it does not prompt DSH, create or rename a DSH session, return or persist conversation bodies, or change model routing. After success, use dsh_followup with a compact handoff when work should continue.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes | ||
| allowBlank | No | ||
| expectedCwd | Yes | Absolute cwd copied from the selected dsh_find_sessions result. | |
| expectedTitle | Yes | Exact title copied from dsh_find_sessions, including null when no title is present. | |
| workspaceMode | No | Bridge-local cooperative workspace claim only; it does not configure the DSH sandbox. | exclusive-write |
| expectedUpdatedAt | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are all false, giving little guidance beyond the lowest-level safety flags. The description compensates well by stating that it creates/reuses bridge-local state, starts reconciliation, and will not perform a list of DSH-related mutations or data transformations. It does not cover failure modes, error returns, or potential side effects on the bridge beyond what is described, but the core behavior is laid out clearly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three front-loaded sentences: the action, the effects/exclusions, and the follow-up instruction. It is effective and relevant. It is slightly dense with multiple compound clauses, but every phrase adds behavioral or routing value, so it is not wasted text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the burden of saying what happens on success: creating/reusing mapping/claim state and starting supervision, with a defined next step. It nicely scopes out many side effects (does not prompt, create, rename, persist, or route). What is missing is any guidance on failure cases, e.g., what happens if the discovery preconditions don't match, or whether the tool can outright fail. That keeps it from a 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions cover 50% (expectedCwd, expectedTitle, workspaceMode). The description adds a small amount of contextual glue by calling the expected fields 'fresh discovery preconditions' and emphasizing 'exact', which clarifies expectedUpdatedAt and expectedTitle. But it does not explain allowBlank at all, and the role of expectedUpdatedAt is only inferable as a precondition after attaching session's stale or not. This is better than empty, but does not fully close the schema's coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb-resource pair: 'Attach one idle existing root DSH session to the bridge using its exact sessionId and fresh discovery preconditions.' It also enumerates what the tool does not do (prompt DSH, create or rename sessions, return/persist conversations, change routing), which effectively distinguishes it from sibling tools such as dsh_followup and dsh_delegate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives clear triggers: attach when there is an idle existing root DSH session and you have exact sessionId plus fresh discovery preconditions. It also states the follow-up path ('After success, use dsh_followup with a compact handoff when work should continue'), which is useful routing guidance. It stops short of explicitly listing alternatives to not use under certain circumstances, and could have said 'do not use if the session is not idle'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_cancelADestructive
scope=turn cancels only the active root turn and preserves queued work. scope=queue non-atomically removes each item from the latest mux queue snapshot.
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | turn | |
| taskId | Yes | ||
| sinceCursor | No | ||
| expectedRevision | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as destructive, and the description adds genuinely useful behavior beyond that: the turn scope explicitly preserves queued work, and queue removal is described as non-atomic and based on the latest mux queue snapshot. This is meaningful transparency about what gets destroyed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact, front-loads the primary scope behavior, and either sentence earn its place. No redundant text, no restating of the tool title or generic cancellation wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive 4-parameter tool with no output schema, the description does not explain return behavior, partial failure states, or the semantics of sinceCursor/expectedRevision. The scope behavior and non-atomic queue removal are helpful, but important invocation context is still missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage and the description only explains the scope enum. taskId, sinceCursor, and expectedRevision are left completely unexplained, so the agent cannot infer the meaning of important parameters like optimistic concurrency guards or cursor-based synchronization.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states concrete behavior for each scope: scope=turn cancels the active root turn and preserves queued work, while scope=queue removes queued items. It is clear about what the tool operates on, though it does not explicitly distinguish itself from sibling tools by name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for choosing a scope, including that it not’s queued work and that queue removal is non-atomic. It does not provide when-not-to-use guidance or name alternatives like dsh_continue or dsh_release_workspace, so it stops short of very explicit routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_continueA
Compatibility alias for dsh_followup. Continue the same known BridgeTask and root DSH session instead of creating another delegation for the same work. Never guess an old task id; start a fresh delegation when no matching task id is known. queue targets the next turn; steer targets the active turn's next step. Optional semantic model routing is catalog-validated and re-read before the prompt; selection failure sends no prompt, but an attempted session.selectModel may already have persisted as the DSH global default. Omit routing to inherit. The write is never automatically retried.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | queue | |
| prompt | Yes | ||
| taskId | Yes | ||
| sinceCursor | No | ||
| modelProfile | No | Optional semantic route selected and re-verified before this follow-up prompt; omit to inherit the session route. Explicit selection persists as the DSH default. | |
| reasoningEffort | No | Optional effort id advertised by the selected live session catalog model. | |
| selectionReason | No | Optional audit explanation for the route choice; never sent to DSH. | |
| expectedRevision | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Although annotations provide no safety hints and idempotentHint=false, the description exposes non-obvious behavior: model routing is catalog-validated and re-read before the prompt, failure may skip the prompt but can still persist a selectModel global default, and 'the write is never automatically retried.' This is exactly the kind of behavioral context an agent cannot infer from the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but not bloated; every sentence contributes meaningful guidance. It front-loads purpose and task-id safety rules, then details routing and retry semantics. Minor structural improvement would be grouping routing caveats more cleanly, but the overall length is appropriate.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema and the complexity of the tool, the description covers critical fallback behavior and model-routing pitfalls. It is not fully complete because it omits the meaning of sinceCursor/expectedRevision and any return-value guidance, which would matter to an agent trying to verify the tool's result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 38%, and the description valuably annotates mode, model routing, and the task-id rule. However, key parameters such as sinceCursor and expectedRevision are never mentioned, and prompt is only implicit. The description partially compensates for the low coverage but leaves important gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Compatibility alias for dsh_followup' and specifies the exact operation: 'Continue the same known BridgeTask and root DSH session.' It also distinguishes this tool from creating another delegation, so an agent can clearly recognize its role relative to siblings like dsh_delegate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit decision rules: use this when a matching task id is known, and 'start a fresh delegation when no matching task id is known.' It also clarifies mode boundaries ('queue targets the next turn; steer targets the active turn's next step'), which is strong guidance for correct invocation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_delegateA
Create a root session on the configured official DSH Web Host and queue the initial prompt. Before calling, put a compact handoff in prompt from known progress plus read-only Git/workspace evidence; identify focus paths and tell DSH to read those focus paths first instead of scanning the whole repository unless blocked. An explicit user choice of modelProfile or reasoningEffort always takes precedence. Otherwise the caller may choose pro for complex work and a modlens profile for visual work whose local image paths are included in the prompt; omit routing fields to inherit DSH's configured model. Explicit selection uses session.selectModel, which also persists the selection as the DSH default for later sessions. Detached by default. workspaceMode is only a bridge-local cooperative claim and does not select or verify the DSH sandbox.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | Existing absolute directory visible to the DSH Host. | |
| title | No | ||
| prompt | Yes | ||
| agentPreset | No | DSH agent composition/preset name. This does not express workspace ownership or verified sandbox policy. | |
| waitSeconds | No | ||
| modelProfile | No | Semantic route: flash/pro use deepseek-official; modlens-flash/modlens-pro use deepseek-modlens for visual work; inherit keeps the current route. Explicit user choice takes precedence over caller heuristics. | |
| workspaceMode | No | Bridge-local cooperative workspace claim only; it is not a DSH Host filesystem sandbox selector or verifier. | exclusive-write |
| reasoningEffort | No | Optional effort id. It must be advertised by the selected model in session.models. | |
| selectionReason | No | Optional audit explanation for the caller's explicit or autonomous profile choice; never sent to DSH. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
It discloses several non-obvious behaviors: the call is detached by default, explicit model selection persists as the DSH default via session.selectModel, and workspaceMode is only a cooperative local claim, not a sandbox verifier. These go beyond the uninformative annotations. The description doesn't say what the call returns, but it still carries substantial transparency burden well.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the main purpose and then organized around actionable instructions. It is longer than minimal but each sentence earns its place; the only slight redundancy is repeating that explicit user choices take precedence before explaining session.selectModel persistence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and several complex fields, the description completes most of the Agent's decision loop: what to prepare, how to route, and why workspaceMode is not a sandbox claim. It leaves a small gap by not stating what the call returns or how to coordinate with dsh_wait, dsh_find_sessions, and dsh_attach_session, but those appear as siblings and are inferable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67%, and the description adds meaning beyond the schema for prompt construction, modelProfile routing and precedence, and the workspaceMode caveat. It doesn't elaborate on waitSeconds or the literal return identity, but the most decision-critical parameters are given practical semantic context.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence clearly states the action: "Create a root session on the configured official DSH Web Host and queue the initial prompt." It identifies a specific verb and resource, and the "root session" phrasing distinguishes it from sibling attach/followup tools that work on existing sessions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives concrete pre-call guidance: include a compact handoff with read-only evidence, identify focus paths, and tell DSH to read those first. It also explains when to choose pro versus modlens profiles and when to omit routing fields. It does not explicitly name "use dsh_attach_session instead for existing sessions," but the focus on initial root session makes the intended case clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_find_sessionsARead-onlyIdempotent
Read bounded metadata for existing root sessions from DSH session.list. It can filter titles exactly or by a case-sensitive substring, or narrow candidates by an exact canonical cwd, an unambiguous BridgeTask mapping, or idle state; it returns no history or raw projections. These filters narrow candidates but never authorize automatic selection, history reads, attachment, or prompting. Use the returned exact sessionId and precondition fields with dsh_attach_session; never select a session by title alone.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Optional absolute existing workspace path; matches only sessions whose advertised cwd resolves to the same canonical directory. | |
| title | No | ||
| idleOnly | No | Return only sessions whose root turn is not running. | |
| mappedOnly | No | Return only sessions with one unambiguous existing BridgeTask mapping. | |
| maxResults | No | ||
| titleMatch | No | exact | |
| includeBlank | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive behavior, and the description adds valuable limits beyond annotations: it returns no history/raw projections, filters never authorize automatic selection or attachment, and results are limited to bounded metadata. This gives an agent a precise behavioral contract.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the core operation and followed by filter semantics and a critical usage warning. Every sentence earns its place; there is no redundant filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 7-parameter tool with no output schema and only 43% schema description coverage, the description covers the main purpose, key filters, return usage, and boundary behavior. It omits maxResults and includeBlank semantics, so it is not fully complete, but it is notably stronger than the median tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description maps four semantic filters to parameters: exact/case-sensitive title matching (title/titleMatch), canonical cwd (cwd), idle state (idleOnly), and BridgeTask mapping (mappedOnly). However, schema coverage is only 43%, and maxResults and the opaque includeBlank are never explained. The description partially compensates but leaves real gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Read bounded metadata for existing root sessions from DSH session.list.' It then lists the exact filter dimensions and states what the tool does not return ('no history or raw projections'), which clearly separates it from session-history and attach-type siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives an explicit downstream directive: use the returned exact sessionId and precondition fields with dsh_attach_session, and never select a session by title alone. It does not fully enumerate when to prefer this tool over every sibling, but it gives strong context on how to consume the result.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_followupA
Continue the same known BridgeTask and root DSH session instead of creating another delegation for the same work. Never guess an old task id; start a fresh delegation when no matching task id is known. queue targets the next turn; steer targets the active turn's next step. Optional semantic model routing is catalog-validated and re-read before the prompt; selection failure sends no prompt, but an attempted session.selectModel may already have persisted as the DSH global default. Omit routing to inherit. The write is never automatically retried.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | queue | |
| prompt | Yes | ||
| taskId | Yes | ||
| sinceCursor | No | ||
| modelProfile | No | Optional semantic route selected and re-verified before this follow-up prompt; omit to inherit the session route. Explicit selection persists as the DSH default. | |
| reasoningEffort | No | Optional effort id advertised by the selected live session catalog model. | |
| selectionReason | No | Optional audit explanation for the route choice; never sent to DSH. | |
| expectedRevision | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations show the tool is not read-only and not idempotent, but the description adds important behavioral context: the write is never automatically retried, and an attempted session.selectModel may persist as the DSH global default even when selection fails. This goes beyond what the annotations say, though it does not cover all possible side effects like auth failures or destruction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well organized: core purpose first, followed by a guardrail about task IDs, then mode behavior, routing caveats, and retry semantics. Each sentence earns its place and there is minimal redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with no output schema and 8 parameters, the description covers the essential behavior needed to select the tool and make a correct call, including the no-guess rule, mode semantics, routing side effects, and no automatic retry. It is not fully complete because some non-required paramters like expectedRevision and sinceCursor remain semantically under-specified and the description does not mention what the agent should expect in return.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds real semantics for mode and model routing: queue targets the next turn, steer targets the active turn's next step, and routing can be omitted to inherit the session route. However, schema description coverage is low at 38%, and parameters like sinceCursor and expectedRevision are not explained in the description, leaving gaps for an agent that needs to use them.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action: continue the same known BridgeTask and root DSH session rather than creating a new delegation for the same work. It also gives a clear decision rule about known vs unknown task IDs, which helps distinguish the tool from sibling tools like dsh_delegate and dsh_continue.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says when to use the tool, when not to use it, and what to do instead: never guess an old task ID and start a fresh delegation if no matching task ID is known. It also clarifies the queue and steer modes and the consequences of selection failure, leaving little ambiguity about correct invocation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_host_statusARead-onlyIdempotent
Report the connect-only bridge state and current official DSH Web Host capabilities.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose that this is read-only and idempotent, and the description reinforces that by saying 'report.' It adds some context about what is reported but does not disclose return format or potential operational behavior such as network dependency or staleness. No contradiction exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense sentence with no filler. Every phrase contributes meaning, and the main subject is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only status tool with strong annotations, this description is adequate. It could be slightly more complete by saying what shape the report takes or what counts as a 'capability,' but the operational risk and ambiguity are low.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is no parameter semantic burden on the description. The schema is empty and correctly set to disallow additional properties.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a clear verb ('Report') and names the two things being reported: the connect-only bridge state and DSH Web Host capabilities. It is reasonably specific, though it does not explicitly differentiate itself from the sibling dsh_status tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no guidance on when to use this tool versus alternatives like dsh_status or dsh_observe. It implies a general status-checking use case but does not state exclusions or conditions for selecting another sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_listARead-onlyIdempotent
List bridge task mappings enriched with current derived DSH status and bridge-local workspace claim semantics when the Host is reachable.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint, idempotentHint, and destructiveHint false. The description adds meaningful behavioral context by mentioning 'current derived DSH status' and 'bridge-local workspace-local claim semantics', which are beyond what annotations reveal. It also conditionally scopes enrichment to Host reachability, although it does not specify behavior when the Host is unreachable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one sentence, front-loaded with the action and resource, and uses no filler. It packs the key qualifiers (status enrichment, local workspace-local semantics, Host reachability) into a compact but coherent phrase. Every element contributes meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With zero parameters and no output schema, an agent relies almost entirely on this description to understand what it will get. The description says mappings are enriched, but never describes the return shape, ordering, or what happens when Host is unreachable. It is enough for basic selection, but incomplete for confidently predicting behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema coverage is complete by that baseline. There is therefore no parameter-semantic gap for the description to fill. Per the rubric, zero-parameter tools receive a baseline score of 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action and resource: 'List bridge task mappings' with enrichment. It clearly indicates this is a read-only listing of bridge task mappings, which differentiates it in topic from most siblings. However, it does not explicitly distinguish itself from dsh_find_sessions or dsh_status, so sibling differentiation is only implied.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'when the Host is reachable' hints at an operating condition, and calling the tool after 'bridge task mappings' suggests it is for enumerating current mappings. But the description never states when the tool should be preferred over siblings or when not to use it. The usage is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_observeBRead-onlyIdempotent
Compatibility observation alias. Prefer dsh_wait plus dsh_tail task cursors.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes | ||
| afterCursor | No | ||
| waitSeconds | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already communicate read-only, idempotent, and non-destructive behavior, so the description's burden is lower. The description adds deprecation/compatibility context and indicates that the intended operation is covered by dsh_wait plus dsh_tail, which is behavior that annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Both sentences are short and front-loaded, and there is no wasted wording. It loses a point because the description is under-specified rather than merely concise, especially around what the compatibility alias does and how its parameters behave.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a compatibility-only alias, the description provides adequate routing and safety context. However, because there is no output schema and the description never states what the call returns or how cursor/wait semantics behave, the overall picture is incomplete for an agent that actually needs to invoke this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not compensate at all, saying nothing about taskId, afterCursor, or waitSeconds. An agent must infer the meaning of all three parameters from bare names, patterns, defaults, and constraints, which is insufficient for correct invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description identifies dsh_observe as a 'compatibility observation alias' and points to dsh_wait/dsh_tail, so an agent knows roughly where it belongs. However, it never states what the observation actually does, what resource it targets, or what kind of result the agent should expect, leaving the purpose somewhat vague.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"Prefer dsh_wait plus dsh_tail task cursors" is an explicit routing instruction with named alternatives, which is genuinely useful. What is missing is the corresponding 'when not to use' and 'when it is acceptable to use this compatibility alias' guidance, though 'compatibility' provides part of that context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_release_workspaceADestructive
Explicitly release this bridge task's persistent workspace claim. This does not close the DSH session or stop other clients from editing the directory.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the operation as non-readonly and potentially destructive, but the description adds valuable behavioral context: it releases a claim while leaving the session open and not affecting other clients' editing. This goes beyond the annotations with meaningful side-effect disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two crisp sentences deliver the core action and the key negative side effect without redundant framing. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter operation with this scope, the description fully covers the action, the affected resource, and the main misinterpretation risk. The absence of an output schema does not leave a serious gap because the tool's primary purpose and non-effects are clearly stated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema only defines taskId with a pattern and provides no description. The tool description references 'this bridge task's persistent workspace claim,' which suggests taskId identifies the relevant bridge task, but it does not explicitly explain the parameter semantics or where the value comes from in the schema. With schema coverage at 0%, the description could compensate more.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('release') with a specific resource ('persistent workspace claim') and immediately clarifies the boundary ('does not close the DSH session...'). This clearly identifies what the tool does and distinguishes it from session-level or editing commands.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'explicitly release this bridge task's persistent workspace claim' makes the intended situation clear, and the statement about not closing the session or blocking other clients provides a useful when-not condition. It does not name alternative sibling tools, but the exclusion is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_resolve_approvalADestructive
Resolve one pending DSH sandbox-escalation approval as allow_once or reject. Never auto-allows; keep this tool behind the caller's human approval prompt before permitting allow_once.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes | ||
| outcome | Yes | ||
| requestId | Yes | ||
| sinceCursor | No | ||
| expectedRevision | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare destructiveHint=true, readOnlyHint=false, and idempotentHint=false. The description adds a policy-level behavioral trait: the tool does not auto-allow and must be gated by human approval. However, it does not disclose what actually changes on allow_once vs reject, such as side effects to the DSH sandbox or any return feedback.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler: the first states the core action and allowed outcomes, the second gives the critical safety guardrail. It is front-loaded and all content is relevant to safe invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter mutation with no output schema, this description is thin. It does not explain what the optional sinceCursor and expectedRevision are for, how a pending approval is selected, or what the result of resolving one is. The safety guardrail is useful, but the rest of the invocation context is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, but it only repeats the allow_once/reject concept from the outcome enum. It gives no semantics for taskId, requestId, sinceCursor, or expectedRevision; the agent has to rely on parameter names and schema constraints alone to understand how to identify and resolve the right pending request.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action ('Resolve') applied to a specific resource ('one pending DSH sandbox-escalation approval') and states the two possible outcomes ('allow_once or reject'). This is precise and clearly distinguishes the tool from the listed sibling tools, none of which are described as resolving the approval workflow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a direct operational constraint: never auto-allow and keep the tool behind the caller's human approval prompt before using it to allow_once. This tells the agent when it is appropriate to invoke this tool. It doesn't explicitly compare against alternative tools, but no sibling appears to serve the same approval-resolving purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_statusBRead-onlyIdempotent
Return separate availability/execution state, root and descendant sessions, queue depths, pending interactions, final message, bridge cursor/watermarks, and bridge-local workspace claim semantics.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds value by revealing the shape of the returned state: separate availability/execution state, root versus descendant sessions, queue depths, pending interactions, and bridge-local workspace semantics. This clarifies what the status contains beyond what the generic read-only annotation implies.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Everything is packed into one dense, roughly 30-word sentence with no filler or repeated structured data. It is front-loaded with the action 'Return' and then lists distinct pieces of state. The slash-separated enumeration is compact, though slightly harder to parse than a structured list would be.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only one-parameter tool, the description gives a good sense of what the output will cover and the input schema covers the expected ID format. However, the terms 'bridge cursor/watermarks' and 'bridge-local workspace claim semantics' are not explained, and there is no output schema to clarify the exact return representation. This leaves interpretation gaps for an agent despite the invocation being straightforward.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one required parameter, taskId, with a pattern but no written semantics, and the description does not explicitly explain what taskId refers to. However, the tool name and the status content strongly imply taskId is the dsh task being inspected. The parameter is self-evident enough to be callable, but the description does not compensate for the missing parameter documentation in a meaningful way.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a clear verb 'Return' and names a specific resource: the status object containing availability/execution state, sessions, queue depths, pending interactions, final answer, and bridge-related cursors/watermarks. It distinguishes itself from siblings like dsh_host_status and dsh_find_sessions by listing compound status content, but it does not explicitly state that the tool returns this for the given taskId.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to use dsh_status versus dsh_wait, dsh_tail, dsh_observe, or dsh_continue. The description implies this is a read-only snapshot, but it never states that it is non-blocking, that it should be used for a point-in-time check, or that other tools cover waiting/tailing/observing behavior.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_tailBRead-onlyIdempotent
Read bounded event digests using bridge coordination cursors. Conversation content is fetched from DSH history when reachable and is never copied into bridge persistence.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes | ||
| maxBytes | No | ||
| maxEvents | No | ||
| sinceCursor | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, and non-destructive behavior. The description adds useful beyond-annotation context: content is fetched from DSH history when reachable and is never copied into bridge persistence. This helps the agent understand external reachability and data-hygiene semantics, though failure behavior when history is unreachable is not disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences from the core behavior without fluff. The action, the resource, the mechanism, and the key data-handling constraint are all stated efficiently and front-loaded into the first sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description is responsible for shaping an adequate mental model. It does not explain the meaning of the four parameters, how a cursor should be obtained or advanced, or what a digest structurally contains. The description is useful but not complete enough for a correct invocation beyond trial and error.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, so the description must compensate for the undocumented parameters. It hints at the 'bounded' nature of maxBytes/maxEvents and at 'cursors' for sinceCursor, but it never maps these concepts to any named parameter or explains their roles. taskId remains completely unaddressed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('Read') and resource ('bounded event digests'), so an agent knows what the tool does. It also adds the mechanism ('bridge coordination cursors'), though it does not explicitly differentiate it from sibling tools like dsh_observe or dsh_list.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus alternatives. The phrase 'bounded event digests' implies a history/tail-style use case, but the description never states conditions, exclusions, or which sibling tool might be more appropriate. This is essentially absent guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dsh_waitARead-onlyIdempotent
Wait at most 30 seconds for a new task cursor, status/availability change, terminal state, or pending interaction. It never waits for whole-task completion.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes | ||
| timeoutSec | No | ||
| sinceCursor | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only, idempotent, and non-destructive behavior, so the description's task is lighter here. It adds useful behavior not present in the annotations: the operation is time-bounded to 30 seconds and will not keep waiting until a task completes. It also describes the event categories that trigger a return, which a caller otherwise could not infer from the schema or annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very efficient: one sentence states the core behavior and timeframe, and the second sentence narrows expectations with an explicit negative. The wording is front-loaded so the agent sees the crucial limitations immediately. There is no filler or repetition of available structured metadata.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple, read-only, idempotent wait tool with three flat parameters and no output schema, the description covers the main gaps: bounding timeout, trigger conditions, and non-completion behavior. The only shortfall is that it does not say what the tool returns when a timeout or event occurs, but this is largely inferable from a wait tool with a cursor parameter.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, but it only partially does. 'At most 30 seconds' maps clearly to timeoutSec, and 'new task cursor' hints at sinceCursor, but taskId is not explicitly described and the cursor mechanics remain vague. The parameter names and schemas are fairly self-explanatory, but the description does not fully replace the missing per-parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific operation: wait at most 30 seconds for a new cursor, status/availability change, terminal state, or pending interaction. It does not just repeat the tool name and it explicitly bounds what it is not doing by saying it never waits for whole-task completion. It avoids naming a sibling tool, but the event categories are precise enough to separate it from status, tail, and observe tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear when-to-use context: when the agent needs to wait for cursors, state changes, terminal states, or pending interactions. The phrase 'It never waits for whole-task completion' is an explicit exclusion that prevents misuse. It does not point to a specific alternative tool, but the intended use is reasonably delineated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
15 tool updates
v0.1.0-alpha.4- First observed
dsh_answer_question - First observed
dsh_attach_session - First observed
dsh_cancel - First observed
dsh_continue - First observed
dsh_delegate - First observed
dsh_find_sessions - First observed
dsh_followup - First observed
dsh_host_status - First observed
dsh_list - First observed
dsh_observe - First observed
dsh_release_workspace - First observed
dsh_resolve_approval - First observed
dsh_status - First observed
dsh_tail - First observed
dsh_wait
TDQS
Scored across 15 tools
Most tools are distinct and the descriptions carefully narrow their responsibilities, but dsh_continue is an explicit compatibility alias for dsh_followup and dsh_observe blurs into dsh_wait/dsh_tail territory. The duplicated entry points are documented clearly enough that an agent can choose correctly, though they still reduce clarity.
Naming is generally predictable: almost every tool uses the dsh_ prefix and snake_case, with clear action nouns like find_sessions, attach_session, resolve_approval, and release_workspace. Minor deviations such as dsh_status, dsh_list, dsh_tail, and the alias-style dsh_continue/dsh_observe keep it from being perfectly systematic.
Fifteen tools is a reasonable size for a session/bridge management server, and the set stays around the core lifecycle area. The count is slightly inflated by the compatibility aliases dsh_continue and dsh_observe, which could be removed or hidden without losing functional scope.
The toolset covers the major workflow: find/attach sessions, delegate work, follow up, observe status, cancel work, answer questions, and handle approvals. The most obvious gap is the lack of an explicit session close/detach or full task-level teardown operation, though much of the surrounding lifecycle is present.
Maintenance
Related MCP Connectors
Your AI apps as one team: hand work to Codex, Claude Code or Cursor on your Mac, with a logbook.
Work on your own computers from Claude or ChatGPT: run commands, edit and search files.
No-data MCP handoff for local Claude Code to Codex harness moves. $49 lifetime.
One identity across Claude Code, Codex, Cursor, Gemini, Windsurf: shared inbox and handoffs.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables dispatching work to DeepSeek Harness agents from Claude Code/Codex, with native progress UI, tier policy, and vision/image generation through MCP tools.434 npm182MIT
- AlicenseNot gradedqualityAmaintenanceEnables Codex to delegate coding tasks to a persistent DeepSeek Harness agent that can read repositories, edit files, and run tests, while letting users follow up, monitor progress, and interrupt the work.140 npm4MIT
- AlicenseNot gradedqualityCmaintenanceEnables Codex to delegate tasks to DeepSeek Harness through A2A/ACP, with reusable conversation contexts and a local dashboard for task status.1MIT
- AlicenseNot gradedqualityAmaintenanceEnables Claude Code, Codex, Antigravity and Grok to dispatch tasks to DeepSeek Harness agents as native subagents with live progress, tier and effort presets, workspace guardrails, a jobs board, and a vision/image-generation bridge for text-only models.354 npmMIT