Skip to main content
Glama

Codex-DSH-Orchestrator

License: MIT Node.js 22+ DSH bridge

English | 简体中文

Codex-DSH-Orchestrator is a Codex-first orchestration layer and caller-side MCP bridge for bounded collaboration with DeepSeek Harness (DSH). It lets Codex hand off implementation, research, debugging, and long-log analysis to DSH, while keeping those sessions visible and allowing Codex to observe, continue, or cancel them in the same workflow. Claude Code is also supported through the shared caller-integration layer; ZCode, OpenCode, and Workbuddy remain deferred or unverified until their host behavior is validated.

The shared bridge runtime in this repository is an independently maintained derivative of the upstream dsh-Agentlink project. The project retains the upstream MIT license and copyright attribution and is not affiliated with or endorsed by DeepSeek, OpenAI, or the upstream maintainers.

Project boundary

Codex-DSH-Orchestrator is a caller-side orchestration and MCP bridge project. It connects supported callers to an independently running DSH Web Host; it does not start, own, or authenticate that Host, and it never auto-approves DSH requests. It is not a DSH Cordis bundle.

Related MCP server: dsh-crew

Quick start

Prerequisites

  • Node.js 22+ (x64 Node 22 or 24 is the tested baseline; other majors and ARM64 are not covered)

  • A supported caller: Codex, or Claude Code 2.1.199+

  • A user-managed DSH Host path: the official DSH CLI/Web Host, or an already-running Windows DSH Desktop Host when using the explicit --desktop-auto mode

The prompt below asks an AI agent to perform the local installation while keeping Host, credentials, trust, and replacement decisions human-controlled. It is a request template, not additional permission.

Install Codex-DSH-Orchestrator from https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.
Work only in a repository directory I approve. Read the README and the focused validation/setup
instructions first; do not read credentials, private caller configuration, .env files, raw sessions,
logs, or DSH bridge state. Check Node.js 22+ and report whether the DSH CLI or an already-running
DSH Desktop Host is available. Do not start, stop, log in to, or reconfigure DSH for me.

Clone the repository, run npm ci, then run npm run check. For Codex, run npm run setup -- --yes
from the repository root. This installs the MCP entry and the shipped Codex skill into
.agents/skills/codex-dsh-orchestrator by default. If either existing MCP or skill files conflict,
stop, show the conflict without exposing secrets, and ask before using --replace or --replace-skill.
Use --no-skill only when I explicitly choose to manage the skill myself. For Claude Code, run
npm run setup:claude -- --yes --project /absolute/path/to/my/project and review --replace/--replace-skill
conflicts first.

Report separately: dependency/build checks, MCP registration, Codex skill path and exact files,
caller restart/trust still needed, and DSH Host reachability. Do not claim end-to-end success from
a successful setup exit code alone. Never start or stop DSH, approve requests, publish packages, or
write GitHub changes without my separate approval.

Quick install with PowerShell

To install the Codex integration on Windows, open PowerShell, paste the script below, and press Enter. Unless you change $installDir, it uses %USERPROFILE%\Tools\Codex-DSH-Orchestrator.

The script will:

  • clone the repository, or fast-forward an existing clean checkout;

  • install dependencies with npm ci and build the bridge;

  • run npm run setup -- --yes to write the Codex MCP entry and the repository skill;

  • finish with the read-only npm run doctor check.

The script performs setup on your machine. The only network operations are fetching the repository and npm dependencies. It does not start, stop, log in to, or reconfigure DSH, and it creates no credentials. If setup finds existing MCP or skill files that would be overwritten, it stops instead of replacing them silently; review the reported files, then re-run setup with --replace or --replace-skill only when you decide the replacement is safe.

$ErrorActionPreference = 'Stop'
$repoUrl = 'https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.git'
$installDir = Join-Path $env:USERPROFILE 'Tools\Codex-DSH-Orchestrator'

if (Test-Path -LiteralPath $installDir) {
  if (-not (Test-Path -LiteralPath (Join-Path $installDir '.git'))) {
    throw "The install directory exists but is not a Git checkout: $installDir"
  }
  Set-Location -LiteralPath $installDir
  if (@(git status --porcelain).Count -ne 0) {
    throw 'The existing checkout has local changes; review them before updating.'
  }
  git pull --ff-only
  if ($LASTEXITCODE -ne 0) { throw 'git pull --ff-only failed.' }
} else {
  New-Item -ItemType Directory -Force (Split-Path -Parent $installDir) | Out-Null
  git clone --single-branch $repoUrl $installDir
  if ($LASTEXITCODE -ne 0) { throw 'git clone failed.' }
  Set-Location -LiteralPath $installDir
}

npm ci
if ($LASTEXITCODE -ne 0) { throw 'npm ci failed.' }
npm run build
if ($LASTEXITCODE -ne 0) { throw 'npm run build failed.' }
npm run setup -- --yes
if ($LASTEXITCODE -ne 0) { throw 'npm run setup failed.' }
npm run doctor
$doctorExitCode = $LASTEXITCODE
if ($doctorExitCode -ne 0) {
  Write-Warning 'doctor did not complete successfully; confirm that the DSH Host is running, then review the doctor output.'
}

This installs the Codex integration. For Claude Code, use the separate setup:claude flow in the manual setup section below. Keep the checkout in a stable directory because setup records absolute paths in the caller configuration.

After the script finishes:

  1. Start or open the DSH Host yourself if it is not already running.

  2. Restart Codex and confirm dsh_agentlink through /mcp or Settings.

  3. Use /skills and $codex-dsh-orchestrator to confirm that the skill was discovered.

  4. If doctor warned because no Host was running, start the Host and run npm run doctor again.

A clean script exit means that the local installation steps completed. It does not by itself prove DSH login or trust, caller permissions, provider access, or a real delegation.

Manual setup and verification

  1. Start or open the DSH Host yourself. The bridge never starts, stops, or logs in to DSH Desktop/Web Host.

  2. Clone the repository and install reproducible dependencies:

    git clone https://github.com/Fly2Kiana/Codex-DSH-Orchestrator.git
    cd Codex-DSH-Orchestrator
    npm ci
  3. Configure a caller.

    For Codex, run from the repository root:

    npm run setup
    npm run doctor

    npm run setup builds the bridge, writes the Codex MCP entry with approval_mode = "prompt", and installs the two shipped skill files into .agents/skills/codex-dsh-orchestrator/: SKILL.md and agents/openai.yaml. It creates backups when replacing existing files and never overwrites a different skill without --replace-skill. Use --no-skill only to opt out, or --skill-path <directory> to choose an explicit target. Restart Codex, confirm dsh_agentlink through /mcp or Settings, then use /skills and $codex-dsh-orchestrator to verify discovery. A successful setup does not prove DSH login, permissions, trust, or end-to-end execution.

    On Windows with DSH Desktop's changing loopback port, select automatic discovery explicitly:

    npm run setup -- --desktop-auto

    Static setup requires dsh --version; --desktop-auto can use an already-running verified Desktop Host when the CLI is not on PATH. It never starts or stops DSH Desktop. For fully manual TOML setup, see Manual Codex MCP configuration.

    For Claude Code 2.1.199 or newer, point setup at the project that should share .mcp.json:

    npm run setup:claude -- --project /absolute/path/to/your/project
    cd /absolute/path/to/your/project
    claude mcp get dsh_agentlink

    Claude setup edits only that project's .mcp.json and .claude/skills/claude-code-dsh/SKILL.md, preserving unrelated servers. Open Claude Code in the project and approve the pending server through /mcp; the bridge marks dsh_resolve_approval as requiring human interaction.

    Review existing files before --replace or --replace-skill. Both setup commands recognize the legacy dsh_collab entry and migrate it only after explicit replacement approval. Neither installer changes DSH permission/sandbox settings or restarts the caller.

  4. Interpret the result conservatively:

    Check

    Setup can establish

    Still requires a human or external check

    Dependencies/build

    npm ci and the local build/tests

    Registry access and OS/runtime choices

    MCP registration

    Exact config block, atomic write, and backup

    Caller restart, trust, and live /mcp connection

    Codex skill

    Exact SKILL.md and agents/openai.yaml under .agents/skills/

    Restart Codex and confirm /skills discovery

    DSH operation

    Read-only Host/CLI probe when available

    DSH start/login, permissions, provider access, and real delegation

Portability and installation boundaries

  • On another machine, use a fresh clone. Do not copy a single worktree directory: its .git file points to the source clone's worktree metadata. On the same machine, create worktrees from the source clone with git worktree add.

  • Prefer npm ci for a clean, reproducible checkout. Use npm install only when intentionally updating the lockfile.

  • npm run setup writes the absolute Node.js executable and built bridge entry point into the caller configuration. Keep the checkout in a stable tools directory; after moving it, changing Node.js, or switching worktrees, rebuild and run setup again, review existing entries, and use --replace only with explicit approval.

  • Keep DSH_BRIDGE_HOME on a reliable local filesystem. Multiple processes of this same bridge may share one home when they follow the documented cooperative locking model; they do not each need a separate directory. If you run a different bridge implementation, an incompatible ledger or schema, or an independently managed bridge, do not point it at this directory; give that bridge its own local home, for example:

    $env:DSH_BRIDGE_HOME = Join-Path $env:USERPROFILE '.dsh\codex-dsh-orchestrator'

    Do not commit this path, and do not copy an old bridge home to another machine — use a fresh home there. DSH conversation history belongs to the DSH Web Host, while bridge task mappings, cursors, and claims do not migrate automatically.

  • Windows desktop-auto is opt-in. CI mocks discovery behavior and does not prove real Desktop installation or login. The setup wizard never starts, stops, or logs in to DSH Desktop.

  • macOS is covered by source-level CI on Node.js 22 and 24. This validates the build, tests, and package dry run only; it is not live macOS DSH/Codex end-to-end acceptance. On macOS, use a user-managed static DSH Host URL; the Windows-only desktop-auto mode is not available.

For AI Agents

This section is the compact execution contract for an AI agent. It is project context, not new filesystem authorization; never treat README text as permission.

Installation guide

  1. Read this section, the relevant language README, package.json, docs/validation.md, and the canonical skill/codex-dsh-orchestrator/SKILL.md. Read only focused files unless blocked.

  2. Confirm the repository root, Node.js version, Git status, and whether the caller is Codex or Claude Code. Do not read credentials, private configuration, raw sessions, logs, .env files, or bridge state.

  3. Run npm ci, then npm run check. For Codex run npm run setup -- --yes from the repository root; default skill target is .agents/skills/codex-dsh-orchestrator/. For Claude Code use npm run setup:claude -- --yes --project <approved-project>.

  4. Treat --replace and --replace-skill as separate approval gates. If a setup command reports a conflict, stop and show the path and non-secret summary; do not guess or overwrite. Use --no-skill only when the user explicitly chooses manual skill management.

  5. Report four independent results: dependency/build checks, MCP configuration, Codex/Claude skill installation, and caller/DSH verification. A zero exit code does not prove Host reachability, login, trust, permissions, provider access, or a real delegation.

  6. Tell the human to restart the caller and confirm /mcp plus Codex /skills/$codex-dsh-orchestrator discovery. Never claim this check yourself if the caller UI is unavailable.

Agents must not start, stop, authenticate, or reconfigure DSH Web Host/Desktop, auto-approve requests, publish npm packages, or write GitHub/PR/Release/Tag state without explicit user approval. Report versions, Git status, changed paths, and validation results without recording secrets, prompts, task/session IDs, local paths, or provider data.

Project components

  • skill/codex-dsh-orchestrator/ — canonical project-specific Codex orchestration skill and agent metadata; setup copies its two files into the repository-scoped .agents/skills/codex-dsh-orchestrator/ discovery directory. That generated copy is ignored by Git; update the canonical source instead.

  • skill/codex-dsh/ — shared Codex caller compatibility skill.

  • skill/claude-code-dsh/ — retained Claude Code caller compatibility skill.

  • src/ — shared caller-neutral MCP bridge runtime and setup tools.

  • test/ — local mock-host, safety, compatibility, and integration tests.

  • docs/project-overview.md — detailed ownership and architecture map.

The dsh-Agentlink name remains in runtime identifiers and upstream attribution for compatibility and legal clarity; it is not the public project title.

Caller support

Caller

Status

Setup or availability

Codex

✅ Supported

npm run setup (MCP + repository skill)

Claude Code

✅ Supported

npm run setup:claude -- --project /absolute/path/to/project

ZCode

⏸ Deferred

First candidate when verified caller-expansion work resumes

OpenCode

⏳ Planned

Not available yet

Workbuddy

⏳ Planned

Not available yet

Only callers marked Supported have an installation path in this repository today. Planned entries are directions, not release commitments.

The doctor reports the bridge's fail-closed lock locations under DSH_BRIDGE_HOME read-only and never cleans them, so it is safe to run even when a lock is present.

This source patch stops new projection/chunk floods from expanding the coordination ledger, but it does not compact an existing 5 MB+ ledger. Preserve the old bridge home for inspection; new delegations can use another independent DSH_BRIDGE_HOME when isolation is needed. DSH session.history, not the bridge ledger, remains the conversation source of truth. See Known issues for the conservative recovery boundary.

This bridge (runtime name dsh_agentlink) is a caller-side plugin, not a DSH Cordis bundle. Do not install it with dsh plugin --profile ... add ....

Why Codex-DSH-Orchestrator?

Use DSH's Harness capabilities

DSH combines persistent sessions, tool execution, subagents, and human supervision for complex work. Codex-DSH-Orchestrator lets your primary caller—currently Codex or Claude Code—discuss and coordinate with that second harness while you stay in the same workflow.

More than another native subagent

A native subagent remains inside the caller's own agent tree. The shared bridge adds a separate, user-configured harness: its sessions stay visible in DSH Web, can use DSH's own workers and model route, and can be observed, continued, or canceled by the primary caller.

Save time and cost

  • Save time. Route implementation, research, extraction, and long-log work to a fast model configured in DSH, such as a DeepSeek V4 route, while your primary agent keeps planning and validating.

  • Save money. Moving execution-heavy workloads to a lower-cost DeepSeek route can reduce consumption on more expensive primary models.

Actual speed and cost depend on the selected model, provider, deployment, network, and task. Once installed, you can keep working in Codex or Claude Code as usual and simply ask it to delegate when DSH is the better execution path.

Use it

Once dsh web is running and your caller has loaded and trusted the MCP configuration, ask Codex or Claude Code in normal language, for example:

Use Codex-DSH-Orchestrator to delegate this implementation to DSH in the current repository. Keep it visible in DSH Web, report progress, and ask me before any approval.

The caller can then delegate the task, observe its event stream, continue the same session, answer questions with you, or cancel work. Open the configured DSH Web origin to inspect and interact with the same session. On Windows, an opt-in DSH_HOST_MODE=desktop-auto runtime can discover the verified loopback listener owned by DSH Desktop instead of relying on its changing ephemeral port; an explicit DSH_HOST_URL always wins.

Before a new delegation, the caller builds a compact handoff in the prompt from already-known progress and read-only workspace evidence: objective, completed work, Git HEAD/status and changed paths when available, focus code/Markdown paths, relevant tests, constraints, and unresolved issues. It tells DSH to read the focus paths first and avoid a repository-wide scan unless blocked. The handoff excludes secrets, raw large diffs, file bodies, caller chat, and internal reasoning. This is guidance for the caller, not new filesystem authorization; dsh-Agentlink does not receive prior caller conversation state automatically. For the same known BridgeTask, the caller uses dsh_followup; if no matching task id is known, it starts a fresh delegation rather than guessing an old id.

When the user explicitly identifies an existing DSH Desktop session, the caller can first use dsh_find_sessions to read bounded root-session metadata, then use dsh_attach_session with the exact returned session id and fresh metadata preconditions. Titles are discovery aids, never attachment identities. Attachment accepts only an idle root session, creates or reuses bridge-local mapping and workspace-claim state, and may reconcile history for supervision without returning or persisting conversation bodies. It does not create or rename a DSH session, send a prompt, or change model routing. A later dsh_followup carries the compact handoff when work should continue.

Reusing a session across Codex tasks is a conservative three-way choice: same-known-task, attached-existing-task, or new-session. Reuse only the same known BridgeTask for the same workstream; for a new task with explicit continuation evidence, discover exactly one canonical-cwd, mapped, idle root through metadata-only dsh_find_sessions and attach with fresh preconditions before continuing with dsh_followup. Never reuse by title or similarity and never read history for discovery; fail closed on ambiguous, running, stale, missing-cwd, or mapping-conflict candidates. Reuse can save handoff and repository-reading work but can increase input tokens, so it is a cost optimization only while continuity remains relevant. Reuse and avoided rescans are not proof of provider prompt-cache hits or token discounts; provider cache evidence is not exposed unless DSH publishes documented aggregate usage telemetry.

MCP tools

  • dsh_host_status — connect-only Host state and capabilities

  • dsh_find_sessions — bounded metadata-only discovery of existing root sessions; no history or raw projections

  • dsh_attach_session — safely attach one exact idle root session using fresh id/title/cwd/update preconditions; no prompt or model change

  • dsh_delegate — create a root session and queue the initial prompt; optionally select inherit|flash|pro|official-flash-vision|modlens-flash|modlens-pro plus a catalog-supported reasoningEffort, or declare visualIntent="required" with complexity="low"|"high" for the visual policy; detached by default (waitSeconds=0); workspaceMode is a bridge-local claim, not a DSH sandbox selector

  • dsh_followup — continue the same root session with explicit mode="queue"|"steer" (default queue); optionally select the same semantic model profiles and validated reasoning effort before the prompt

  • dsh_continue — compatibility alias for dsh_followup

  • dsh_status — availability, execution, lineage, queue, pending interactions, final message, cursors, visual fallback marker, and workspace claim semantics

  • dsh_tail — bounded event digests using a bridge task cursor

  • dsh_wait — wait up to 30 seconds for a durable event, state change, pending interaction, or terminal status

  • dsh_observe — compatibility alias around dsh_wait; bridge cursors replace raw session seq cursors

  • dsh_cancelscope="turn"|"queue"

  • dsh_list — task mappings enriched with current derived status

  • dsh_answer_question — typed answer for a pending question rpcId

  • dsh_resolve_approval — typed allow_once|reject response for a pending approval rpcId

  • dsh_release_workspace — explicitly release a persistent bridge workspace claim without closing the DSH session

Model routing is opt-in and backward-compatible for both delegation and follow-up. When modelProfile and reasoningEffort are omitted, the operation reads session.models.current, verifies routable, and does not call session.selectModel. The semantic mappings are flash/pro -> deepseek-official/deepseek-v4-{flash,pro}, official-flash-vision -> deepseek-official/deepseek-v4-flash-vision-exp, and modlens-flash/modlens-pro -> deepseek-modlens/deepseek-v4-{flash,pro}. The requested provider, model, and effort must exist in the live session.models catalog. Selection is performed and re-read before the initial or follow-up prompt; any mismatch fails closed without sending that prompt. For visual-required requests, only the selection/verification stage is retried a bounded number of times, and only while every failure is an explicitly classified force-majeure failure (timeout, unreachable Host, or HTTP 5xx); after those retries are exhausted the bridge attempts ModLens Flash exactly once. The prompt write itself is never retried.

An explicit user choice always wins. Without one, the primary caller may keep inherit, use Flash for routine search/implementation/test repair, and use Pro for architecture or difficult multi-step debugging. Visual work must declare visualIntent="required" with complexity: low complexity selects the official native Flash Vision; high complexity requires an explicit user choice between official-flash-vision and modlens-pro and otherwise fails closed with user_choice_required before sending anything. modlens-flash is never a first choice: only after the approved visual route exhausts bounded retries with explicitly classified force-majeure failures does the bridge attempt ModLens Flash once. Invalid input, missing models, protocol/configuration errors, and permission or credential rejections never trigger the fallback. When the fallback is used, the result reports visualRouting.fallback with a short non-sensitive notice and a minimal coordination marker is exposed through dsh_status.visualFallback; the caller must briefly tell the user at task end. dsh-Agentlink transports text prompts only: include absolute local image paths that the DSH Host and ModLens tools can access; it does not upload image bytes. selectionReason provides an optional audit explanation and is not sent to DSH.

On the locally verified DSH rc.6 collapsed Code Mode path, ModLens visual handoffs use the outer run_code transport and call registered modlens_read_image through the injected tools SDK inside that program. Official native Flash Vision uses its native visual path instead. A caller should treat the ModLens outer event as expected, forbid shell/browser/OCR/image-library fallbacks, and wait for the nested result or an explicit nested/terminal error. A plugin's documented inner timeout is not the overall delegation deadline. This is version-scoped compatibility guidance; later Hosts should follow their verified live capability when it differs.

Important DSH rc.6 side effect: session.selectModel also saves the selection as DSH's global default for later sessions. Delegate and follow-up results report modelRouting.persistsAsDshDefault=true and a warning whenever explicit selection occurs. Omit routing fields if that persistence is not acceptable. If selection verification fails after the write was attempted, no prompt is sent, but the requested selection may already be the global default.

dsh_wait observes durable bridge state. Assistant delta/chunk frames and top-level session/projection snapshots are skipped, so they do not bump the task revision or wake waiters; complete final messages remain observable through status/tail after the turn ends.

Roadmap

These are planned directions, not implemented capabilities or release commitments.

  1. More caller entrypoints — evaluate ZCode first when caller expansion resumes, then consider OpenCode, Workbuddy, Claude Desktop MCP, and other callers through the shared Integration Pack architecture.

  2. Agent invocation and information transport — improve prompt organization, context packaging, output digests, and compression while keeping questions, approvals, errors, and final answers reliable.

  3. DSH plugin-aware sessions — preserve the current agentPreset path for preset-based plugins, add read-only preset/capability validation and resolved-preset reporting, and introduce a declarative session launch profile only when a plugin proves it needs typed post-create initialization.

  4. More integrations — expand after the shared Runtime and caller compatibility contract stabilize.

More documentation

Project or standard

Relationship

Codex-DSH-Orchestrator

This project — a Codex-first caller-side MCP bridge; runtime name dsh_agentlink

Codex / Claude Code MCP

Supported callers

DeepSeek Harness / source repository

The separately managed DSH Host ecosystem this bridge connects to

DSH Desktop

An independent community desktop client for DeepSeek Harness; this bridge can connect to its DSH Host through the opt-in Windows --desktop-auto mode

ModLens

An independent vision plugin and bridge for text-only coding agents. Its deepseek-modlens models can appear in the DSH catalog for this bridge's optional visual path. Under this bridge's default visual policy, ModLens Pro is the explicit alternative for high-complexity visual work; ModLens Flash is never a default — the bridge tries it exactly once, only after the approved visual route exhausts bounded retries with force-majeure failures (timeout, unreachable Host, HTTP 5xx), and the caller tells the user at task end. Explicit user route requests retain compatibility precedence. Not maintained by or affiliated with this project

Model Context Protocol

Protocol foundation used by the bridge

dsh-Agentlink

Upstream project and compatibility lineage; MIT license and NOTICE attribution are retained

These links describe the projects and standards this repository integrates with, uses, or derives from; they do not imply a joint project, endorsement, co-maintenance, or shared security boundary. Architecture references such as cc-connect, gpt2agent, Scryer, wshobson/agents, agent-harness, and ACP are documented as references, not dependencies, partners, or supported callers.

License

MIT

Alpha note: DSH is still in developer preview, and this community project is independent of DeepSeek and OpenAI. The shared-ledger concurrency bug in 0.1.0-alpha.1 was fixed in 0.1.0-alpha.2. Read Known issues before upgrading or running concurrent bridge processes.

Available Tools

15 tools
dsh_answer_questionA

Answer one currently pending typed DSH question request. The requestId, task lineage, question ids/order, and selections are validated locally before one non-retried /api/respond write.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
answersYes
requestIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (all false), the description adds meaningful behavioral detail: validations are performed locally, the operation results in exactly 'one non-retried /api/respond write'. This discloses retry semantics and the mutation path, which is useful for an agent deciding whether to invoke or expect idempotency. It does not contradict any annotation; readOnlyHint false aligns with 'write'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description earns its two sentences. The first sentence front-loads the core action in clear terms, and the second adds dense behavioral context without fluff or redundant repetition of the schema. Every phrase contributes to helping an agent understand the tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter write tool with no output schema, the description is largely complete: it explains the core action, known validation, and write behavior. Optional parameters like sinceCursor and expectedRevision lack any contextual hint in the description or schema property descriptions, which is the main gap preventing a perfect score.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema description coverage at 0%, the description carries the naming burden. It partially succeeds by referencing 'requestId', 'task lineage', 'question ids/order', and 'selections', mapping loosely to requestId, taskId, answers[].id, and answers[].selected. However, optional parameters sinceCursor and expectedRevision are omitted, and there is no explicit mapping to the schema's custom field or the shape of the answers array.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action ('Answer') and resource ('one currently pending typed DSH question request'), making it immediately obvious what the tool does. It lacks an explicit distinction from sibling tools like dsh_continue or dsh_followup, but the phrase 'currently pending typed DSH question request' narrows the purpose enough for an agent to separate it from general session or status tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'currently pending typed DSH question request' implies when to use the tool: when there is a pending question to be answered. However, the description does not explicitly say when not to use it or which sibling alternative to prefer (e.g., dsh_continue, dsh_followup). Usage guidance is implied rather than stated, leaving some room for an agent to misroute a call.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_attach_sessionA

Attach one idle existing root DSH session to the bridge using its exact sessionId and fresh discovery preconditions. This creates or reuses bridge-local mapping/claim state and starts normal supervision reconciliation: it does not prompt DSH, create or rename a DSH session, return or persist conversation bodies, or change model routing. After success, use dsh_followup with a compact handoff when work should continue.

ParametersJSON Schema
NameRequiredDescriptionDefault
sessionIdYes
allowBlankNo
expectedCwdYesAbsolute cwd copied from the selected dsh_find_sessions result.
expectedTitleYesExact title copied from dsh_find_sessions, including null when no title is present.
workspaceModeNoBridge-local cooperative workspace claim only; it does not configure the DSH sandbox.exclusive-write
expectedUpdatedAtYes

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are all false, giving little guidance beyond the lowest-level safety flags. The description compensates well by stating that it creates/reuses bridge-local state, starts reconciliation, and will not perform a list of DSH-related mutations or data transformations. It does not cover failure modes, error returns, or potential side effects on the bridge beyond what is described, but the core behavior is laid out clearly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three front-loaded sentences: the action, the effects/exclusions, and the follow-up instruction. It is effective and relevant. It is slightly dense with multiple compound clauses, but every phrase adds behavioral or routing value, so it is not wasted text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description carries the burden of saying what happens on success: creating/reusing mapping/claim state and starting supervision, with a defined next step. It nicely scopes out many side effects (does not prompt, create, rename, persist, or route). What is missing is any guidance on failure cases, e.g., what happens if the discovery preconditions don't match, or whether the tool can outright fail. That keeps it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema descriptions cover 50% (expectedCwd, expectedTitle, workspaceMode). The description adds a small amount of contextual glue by calling the expected fields 'fresh discovery preconditions' and emphasizing 'exact', which clarifies expectedUpdatedAt and expectedTitle. But it does not explain allowBlank at all, and the role of expectedUpdatedAt is only inferable as a precondition after attaching session's stale or not. This is better than empty, but does not fully close the schema's coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb-resource pair: 'Attach one idle existing root DSH session to the bridge using its exact sessionId and fresh discovery preconditions.' It also enumerates what the tool does not do (prompt DSH, create or rename sessions, return/persist conversations, change routing), which effectively distinguishes it from sibling tools such as dsh_followup and dsh_delegate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear triggers: attach when there is an idle existing root DSH session and you have exact sessionId plus fresh discovery preconditions. It also states the follow-up path ('After success, use dsh_followup with a compact handoff when work should continue'), which is useful routing guidance. It stops short of explicitly listing alternatives to not use under certain circumstances, and could have said 'do not use if the session is not idle'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_cancelA
Destructive

scope=turn cancels only the active root turn and preserves queued work. scope=queue non-atomically removes each item from the latest mux queue snapshot.

ParametersJSON Schema
NameRequiredDescriptionDefault
scopeNoturn
taskIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as destructive, and the description adds genuinely useful behavior beyond that: the turn scope explicitly preserves queued work, and queue removal is described as non-atomic and based on the latest mux queue snapshot. This is meaningful transparency about what gets destroyed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, front-loads the primary scope behavior, and either sentence earn its place. No redundant text, no restating of the tool title or generic cancellation wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive 4-parameter tool with no output schema, the description does not explain return behavior, partial failure states, or the semantics of sinceCursor/expectedRevision. The scope behavior and non-atomic queue removal are helpful, but important invocation context is still missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage and the description only explains the scope enum. taskId, sinceCursor, and expectedRevision are left completely unexplained, so the agent cannot infer the meaning of important parameters like optimistic concurrency guards or cursor-based synchronization.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states concrete behavior for each scope: scope=turn cancels the active root turn and preserves queued work, while scope=queue removes queued items. It is clear about what the tool operates on, though it does not explicitly distinguish itself from sibling tools by name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for choosing a scope, including that it not’s queued work and that queue removal is non-atomic. It does not provide when-not-to-use guidance or name alternatives like dsh_continue or dsh_release_workspace, so it stops short of very explicit routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_continueA

Compatibility alias for dsh_followup. Continue the same known BridgeTask and root DSH session instead of creating another delegation for the same work. Never guess an old task id; start a fresh delegation when no matching task id is known. queue targets the next turn; steer targets the active turn's next step. Optional semantic model routing is catalog-validated and re-read before the prompt; selection failure sends no prompt, but an attempted session.selectModel may already have persisted as the DSH global default. Omit routing to inherit. The write is never automatically retried.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoqueue
promptYes
taskIdYes
sinceCursorNo
modelProfileNoOptional semantic route selected and re-verified before this follow-up prompt; omit to inherit the session route. Explicit selection persists as the DSH default.
reasoningEffortNoOptional effort id advertised by the selected live session catalog model.
selectionReasonNoOptional audit explanation for the route choice; never sent to DSH.
expectedRevisionNo

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Although annotations provide no safety hints and idempotentHint=false, the description exposes non-obvious behavior: model routing is catalog-validated and re-read before the prompt, failure may skip the prompt but can still persist a selectModel global default, and 'the write is never automatically retried.' This is exactly the kind of behavioral context an agent cannot infer from the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but not bloated; every sentence contributes meaningful guidance. It front-loads purpose and task-id safety rules, then details routing and retry semantics. Minor structural improvement would be grouping routing caveats more cleanly, but the overall length is appropriate.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the absence of an output schema and the complexity of the tool, the description covers critical fallback behavior and model-routing pitfalls. It is not fully complete because it omits the meaning of sinceCursor/expectedRevision and any return-value guidance, which would matter to an agent trying to verify the tool's result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 38%, and the description valuably annotates mode, model routing, and the task-id rule. However, key parameters such as sinceCursor and expectedRevision are never mentioned, and prompt is only implicit. The description partially compensates for the low coverage but leaves important gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Compatibility alias for dsh_followup' and specifies the exact operation: 'Continue the same known BridgeTask and root DSH session.' It also distinguishes this tool from creating another delegation, so an agent can clearly recognize its role relative to siblings like dsh_delegate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit decision rules: use this when a matching task id is known, and 'start a fresh delegation when no matching task id is known.' It also clarifies mode boundaries ('queue targets the next turn; steer targets the active turn's next step'), which is strong guidance for correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_delegateA

Create a root session on the configured official DSH Web Host and queue the initial prompt. Before calling, put a compact handoff in prompt from known progress plus read-only Git/workspace evidence; identify focus paths and tell DSH to read those focus paths first instead of scanning the whole repository unless blocked. An explicit user choice of modelProfile or reasoningEffort always takes precedence. Otherwise the caller may choose pro for complex work and a modlens profile for visual work whose local image paths are included in the prompt; omit routing fields to inherit DSH's configured model. Explicit selection uses session.selectModel, which also persists the selection as the DSH default for later sessions. Detached by default. workspaceMode is only a bridge-local cooperative claim and does not select or verify the DSH sandbox.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYesExisting absolute directory visible to the DSH Host.
titleNo
promptYes
agentPresetNoDSH agent composition/preset name. This does not express workspace ownership or verified sandbox policy.
waitSecondsNo
modelProfileNoSemantic route: flash/pro use deepseek-official; modlens-flash/modlens-pro use deepseek-modlens for visual work; inherit keeps the current route. Explicit user choice takes precedence over caller heuristics.
workspaceModeNoBridge-local cooperative workspace claim only; it is not a DSH Host filesystem sandbox selector or verifier.exclusive-write
reasoningEffortNoOptional effort id. It must be advertised by the selected model in session.models.
selectionReasonNoOptional audit explanation for the caller's explicit or autonomous profile choice; never sent to DSH.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

It discloses several non-obvious behaviors: the call is detached by default, explicit model selection persists as the DSH default via session.selectModel, and workspaceMode is only a cooperative local claim, not a sandbox verifier. These go beyond the uninformative annotations. The description doesn't say what the call returns, but it still carries substantial transparency burden well.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the main purpose and then organized around actionable instructions. It is longer than minimal but each sentence earns its place; the only slight redundancy is repeating that explicit user choices take precedence before explaining session.selectModel persistence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and several complex fields, the description completes most of the Agent's decision loop: what to prepare, how to route, and why workspaceMode is not a sandbox claim. It leaves a small gap by not stating what the call returns or how to coordinate with dsh_wait, dsh_find_sessions, and dsh_attach_session, but those appear as siblings and are inferable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 67%, and the description adds meaning beyond the schema for prompt construction, modelProfile routing and precedence, and the workspaceMode caveat. It doesn't elaborate on waitSeconds or the literal return identity, but the most decision-critical parameters are given practical semantic context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence clearly states the action: "Create a root session on the configured official DSH Web Host and queue the initial prompt." It identifies a specific verb and resource, and the "root session" phrasing distinguishes it from sibling attach/followup tools that work on existing sessions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives concrete pre-call guidance: include a compact handoff with read-only evidence, identify focus paths, and tell DSH to read those first. It also explains when to choose pro versus modlens profiles and when to omit routing fields. It does not explicitly name "use dsh_attach_session instead for existing sessions," but the focus on initial root session makes the intended case clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_find_sessionsA
Read-onlyIdempotent

Read bounded metadata for existing root sessions from DSH session.list. It can filter titles exactly or by a case-sensitive substring, or narrow candidates by an exact canonical cwd, an unambiguous BridgeTask mapping, or idle state; it returns no history or raw projections. These filters narrow candidates but never authorize automatic selection, history reads, attachment, or prompting. Use the returned exact sessionId and precondition fields with dsh_attach_session; never select a session by title alone.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoOptional absolute existing workspace path; matches only sessions whose advertised cwd resolves to the same canonical directory.
titleNo
idleOnlyNoReturn only sessions whose root turn is not running.
mappedOnlyNoReturn only sessions with one unambiguous existing BridgeTask mapping.
maxResultsNo
titleMatchNoexact
includeBlankNo

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive behavior, and the description adds valuable limits beyond annotations: it returns no history/raw projections, filters never authorize automatic selection or attachment, and results are limited to bounded metadata. This gives an agent a precise behavioral contract.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the core operation and followed by filter semantics and a critical usage warning. Every sentence earns its place; there is no redundant filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter tool with no output schema and only 43% schema description coverage, the description covers the main purpose, key filters, return usage, and boundary behavior. It omits maxResults and includeBlank semantics, so it is not fully complete, but it is notably stronger than the median tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description maps four semantic filters to parameters: exact/case-sensitive title matching (title/titleMatch), canonical cwd (cwd), idle state (idleOnly), and BridgeTask mapping (mappedOnly). However, schema coverage is only 43%, and maxResults and the opaque includeBlank are never explained. The description partially compensates but leaves real gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Read bounded metadata for existing root sessions from DSH session.list.' It then lists the exact filter dimensions and states what the tool does not return ('no history or raw projections'), which clearly separates it from session-history and attach-type siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit downstream directive: use the returned exact sessionId and precondition fields with dsh_attach_session, and never select a session by title alone. It does not fully enumerate when to prefer this tool over every sibling, but it gives strong context on how to consume the result.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_followupA

Continue the same known BridgeTask and root DSH session instead of creating another delegation for the same work. Never guess an old task id; start a fresh delegation when no matching task id is known. queue targets the next turn; steer targets the active turn's next step. Optional semantic model routing is catalog-validated and re-read before the prompt; selection failure sends no prompt, but an attempted session.selectModel may already have persisted as the DSH global default. Omit routing to inherit. The write is never automatically retried.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoqueue
promptYes
taskIdYes
sinceCursorNo
modelProfileNoOptional semantic route selected and re-verified before this follow-up prompt; omit to inherit the session route. Explicit selection persists as the DSH default.
reasoningEffortNoOptional effort id advertised by the selected live session catalog model.
selectionReasonNoOptional audit explanation for the route choice; never sent to DSH.
expectedRevisionNo

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations show the tool is not read-only and not idempotent, but the description adds important behavioral context: the write is never automatically retried, and an attempted session.selectModel may persist as the DSH global default even when selection fails. This goes beyond what the annotations say, though it does not cover all possible side effects like auth failures or destruction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but well organized: core purpose first, followed by a guardrail about task IDs, then mode behavior, routing caveats, and retry semantics. Each sentence earns its place and there is minimal redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a write tool with no output schema and 8 parameters, the description covers the essential behavior needed to select the tool and make a correct call, including the no-guess rule, mode semantics, routing side effects, and no automatic retry. It is not fully complete because some non-required paramters like expectedRevision and sinceCursor remain semantically under-specified and the description does not mention what the agent should expect in return.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds real semantics for mode and model routing: queue targets the next turn, steer targets the active turn's next step, and routing can be omitted to inherit the session route. However, schema description coverage is low at 38%, and parameters like sinceCursor and expectedRevision are not explained in the description, leaving gaps for an agent that needs to use them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action: continue the same known BridgeTask and root DSH session rather than creating a new delegation for the same work. It also gives a clear decision rule about known vs unknown task IDs, which helps distinguish the tool from sibling tools like dsh_delegate and dsh_continue.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use the tool, when not to use it, and what to do instead: never guess an old task ID and start a fresh delegation if no matching task ID is known. It also clarifies the queue and steer modes and the consequences of selection failure, leaving little ambiguity about correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_host_statusA
Read-onlyIdempotent

Report the connect-only bridge state and current official DSH Web Host capabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already disclose that this is read-only and idempotent, and the description reinforces that by saying 'report.' It adds some context about what is reported but does not disclose return format or potential operational behavior such as network dependency or staleness. No contradiction exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, information-dense sentence with no filler. Every phrase contributes meaning, and the main subject is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only status tool with strong annotations, this description is adequate. It could be slightly more complete by saying what shape the report takes or what counts as a 'capability,' but the operational risk and ambiguity are low.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantic burden on the description. The schema is empty and correctly set to disallow additional properties.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Report') and names the two things being reported: the connect-only bridge state and DSH Web Host capabilities. It is reasonably specific, though it does not explicitly differentiate itself from the sibling dsh_status tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus alternatives like dsh_status or dsh_observe. It implies a general status-checking use case but does not state exclusions or conditions for selecting another sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_listA
Read-onlyIdempotent

List bridge task mappings enriched with current derived DSH status and bridge-local workspace claim semantics when the Host is reachable.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint, idempotentHint, and destructiveHint false. The description adds meaningful behavioral context by mentioning 'current derived DSH status' and 'bridge-local workspace-local claim semantics', which are beyond what annotations reveal. It also conditionally scopes enrichment to Host reachability, although it does not specify behavior when the Host is unreachable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one sentence, front-loaded with the action and resource, and uses no filler. It packs the key qualifiers (status enrichment, local workspace-local semantics, Host reachability) into a compact but coherent phrase. Every element contributes meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With zero parameters and no output schema, an agent relies almost entirely on this description to understand what it will get. The description says mappings are enriched, but never describes the return shape, ordering, or what happens when Host is unreachable. It is enough for basic selection, but incomplete for confidently predicting behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, and the schema coverage is complete by that baseline. There is therefore no parameter-semantic gap for the description to fill. Per the rubric, zero-parameter tools receive a baseline score of 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action and resource: 'List bridge task mappings' with enrichment. It clearly indicates this is a read-only listing of bridge task mappings, which differentiates it in topic from most siblings. However, it does not explicitly distinguish itself from dsh_find_sessions or dsh_status, so sibling differentiation is only implied.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'when the Host is reachable' hints at an operating condition, and calling the tool after 'bridge task mappings' suggests it is for enumerating current mappings. But the description never states when the tool should be preferred over siblings or when not to use it. The usage is implied rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_observeB
Read-onlyIdempotent

Compatibility observation alias. Prefer dsh_wait plus dsh_tail task cursors.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
afterCursorNo
waitSecondsNo

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already communicate read-only, idempotent, and non-destructive behavior, so the description's burden is lower. The description adds deprecation/compatibility context and indicates that the intended operation is covered by dsh_wait plus dsh_tail, which is behavior that annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Both sentences are short and front-loaded, and there is no wasted wording. It loses a point because the description is under-specified rather than merely concise, especially around what the compatibility alias does and how its parameters behave.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a compatibility-only alias, the description provides adequate routing and safety context. However, because there is no output schema and the description never states what the call returns or how cursor/wait semantics behave, the overall picture is incomplete for an agent that actually needs to invoke this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not compensate at all, saying nothing about taskId, afterCursor, or waitSeconds. An agent must infer the meaning of all three parameters from bare names, patterns, defaults, and constraints, which is insufficient for correct invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description identifies dsh_observe as a 'compatibility observation alias' and points to dsh_wait/dsh_tail, so an agent knows roughly where it belongs. However, it never states what the observation actually does, what resource it targets, or what kind of result the agent should expect, leaving the purpose somewhat vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Prefer dsh_wait plus dsh_tail task cursors" is an explicit routing instruction with named alternatives, which is genuinely useful. What is missing is the corresponding 'when not to use' and 'when it is acceptable to use this compatibility alias' guidance, though 'compatibility' provides part of that context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_release_workspaceA
Destructive

Explicitly release this bridge task's persistent workspace claim. This does not close the DSH session or stop other clients from editing the directory.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the operation as non-readonly and potentially destructive, but the description adds valuable behavioral context: it releases a claim while leaving the session open and not affecting other clients' editing. This goes beyond the annotations with meaningful side-effect disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two crisp sentences deliver the core action and the key negative side effect without redundant framing. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter operation with this scope, the description fully covers the action, the affected resource, and the main misinterpretation risk. The absence of an output schema does not leave a serious gap because the tool's primary purpose and non-effects are clearly stated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema only defines taskId with a pattern and provides no description. The tool description references 'this bridge task's persistent workspace claim,' which suggests taskId identifies the relevant bridge task, but it does not explicitly explain the parameter semantics or where the value comes from in the schema. With schema coverage at 0%, the description could compensate more.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('release') with a specific resource ('persistent workspace claim') and immediately clarifies the boundary ('does not close the DSH session...'). This clearly identifies what the tool does and distinguishes it from session-level or editing commands.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'explicitly release this bridge task's persistent workspace claim' makes the intended situation clear, and the statement about not closing the session or blocking other clients provides a useful when-not condition. It does not name alternative sibling tools, but the exclusion is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_resolve_approvalA
Destructive

Resolve one pending DSH sandbox-escalation approval as allow_once or reject. Never auto-allows; keep this tool behind the caller's human approval prompt before permitting allow_once.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
outcomeYes
requestIdYes
sinceCursorNo
expectedRevisionNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare destructiveHint=true, readOnlyHint=false, and idempotentHint=false. The description adds a policy-level behavioral trait: the tool does not auto-allow and must be gated by human approval. However, it does not disclose what actually changes on allow_once vs reject, such as side effects to the DSH sandbox or any return feedback.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler: the first states the core action and allowed outcomes, the second gives the critical safety guardrail. It is front-loaded and all content is relevant to safe invocation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter mutation with no output schema, this description is thin. It does not explain what the optional sinceCursor and expectedRevision are for, how a pending approval is selected, or what the result of resolving one is. The safety guardrail is useful, but the rest of the invocation context is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it only repeats the allow_once/reject concept from the outcome enum. It gives no semantics for taskId, requestId, sinceCursor, or expectedRevision; the agent has to rely on parameter names and schema constraints alone to understand how to identify and resolve the right pending request.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action ('Resolve') applied to a specific resource ('one pending DSH sandbox-escalation approval') and states the two possible outcomes ('allow_once or reject'). This is precise and clearly distinguishes the tool from the listed sibling tools, none of which are described as resolving the approval workflow.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a direct operational constraint: never auto-allow and keep the tool behind the caller's human approval prompt before using it to allow_once. This tells the agent when it is appropriate to invoke this tool. It doesn't explicitly compare against alternative tools, but no sibling appears to serve the same approval-resolving purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_statusB
Read-onlyIdempotent

Return separate availability/execution state, root and descendant sessions, queue depths, pending interactions, final message, bridge cursor/watermarks, and bridge-local workspace claim semantics.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes

TDQS

B3.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds value by revealing the shape of the returned state: separate availability/execution state, root versus descendant sessions, queue depths, pending interactions, and bridge-local workspace semantics. This clarifies what the status contains beyond what the generic read-only annotation implies.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Everything is packed into one dense, roughly 30-word sentence with no filler or repeated structured data. It is front-loaded with the action 'Return' and then lists distinct pieces of state. The slash-separated enumeration is compact, though slightly harder to parse than a structured list would be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only one-parameter tool, the description gives a good sense of what the output will cover and the input schema covers the expected ID format. However, the terms 'bridge cursor/watermarks' and 'bridge-local workspace claim semantics' are not explained, and there is no output schema to clarify the exact return representation. This leaves interpretation gaps for an agent despite the invocation being straightforward.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has one required parameter, taskId, with a pattern but no written semantics, and the description does not explicitly explain what taskId refers to. However, the tool name and the status content strongly imply taskId is the dsh task being inspected. The parameter is self-evident enough to be callable, but the description does not compensate for the missing parameter documentation in a meaningful way.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a clear verb 'Return' and names a specific resource: the status object containing availability/execution state, sessions, queue depths, pending interactions, final answer, and bridge-related cursors/watermarks. It distinguishes itself from siblings like dsh_host_status and dsh_find_sessions by listing compound status content, but it does not explicitly state that the tool returns this for the given taskId.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use dsh_status versus dsh_wait, dsh_tail, dsh_observe, or dsh_continue. The description implies this is a read-only snapshot, but it never states that it is non-blocking, that it should be used for a point-in-time check, or that other tools cover waiting/tailing/observing behavior.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_tailB
Read-onlyIdempotent

Read bounded event digests using bridge coordination cursors. Conversation content is fetched from DSH history when reachable and is never copied into bridge persistence.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
maxBytesNo
maxEventsNo
sinceCursorNo

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, and non-destructive behavior. The description adds useful beyond-annotation context: content is fetched from DSH history when reachable and is never copied into bridge persistence. This helps the agent understand external reachability and data-hygiene semantics, though failure behavior when history is unreachable is not disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences from the core behavior without fluff. The action, the resource, the mechanism, and the key data-handling constraint are all stated efficiently and front-loaded into the first sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description is responsible for shaping an adequate mental model. It does not explain the meaning of the four parameters, how a cursor should be obtained or advanced, or what a digest structurally contains. The description is useful but not complete enough for a correct invocation beyond trial and error.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, so the description must compensate for the undocumented parameters. It hints at the 'bounded' nature of maxBytes/maxEvents and at 'cursors' for sinceCursor, but it never maps these concepts to any named parameter or explains their roles. taskId remains completely unaddressed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('Read') and resource ('bounded event digests'), so an agent knows what the tool does. It also adds the mechanism ('bridge coordination cursors'), though it does not explicitly differentiate it from sibling tools like dsh_observe or dsh_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives. The phrase 'bounded event digests' implies a history/tail-style use case, but the description never states conditions, exclusions, or which sibling tool might be more appropriate. This is essentially absent guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dsh_waitA
Read-onlyIdempotent

Wait at most 30 seconds for a new task cursor, status/availability change, terminal state, or pending interaction. It never waits for whole-task completion.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskIdYes
timeoutSecNo
sinceCursorNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, and non-destructive behavior, so the description's task is lighter here. It adds useful behavior not present in the annotations: the operation is time-bounded to 30 seconds and will not keep waiting until a task completes. It also describes the event categories that trigger a return, which a caller otherwise could not infer from the schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very efficient: one sentence states the core behavior and timeframe, and the second sentence narrows expectations with an explicit negative. The wording is front-loaded so the agent sees the crucial limitations immediately. There is no filler or repetition of available structured metadata.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple, read-only, idempotent wait tool with three flat parameters and no output schema, the description covers the main gaps: bounding timeout, trigger conditions, and non-completion behavior. The only shortfall is that it does not say what the tool returns when a timeout or event occurs, but this is largely inferable from a wait tool with a cursor parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it only partially does. 'At most 30 seconds' maps clearly to timeoutSec, and 'new task cursor' hints at sinceCursor, but taskId is not explicitly described and the cursor mechanics remain vague. The parameter names and schemas are fairly self-explanatory, but the description does not fully replace the missing per-parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the specific operation: wait at most 30 seconds for a new cursor, status/availability change, terminal state, or pending interaction. It does not just repeat the tool name and it explicitly bounds what it is not doing by saying it never waits for whole-task completion. It avoids naming a sibling tool, but the event categories are precise enough to separate it from status, tail, and observe tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear when-to-use context: when the agent needs to wait for cursors, state changes, terminal states, or pending interactions. The phrase 'It never waits for whole-task completion' is an explicit exclusion that prevents misuse. It does not point to a specific alternative tool, but the intended use is reasonably delineated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 15 tool updatesv0.1.0-alpha.4
    • First observeddsh_answer_question
    • First observeddsh_attach_session
    • First observeddsh_cancel
    • First observeddsh_continue
    • First observeddsh_delegate
    • First observeddsh_find_sessions
    • First observeddsh_followup
    • First observeddsh_host_status
    • First observeddsh_list
    • First observeddsh_observe
    • First observeddsh_release_workspace
    • First observeddsh_resolve_approval
    • First observeddsh_status
    • First observeddsh_tail
    • First observeddsh_wait

TDQS

A3.7/5.0
Disambiguation3/5

Most tools are distinct and the descriptions carefully narrow their responsibilities, but dsh_continue is an explicit compatibility alias for dsh_followup and dsh_observe blurs into dsh_wait/dsh_tail territory. The duplicated entry points are documented clearly enough that an agent can choose correctly, though they still reduce clarity.

Naming Consistency4/5

Naming is generally predictable: almost every tool uses the dsh_ prefix and snake_case, with clear action nouns like find_sessions, attach_session, resolve_approval, and release_workspace. Minor deviations such as dsh_status, dsh_list, dsh_tail, and the alias-style dsh_continue/dsh_observe keep it from being perfectly systematic.

Tool Count4/5

Fifteen tools is a reasonable size for a session/bridge management server, and the set stays around the core lifecycle area. The count is slightly inflated by the compatibility aliases dsh_continue and dsh_observe, which could be removed or hidden without losing functional scope.

Completeness4/5

The toolset covers the major workflow: find/attach sessions, delegate work, follow up, observe status, cancel work, answer questions, and handle approvals. The most obvious gap is the lack of an explicit session close/detach or full task-level teardown operation, though much of the surrounding lifecycle is present.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Fly2Kiana/Codex-DSH-Orchestrator'

If you have feedback or need assistance with the MCP directory API, please join our Discord server