Back to directory

dsh_workflow

Curated pickMaintenance: Active

omdsh-dev/dsh_workflow

KodaX 风格 Workflow 层:把 DSH 一次性多 Agent 调度升级为可命名/保存/复用/暂停恢复/重跑续跑的流程,QuickJS capability-only VM 沙箱、run graph 落盘、/workflow 命令 + 3 个工具

View on GitHub
$ dsh plugin --profile web add "github:dsh-external/dsh_workflow#main"

120

stars

5

forks

TypeScript

Language

MIT

License

2026-08-12

Created

2026-09-05

Last push

MIT-licensed, officially-bundled DSH plugin that turns one-shot multi-agent dispatch into named, reusable, pausable and resumable workflows with a QuickJS-sandboxed script VM and durable run history.

DSH integration

Native runtime

Author-claimed

Safety audit

Unaudited

Last verified

2026-08-25

License

MIT

01What can it help you accomplish?

  • Turn DeepSeek Harness’s one-shot multi-agent dispatch into named, saved, reusable workflows

    Versioned `dsh.workflow` v1 capsules (manifest + source + intent + provenance) plus a durable run graph written to disk under `.dsh/workflow-runs/`

    Teams running multi-agent jobs in DeepSeek Harness who want repeatable, auditable pipelines instead of re-describing steps every session

  • Pause, resume and rerun long-running multi-agent pipelines without starting over

    Immutable run snapshots you can re-run by id, plus `resume-run` that reuses completed task cache and continues the rest

    Operators running investigations or reviews that may be interrupted or need partial re-execution

  • Generate workflow scripts in a sandboxed QuickJS VM with deterministic capability guards

    JSON-bounded scripts that can only trigger effects through the frozen WorkflowApi, with policy rejection of import/require, shell, network and timers

    Security-conscious teams that need generated multi-agent scripts to stay reproducible and least-privilege

02How to install into DeepSeek Harness

Prerequisites

  • Node.js `>=22.19`
  • a DeepSeek Harness snapshot matching the repo’s `compatibility.json`

Installation steps

  1. 01

    Run `dsh plugin --profile web add "github:dsh-external/dsh_workflow#main"` (build artifacts are committed, so no local compile is needed)

    $ dsh plugin --profile web add "github:dsh-external/dsh_workflow#main"

  2. 02

    Run `dsh --profile web --dump-config` and confirm the bundle `- id: dsh-external-workflow` / `name: '@dsh-external/workflow'` appears in the config

    $ dsh --profile web --dump-config

  3. 03

    Restart the DSH profile, then run `/workflow list` in a session

Verify the integration

  • `dsh --profile web --dump-config` shows the `dsh-external-workflow` bundle in the profile config tree
  • after restart, `/workflow list` is available in a session

03DSH integration and capability boundaries

DSH integrationNative runtime

Ships as an official `@dsh-external/workflow` bundle with zero core patches, implementing workflow orchestration directly on DSH’s Cordis, `ctx.subagents`, Session, background jobs, approval, command and tool hooks.

  • Workflow authoring & discovery

    a natural-language request (e.g. `/workflow create …`) or a saved/capsule namea versioned capsule and a registered workflow the model can run, list and reuse

    registers discovered workflows in the project (`.dsh/workflows`) or personal (`$DSH_HOME/workflows`) catalog
  • Run & lifecycle management

    a named workflow, a saved name, or a restricted inline workflow`{ runId, status, jobId? }` is returned immediately; pass optional `--wait` to block for the terminal state

    writes run state, event graph and artifacts under `.dsh/workflow-runs/<run-id>/`
  • Capsule execution model & built-in workflows

    a `dsh.workflow` v1 capsule (manifest, source, intent, inputs, requires, provenance)phased multi-agent runs via WorkflowApi (spawnAgent/runAgent/parallel/pipeline/synthesize), incl. `parallel-investigation` and `scoped-review`

  • Deterministic discovery & resume

    built-in/pattern, project `.dsh/workflows`, or personal `$DSH_HOME/workflows`resolved workflow by deterministic search order; `resume-run` reuses completed task cache

  • Sandboxed capability-only script VM

    generated workflow scriptseffects only through the frozen WorkflowApi; JSON-serializable results/args/RPC

    runs generated scripts in an isolated QuickJS WebAssembly heap with no import/require/shell/network/timer access

04Who is it for? When not to use it?

Good for

  • Teams running multi-agent jobs in DeepSeek Harness who want repeatable, auditable pipelines instead of re-describing steps every session
  • Operators running investigations or reviews that may be interrupted or need partial re-execution
  • Security-conscious teams that need generated multi-agent scripts to stay reproducible and least-privilege

Not for

  • trusted-local `.ts`/`.mjs` workflows run with full Node host privileges, not inside the QuickJS sandbox — never mark untrusted third-party source as trusted-local.
  • DSH’s current generic subagent seam does not natively support existing-agent target, per-agent effort, or worktree; those requests need a registered dispatch/isolation adapter and fail loudly if absent.

05Compatibility, maintenance and safety notes

  • trusted-local `.ts`/`.mjs` workflows run with full Node host privileges, not inside the QuickJS sandbox — never mark untrusted third-party source as trusted-local.
  • DSH’s current generic subagent seam does not natively support existing-agent target, per-agent effort, or worktree; those requests need a registered dispatch/isolation adapter and fail loudly if absent.
  • trusted-local `.ts` uses Node 22 native erasable-syntax TypeScript and follows Node’s module cache (restart DSH after edits); publish as `.mjs/.js` when you need enum/transform-only syntax or hot reload.
2026-08-122026-08-13v0.1.3

MIT · actively maintained (latest release v0.1.3, 2026-08-13)

06Frequently asked questions

How do I install DSH Workflow into DeepSeek Harness?

Run `dsh plugin --profile web add "github:dsh-external/dsh_workflow#main"` (build artifacts are committed, so no local compile is needed), then `dsh --profile web --dump-config` and confirm the `dsh-external-workflow` bundle appears. Restart the profile and use `/workflow list` in a session.

Does it replace the built-in `/workflow` tool in DSH?

No. It does not replace DSH’s existing foreground `workflow` tool, which is good for running a set of tasks in parallel for one turn. This plugin adds the higher layer: naming, discovery, generation, reuse, pause/resume, rerun, durable evidence, cost tracking and governance.

Can I resume or rerun a workflow after an interruption?

Yes. Every run has a stable id and a `running → paused/completed/failed/denied/stopped` status. You can rerun by run id using its immutable capsule snapshot, or use `resume-run` to reuse completed task cache and continue the rest.

Is generated workflow script code safe to run?

Generated scripts run in an isolated QuickJS WebAssembly heap and can only trigger effects through the frozen WorkflowApi; import/require, shell, network, timers and non-deterministic APIs are rejected by static policy. Note that trusted-local workflows run with full Node host privileges, so never mark untrusted third-party source as trusted-local.

08Data and sources

  • Author-claimedgithub.com44b83c182aa0…

    `@dsh-external/workflow` 是一个官方 bundle 形态、零核心 patch 的 DSH 插件。

  • Author-claimedgithub.com44b83c182aa0…

    它不替换 DSH 已有的前台 `workflow` 工具。原生工具适合“这一次把若干工作并行跑完”;本插件负责更高一层的流程产品能力:命名、发现、生成、复用、暂停/恢复、重跑/续跑、持久证据、成本记录和治理。

This page is generated from the project’s public documentation, repository metadata and a structured parse of DSH Plugins; last verified on 2026-08-25. Found an error? Submit a correction.

🏆

Best DeepSeek Harness Plugins

Twelve plugins worth installing first — picked from the whole catalog, across every category.

DSH Plugins is an independent community directory of DeepSeek Harness plugins. Not affiliated with or endorsed by DeepSeek. Third-party plugins are not security-audited — review the source before installing.

New DeepSeek Harness plugins, weekly. No spam.