Skip to main content
Glama

dsh-Agentlink

dsh-Agentlink cover

CI GitHub Stars License: MIT Node.js 22+ DSH plugin

English | 简体中文

dsh-Agentlink is a plugin that lets you use DeepSeek Harness (DSH) from the AI work tool you already use. Your primary agent can delegate implementation, research, debugging, and long-log work to DSH, then observe, continue, or cancel those sessions without leaving its normal workflow. Codex and Claude Code are supported, ZCode integration is in progress, and OpenCode, Workbuddy, and other popular AI coding and agent tools are planned.

Caller support

Caller

Status

Setup or availability

Codex

✅ Supported

npm run setup

Claude Code

✅ Supported

npm run setup:claude -- --project /absolute/path/to/project

ZCode

🚧 In progress

Adapter behavior and packaging are being validated

OpenCode

⏳ Planned

Not available yet

Workbuddy

⏳ Planned

Not available yet

Only callers marked Supported have an installation path in this repository today. Planned entries are directions, not release commitments.

Related MCP server: subagent-harness-mcp

Installation

Prepare the environment first: you need Node.js 22+, a supported caller (Codex or Claude Code), and a working DSH CLI. Configure your preferred model in DSH once; dsh-Agentlink uses that live route automatically.

Install with your AI agent

Send the following repository URL and prompt to Codex or another coding agent:

Install dsh-Agentlink from https://github.com/hootandy321/dsh-Agentlink.
Check Node.js 22+, the DSH CLI, and my DSH Web Host first. Clone it into a location I approve,
run npm install and npm test. For Codex, run npm run setup -- --yes. For Claude Code, run
npm run setup:claude -- --yes --project /absolute/path/to/my/project.
For Claude Code, let setup install the project MCP entry and shipped project skill; use --replace and --replace-skill only after reviewing existing files.
If dsh_agentlink or the legacy dsh_collab entry already exists, show me the conflict before using --replace.
Do not start or stop dsh web for me. Tell me when I need to reload the selected caller and approve project MCP trust.

Manual installation

  1. Check the environment. DSH CLI 0.1.0-rc.6 and 0.1.0-rc.7 are the current tested targets.

    node --version
    dsh --version
  2. Start the official DSH Web Host in its own terminal.

    dsh web
  3. Clone the repository and install its dependencies.

    git clone https://github.com/hootandy321/dsh-Agentlink.git
    cd dsh-Agentlink
    npm install
  4. Configure your caller.

    For Codex:

    npm run setup
    npm run doctor

    The Codex wizard backs up the Codex TOML configuration and installs the MCP entry with approval_mode = "prompt". Restart Codex, then use /mcp or Codex Settings to confirm that dsh_agentlink is connected. For fully manual TOML setup, see Manual Codex MCP configuration.

    For Claude Code 2.1.199 or newer, point the setup command at the project that should share .mcp.json:

    npm run setup:claude -- --project /absolute/path/to/your/project
    cd /absolute/path/to/your/project
    claude mcp get dsh_agentlink

    The Claude setup edits only that project's .mcp.json and .claude/skills/claude-code-dsh/SKILL.md, and preserves unrelated servers. It reports each of these separately:

    • MCP registration

    • project trust

    • Claude skill status

    • Claude approval support

    • DSH permission/sandbox ownership

    • DSH Host reachability

    Open Claude Code in the project and approve the pending server through /mcp; the bridge marks dsh_resolve_approval as requiring human interaction.

    Add --yes for unattended defaults. To update an existing MCP entry, review it first and then add --replace; to update an existing Claude project skill, review it first and then add --replace-skill; to manage the skill yourself, add --no-skill. Both installers recognize the legacy dsh_collab entry and migrate it to dsh_agentlink only after explicit replacement approval. Neither installer starts DSH, changes DSH permission/sandbox settings, or restarts the caller.

The doctor reports the bridge's fail-closed lock locations under DSH_BRIDGE_HOME read-only and never cleans them, so it is safe to run even when a lock is present.

This source patch stops new projection/chunk floods from expanding the coordination ledger, but it does not compact an existing 5 MB+ ledger. Preserve the old bridge home for inspection; new delegations can use a separate DSH_BRIDGE_HOME. DSH session.history, not the bridge ledger, remains the conversation source of truth. See Known issues for the conservative recovery boundary.

dsh-Agentlink is a caller-side plugin, not a DSH Cordis bundle. Do not install it with dsh plugin --profile ... add ....

Use DSH's Harness capabilities

DSH combines persistent sessions, tool execution, subagents, and human supervision for complex work. dsh-Agentlink lets your primary caller—currently Codex or Claude Code—discuss and coordinate with that second harness while you stay in the same workflow.

Codex coordinating work with DeepSeek Harness

Codex keeps planning and supervision; DSH provides the execution harness, sessions, and workers.

More than another native subagent

A native subagent remains inside the caller's own agent tree. dsh-Agentlink adds a separate, user-configured harness: its sessions stay visible in DSH Web, can use DSH's own workers and model route, and can be observed, continued, or canceled by the primary caller.

dsh-Agentlink compared with native subagents

Use the primary agent for judgment and validation, while DSH handles larger execution workloads through the model you configured there.

Save time and cost

  • Save time. Route implementation, research, extraction, and long-log work to a fast model configured in DSH, such as a DeepSeek V4 route, while your primary agent keeps planning and validating.

  • Save money. Moving execution-heavy workloads to a lower-cost DeepSeek route can reduce consumption on more expensive primary models.

Actual speed and cost depend on the selected model, provider, deployment, network, and task. Once installed, you can keep working in Codex or Claude Code as usual and simply ask it to delegate when DSH is the better execution path.

Use it

Once dsh web is running and your caller has loaded and trusted the MCP configuration, ask Codex or Claude Code in normal language, for example:

Use dsh-Agentlink to delegate this implementation to DSH in the current repository. Keep it visible in DSH Web, report progress, and ask me before any approval.

The caller can then delegate the task, observe its event stream, continue the same session, answer questions with you, or cancel work. Open http://127.0.0.1:3080 to inspect and interact with the same session in DSH Web.

MCP tools

  • dsh_host_status — connect-only Host state and capabilities

  • dsh_delegate — create a root session and queue the initial prompt; detached by default (waitSeconds=0); workspaceMode is a bridge-local claim, not a DSH sandbox selector

  • dsh_followup — continue the same root session with explicit mode="queue"|"steer" (default queue)

  • dsh_continue — compatibility alias for dsh_followup

  • dsh_status — availability, execution, content-free launch route/failure state, lineage, queue, pending interactions, final message, cursors, and workspace claim semantics

  • dsh_tail — bounded event digests using a bridge task cursor

  • dsh_wait — wait up to 30 seconds; by default return only when the current turn is terminal, an interaction needs attention, availability is lost, or the timeout expires, and silence ordinary cursor/queue/status churn in between (use until="change" to wake on any state change, and responseMode="full" for the diagnostic status snapshot)

  • dsh_observe — compatibility alias around dsh_wait; bridge cursors replace raw session seq cursors

  • dsh_cancelscope="turn"|"queue"

  • dsh_list — task mappings enriched with current derived status

  • dsh_answer_question — typed answer for a pending question rpcId

  • dsh_resolve_approval — typed allow_once|reject response for a pending approval rpcId

  • dsh_release_workspace — explicitly release a persistent bridge workspace claim without closing the DSH session

Normal delegation has no model argument. Configure the desired model only when installing or adjusting DSH. Each delegate reads session.models.current and trusts the Host's routable boolean; it neither changes the model nor derives routability from catalog groups.

By default dsh_wait returns an until="terminal" result in responseMode="compact": it consumes ordinary cursor, queue, and status churn inside the same bounded MCP call and only wakes the caller for a terminal current turn, a pending question/approval, Host/session availability loss, or a timeout. Compact output includes only caller-actionable fields plus a wakeReason, so durable tool/session events no longer flood the caller's context. Assistant delta/chunk frames and top-level session/projection snapshots are still skipped entirely and never bump the task revision. Pass until="change" and responseMode="full" to keep the legacy diagnostic behavior of waking on every observable change with the full status snapshot. Complete final messages remain observable through status/tail after the turn ends.

Roadmap

These are planned directions, not implemented capabilities or release commitments.

  1. More caller entrypoints — complete ZCode support, then add OpenCode, Workbuddy, Claude Desktop MCP, and other callers through the shared Integration Pack architecture.

  2. Agent invocation and information transport — improve prompt organization, context packaging, output digests, and compression while keeping questions, approvals, errors, and final answers reliable.

  3. DSH plugin-aware sessions — preserve the current agentPreset path for preset-based plugins, add read-only preset/capability validation and resolved-preset reporting, and introduce a declarative session launch profile only when a plugin proves it needs typed post-create initialization.

  4. More integrations — expand after the shared Runtime and caller compatibility contract stabilize.

More documentation

License

MIT

Alpha note: DSH is still in developer preview and this community project is independent of DeepSeek and OpenAI. 0.1.0-alpha.1 contains a shared-ledger concurrency bug; it is fixed in 0.1.0-alpha.2. Read Known issues before upgrading or running concurrent bridge processes.

Available Tools

13 tools
dsh_answer_questionA

Answer one currently pending typed DSH question request. The requestId, task lineage, question ids/order, and selections are validated locally before one non-retried /api/respond write.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
answersYes
requestIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (all false), the description adds meaningful behavioral detail: validations are performed locally, the operation results in exactly 'one non-retried /api/respond write'. This discloses retry semantics and the mutation path, which is useful for an agent deciding whether to invoke or expect idempotency. It does not contradict any annotation; readOnlyHint false aligns with 'write'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description earns its two sentences. The first sentence front-loads the core action in clear terms, and the second adds dense behavioral context without fluff or redundant repetition of the schema. Every phrase contributes to helping an agent understand the tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter write tool with no output schema, the description is largely complete: it explains the core action, known validation, and write behavior. Optional parameters like sinceCursor and expectedRevision lack any contextual hint in the description or schema property descriptions, which is the main gap preventing a perfect score.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema description coverage at 0%, the description carries the naming burden. It partially succeeds by referencing 'requestId', 'task lineage', 'question ids/order', and 'selections', mapping loosely to requestId, taskId, answers[].id, and answers[].selected. However, optional parameters sinceCursor and expectedRevision are omitted, and there is no explicit mapping to the schema's custom field or the shape of the answers array.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action ('Answer') and resource ('one currently pending typed DSH question request'), making it immediately obvious what the tool does. It lacks an explicit distinction from sibling tools like dsh_continue or dsh_followup, but the phrase 'currently pending typed DSH question request' narrows the purpose enough for an agent to separate it from general session or status tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'currently pending typed DSH question request' implies when to use the tool: when there is a pending question to be answered. However, the description does not explicitly say when not to use it or which sibling alternative to prefer (e.g., dsh_continue, dsh_followup). Usage guidance is implied rather than stated, leaving some room for an agent to misroute a call.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_cancelA
Destructive

scope=turn cancels only the active root turn and preserves queued work. scope=queue non-atomically removes each item from the latest mux queue snapshot.

ParametersJSON Schema
NameRequiredDescriptionDefault
scopeNoturn
taskIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as destructive, and the description adds genuinely useful behavior beyond that: the turn scope explicitly preserves queued work, and queue removal is described as non-atomic and based on the latest mux queue snapshot. This is meaningful transparency about what gets destroyed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, front-loads the primary scope behavior, and either sentence earn its place. No redundant text, no restating of the tool title or generic cancellation wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive 4-parameter tool with no output schema, the description does not explain return behavior, partial failure states, or the semantics of sinceCursor/expectedRevision. The scope behavior and non-atomic queue removal are helpful, but important invocation context is still missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage and the description only explains the scope enum. taskId, sinceCursor, and expectedRevision are left completely unexplained, so the agent cannot infer the meaning of important parameters like optimistic concurrency guards or cursor-based synchronization.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states concrete behavior for each scope: scope=turn cancels the active root turn and preserves queued work, while scope=queue removes queued items. It is clear about what the tool operates on, though it does not explicitly distinguish itself from sibling tools by name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for choosing a scope, including that it not’s queued work and that queue removal is non-atomic. It does not provide when-not-to-use guidance or name alternatives like dsh_continue or dsh_release_workspace, so it stops short of very explicit routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_continueA

Compatibility alias for dsh_followup. Continue the same root DSH session. queue targets the next turn; steer targets the active turn's next step. The write is never automatically retried.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoqueue
promptYes
taskIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With all annotations false, the description carries the burden and adds useful context: it clarifies that the tool performs a write, is scoped to the same root DSH session, and explains the behavior of queue and steer modes. It also notes that writes are never automatically retried, a non-obvious behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences that front-load the purpose and follow with mode semantics and retry behavior. There is zero filler, making it highly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema and all false annotations require the description to cover behavior. It does cover core intent and mode semantics, but neglects parameter details, error conditions, and return values. As a compatibility alias, it is somewhat adequate but not fully self-contained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must explain parameters. Only 'mode' gets semantics via queue/steer explanation; the other four parameters (prompt, taskId, sinceCursor, expectedRevision) are not addressed beyond vague 'same root' wording, leaving the agent under-informed about their meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it is a compatibility alias for dsh_followup and continues the same root DSH session. It distinguishes between queue and steer modes with specific targets, making the tool's purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage as a drop-in replacement for dsh_followup but does not explicitly contrast with alternatives. It provides guidance on when to use queue vs steer, but lacks exclusions or conditions for choosing this tool over other sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_delegateA

Create a root session on the configured official DSH Web Host and queue the initial prompt. Uses DSH's configured model; no model argument is accepted. Detached by default.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYesExisting absolute directory visible to the DSH Host.
titleNo
promptYes
agentPresetNo
waitSecondsNo
workspaceModeNoexclusive-write

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds meaningful behavioral context beyond the annotations: it states the tool creates a session (mutation), uses DSH's configured model (so no model parameter), and is detached by default. The annotations only provide false hints, so this extra information is valuable, though it does not cover return behavior or session identification.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three concise sentences with no filler or repetition. It front-loads the core purpose and adds only high-signal details about model usage and detachment.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given six parameters and no output schema, the description is incomplete. It does not explain what the tool returns (e.g., session ID), how to interact with the created session, or the meaning/effects of parameters like waitSeconds or workspaceMode. The lack of annotation guidance further burdens the description, which it does not fully carry.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 17%, with only 'cwd' described in the schema. The description does not explain any of the six parameters (prompt, title, agentPreset, waitSeconds, workspaceMode). The note about 'no model argument accepted' is a constraint, not a parameter explanation, and 'cwd' is already covered by the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action: 'Create a root session on the configured official DSH Web Host and queue the initial prompt.' It also differentiates from siblings by noting 'no model argument is accepted' and 'Detached by default,' which sets it apart from follow-up or observation tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly conveys when to use it: for creating a root session and queuing the initial prompt. It implicitly indicates it is the entry point for a session, distinguishing from siblings like dsh_followup or dsh_continue, but it does not explicitly state exclusions or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_followupA

Continue the same root DSH session. queue targets the next turn; steer targets the active turn's next step. The write is never automatically retried.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoqueue
promptYes
taskIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotation already indicates it is not read-only (readOnlyHint=false), and the description adds meaningful behavioral details: the write is never automatically retried, and the queue/steer modes define how the followup is targeted. This goes beyond the annotation by clarifying retry behavior and mode semantics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no filler. It front-loads the core purpose, then adds mode distinction and retry behavior. Every sentence contributes essential information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the main behavior, mode semantics, and retry policy, but with no output schema and multiple siblings, it doesn't explain the intended response, prerequisites (e.g., session must exist), or interactions with dsh_status/wait. It is adequate but leaves gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description only clarifies the 'mode' parameter (queue vs steer) and indirectly the 'prompt' (as the written content). It leaves 'taskId', 'sinceCursor', and 'expectedRevision' completely unexplained, which is insufficient given five parameters and no schema help.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool's function ('Continue the same root DSH session') and distinguishes its two operational modes (queue vs steer). However, it doesn't explicitly differentiate this tool from the sibling 'dsh_continue', which may cause ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage context ('continue the same root DSH session') and provides within-tool guidance on when to use queue vs steer, but it lacks explicit guidance on when to use this tool instead of siblings like dsh_continue or dsh_delegate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_host_statusA
Read-onlyIdempotent

Report the connect-only bridge state and current official DSH Web Host capabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already disclose that this is read-only and idempotent, and the description reinforces that by saying 'report.' It adds some context about what is reported but does not disclose return format or potential operational behavior such as network dependency or staleness. No contradiction exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, information-dense sentence with no filler. Every phrase contributes meaning, and the main subject is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only status tool with strong annotations, this description is adequate. It could be slightly more complete by saying what shape the report takes or what counts as a 'capability,' but the operational risk and ambiguity are low.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantic burden on the description. The schema is empty and correctly set to disallow additional properties.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Report') and names the two things being reported: the connect-only bridge state and DSH Web Host capabilities. It is reasonably specific, though it does not explicitly differentiate itself from the sibling dsh_status tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus alternatives like dsh_status or dsh_observe. It implies a general status-checking use case but does not state exclusions or conditions for selecting another sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_listA
Read-onlyIdempotent

List bridge task mappings enriched with current derived DSH status when the Host is reachable.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool read-only, idempotent, and non-destructive. The description adds meaningful behavioral context by specifying that the list is enriched with DSH status only when the Host is reachable, implying conditional output. However, it doesn't explain fallback behavior when the host is unreachable or the output format.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no filler. Every word adds value: action, resource, enrichment, condition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no parameters and no output schema, the description gives the essential information: what is listed and the condition for enrichment. It could clarify behavior when Host is unreachable, but the overall context is sufficient for a simple list operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has zero parameters, and schema coverage is 100%. The description accordingly has no need to explain parameters; the baseline of 4 applies due to zero-parameter schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action ('List') and resource ('bridge task mappings'), with a specific qualifier about enrichment. This differentiates it from sibling tools like dsh_status which likely focus on status of a single task rather than listing mappings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when the user needs a list of bridge task mappings, but it does not provide explicit when/when-not guidance or mention alternatives among sibling tools. It lacks context on when to prefer this over dsh_status or dsh_host_status.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_observeB
Read-onlyIdempotent

Compatibility observation alias. Prefer dsh_wait plus dsh_tail task cursors.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
afterCursorNo
waitSecondsNo

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already communicate read-only, idempotent, and non-destructive behavior, so the description's burden is lower. The description adds deprecation/compatibility context and indicates that the intended operation is covered by dsh_wait plus dsh_tail, which is behavior that annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Both sentences are short and front-loaded, and there is no wasted wording. It loses a point because the description is under-specified rather than merely concise, especially around what the compatibility alias does and how its parameters behave.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a compatibility-only alias, the description provides adequate routing and safety context. However, because there is no output schema and the description never states what the call returns or how cursor/wait semantics behave, the overall picture is incomplete for an agent that actually needs to invoke this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not compensate at all, saying nothing about taskId, afterCursor, or waitSeconds. An agent must infer the meaning of all three parameters from bare names, patterns, defaults, and constraints, which is insufficient for correct invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description identifies dsh_observe as a 'compatibility observation alias' and points to dsh_wait/dsh_tail, so an agent knows roughly where it belongs. However, it never states what the observation actually does, what resource it targets, or what kind of result the agent should expect, leaving the purpose somewhat vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Prefer dsh_wait plus dsh_tail task cursors" is an explicit routing instruction with named alternatives, which is genuinely useful. What is missing is the corresponding 'when not to use' and 'when it is acceptable to use this compatibility alias' guidance, though 'compatibility' provides part of that context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_release_workspaceA
Destructive

Explicitly release this bridge task's persistent workspace claim. This does not close the DSH session or stop Web/Codex from editing the directory.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive=true, and the description adds valuable context by clarifying that releasing the claim does not close the DSH session or stop Web/Codex from editing. This helps prevent misuse. It could add more about consequence (e.g., whether the claim can be reacquired), but the added exclusions are meaningful beyond the structured hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences and immediately front-loads the primary action and resource. Each sentence adds value: the first states the purpose, the second clarifies non-effects. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a low-complexity tool with one obvious parameter and no output schema, the description covers the core purpose and key exclusions. It does not describe return values or post-conditions, but given the simplicity and the sibling context, it is sufficiently complete. Slightly more detail about what happens after release would push it higher.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one required parameter, taskId, with 0% schema description coverage. The description never mentions taskId nor explains that it identifies the bridge task whose workspace claim is released. While the name and pattern are somewhat self-evident, the description fails to compensate for the lack of schema descriptions, leaving the agent to infer the parameter's role.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Explicitly release') on a specific resource ('this bridge task's persistent workspace claim'). It also clearly distinguishes itself from related actions by noting it does not close the session or stop editing, which separates it from siblings like dsh_cancel and dsh_continue.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool: when you need to release a workspace claim. It also clarifies what it does not do, providing useful boundaries. However, it does not explicitly reference alternative tools or state 'use this instead of X', so it lacks the explicit when-not/alternatives guidance of a perfect score.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_resolve_approvalA
Destructive

Resolve one pending DSH sandbox-escalation approval as allow_once or reject. Never auto-allows; configure this Codex MCP tool with approval_mode=prompt before permitting allow_once.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
outcomeYes
requestIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (destructiveHint=true), the description adds significant behavioral detail: 'Never auto-allows' and the need for approval_mode=prompt configuration. This clarifies safety-critical behavior not captured by the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose. The second sentence is a necessary safety warning. No filler words or redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive tool with 5 parameters and no output schema, the description covers the basic purpose and safety constraint but omits details about side effects, consequences of each outcome, and prerequisites beyond 'pending.' It is minimally adequate but leaves gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description must explain parameters. It only mentions 'allow_once' and 'reject' which map to the outcome enum, but leaves taskId, requestId, sinceCursor, and expectedRevision unexplained. This is insufficient compensation for the lack of schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action: 'Resolve one pending DSH sandbox-escalation approval as allow_once or reject.' This specifies the verb (resolve), the resource (approval), and the possible outcomes, distinguishing it from sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides a critical usage prerequisite: 'configure this Codex MCP tool with approval_mode=prompt before permitting allow_once.' It also implies the tool is for pending approvals, giving clear context. However, it does not explicitly name alternative tools or exclusion conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_statusB
Read-onlyIdempotent

Return separate availability/execution state, root and descendant sessions, queue depths, pending interactions, final message, and bridge cursor/watermarks.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes

TDQS

B3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and idempotentHint=true, so the description does not need to re-state safety. It adds value by enumerating the detailed return contents, but it discloses no additional behavioral traits like permission requirements, performance implications, or error handling. This is acceptable given the strong annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that front-loads the verb and lists key status aspects. While it is a long list, it is still concise and efficiently communicates the tool's output breadth without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool returns many distinct elements, and without an output schema the description carries the burden of explaining return values. It lists them explicitly but lacks details on their structure, meaning, or edge cases. It also provides no usage context, making the description adequate but not fully complete for a complex status tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has one required parameter taskId with zero description coverage, and the tool description does not mention it or explain its format or purpose. The description fails to compensate for the schema's lack of parameter documentation, leaving the agent to infer taskId solely from the name and pattern.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns a comprehensive status object, listing specific components like availability/execution state, sessions, queue depths, and bridge cursor/watermarks. This distinguishes it from siblings like dsh_host_status, though it does not explicitly mention the task context, which is implied by the taskId parameter.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives such as dsh_tail or dsh_host_status. The description only lists output fields without indicating preferred scenarios or exclusions, so an agent must infer usage from the tool name and context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_tailB
Read-onlyIdempotent

Read bounded event digests using bridge coordination cursors. Conversation content is fetched from DSH history when reachable and is never copied into bridge persistence.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
maxBytesNo
maxEventsNo
sinceCursorNo

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, and non-destructive behavior. The description adds useful beyond-annotation context: content is fetched from DSH history when reachable and is never copied into bridge persistence. This helps the agent understand external reachability and data-hygiene semantics, though failure behavior when history is unreachable is not disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences from the core behavior without fluff. The action, the resource, the mechanism, and the key data-handling constraint are all stated efficiently and front-loaded into the first sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description is responsible for shaping an adequate mental model. It does not explain the meaning of the four parameters, how a cursor should be obtained or advanced, or what a digest structurally contains. The description is useful but not complete enough for a correct invocation beyond trial and error.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, so the description must compensate for the undocumented parameters. It hints at the 'bounded' nature of maxBytes/maxEvents and at 'cursors' for sinceCursor, but it never maps these concepts to any named parameter or explains their roles. taskId remains completely unaddressed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('Read') and resource ('bounded event digests'), so an agent knows what the tool does. It also adds the mechanism ('bridge coordination cursors'), though it does not explicitly differentiate it from sibling tools like dsh_observe or dsh_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives. The phrase 'bounded event digests' implies a history/tail-style use case, but the description never states conditions, exclusions, or which sibling tool might be more appropriate. This is essentially absent guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_waitA
Read-onlyIdempotent

Wait at most 30 seconds for a new task cursor, status/availability change, terminal state, or pending interaction. It never waits for whole-task completion.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
timeoutSecNo
sinceCursorNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, and non-destructive behavior, so the description's task is lighter here. It adds useful behavior not present in the annotations: the operation is time-bounded to 30 seconds and will not keep waiting until a task completes. It also describes the event categories that trigger a return, which a caller otherwise could not infer from the schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very efficient: one sentence states the core behavior and timeframe, and the second sentence narrows expectations with an explicit negative. The wording is front-loaded so the agent sees the crucial limitations immediately. There is no filler or repetition of available structured metadata.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple, read-only, idempotent wait tool with three flat parameters and no output schema, the description covers the main gaps: bounding timeout, trigger conditions, and non-completion behavior. The only shortfall is that it does not say what the tool returns when a timeout or event occurs, but this is largely inferable from a wait tool with a cursor parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it only partially does. 'At most 30 seconds' maps clearly to timeoutSec, and 'new task cursor' hints at sinceCursor, but taskId is not explicitly described and the cursor mechanics remain vague. The parameter names and schemas are fairly self-explanatory, but the description does not fully replace the missing per-parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the specific operation: wait at most 30 seconds for a new cursor, status/availability change, terminal state, or pending interaction. It does not just repeat the tool name and it explicitly bounds what it is not doing by saying it never waits for whole-task completion. It avoids naming a sibling tool, but the event categories are precise enough to separate it from status, tail, and observe tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear when-to-use context: when the agent needs to wait for cursors, state changes, terminal states, or pending interactions. The phrase 'It never waits for whole-task completion' is an explicit exclusion that prevents misuse. It does not point to a specific alternative tool, but the intended use is reasonably delineated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 13 tool updatesv0.1.0-alpha.1
    • First observeddsh_answer_question
    • First observeddsh_cancel
    • First observeddsh_continue
    • First observeddsh_delegate
    • First observeddsh_followup
    • First observeddsh_host_status
    • First observeddsh_list
    • First observeddsh_observe
    • First observeddsh_release_workspace
    • First observeddsh_resolve_approval
    • First observeddsh_status
    • First observeddsh_tail
    • First observeddsh_wait

TDQS

A3.5/5.0

Scored across 13 tools

Disambiguation3/5

Most tools have distinct purposes, but dsh_followup/dsh_continue are explicit aliases and dsh_observe is an alias for dsh_wait+dsh_tail, creating selection ambiguity. dsh_host_status and dsh_status also have overlapping names, though their descriptions clarify the difference.

Naming Consistency4/5

All tools share a consistent dsh_ prefix and snake_case style, and most use verb-first names (delegate, cancel, wait). Minor deviations include noun-based names like dsh_status/dsh_host_status and the alias dsh_continue that duplicates dsh_followup.

Tool Count5/5

At 13 tools, the set is well-scoped for an orchestrator, covering session, task, and approval management without overwhelming bloat. The count is within the ideal 3-15 range.

Completeness4/5

The surface covers session creation (dsh_delegate), continuation (dsh_followup), monitoring (dsh_status, dsh_tail, dsh_wait), cancellation (dsh_cancel), and human-interaction handling (dsh_answer_question, dsh_resolve_approval). A minor gap is the lack of an explicit session close/termination tool, though dsh_release_workspace handles part of the teardown.

Maintenance

ActivityMaintained
ResponsivenessResponsive

Related MCP Connectors

Related MCP Servers