17:["$","pre","pre-0",{"children":["$","code","code-0",{"className":"language-mermaid","children":"flowchart LR\n A[\"DSH providers / models\"] --> W[\"DSH Workflow\"]\n B[\"tool filters / approval\"] --> W\n C[\"Session / jobs / commands\"] --> W\n W --> D[\"reusable capsules\"]\n W --> E[\"durable run graph\"]\n W --> F[\"resume / governance / evidence\"]\n"}]}] 18:["$","p","p-7",{"children":"因此，DSH 不只会“调用 Agent”，还可以承载长期维护的 Agent 工作流库。"}] 19:["$","h2","h2-1",{"children":"快速开始"}] 1a:["$","p","p-8",{"children":["要求：Node.js ",["$","code","code-0",{"children":">=22.19"}],"，以及与 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/compatibility.json","rel":"noreferrer","target":"_blank","children":["$","code","code-0",{"children":"compatibility.json"}]}]," 一致的 DSH 快照。"]}] 1b:["$","pre","pre-1",{"children":["$","code","code-0",{"className":"language-sh","children":"# 构建产物已提交，git 源安装不需要在用户侧编译\ndsh plugin --profile web add \"github:dsh-external/dsh_workflow#main\"\n\n# 验证 bundle 已进入 profile 合成树\ndsh --profile web --dump-config\n"}]}] 1c:["$","p","p-9",{"children":"预期配置中出现："}] 1d:["$","pre","pre-2",{"children":["$","code","code-0",{"className":"language-yaml","children":"- id: dsh-external-workflow\n name: '@dsh-external/workflow'\n"}]}] 1e:["$","p","p-10",{"children":"重启对应 DSH profile 后，在会话中输入："}] 1f:["$","pre","pre-3",{"children":["$","code","code-0",{"className":"language-text","children":"/workflow list\n/workflow parallel-investigation {\"question\":\"为什么这个测试会间歇失败？\"}\n/workflow create 为这个仓库设计一个并行安全评审流程\n/workflow review --risk high --requirement \"不得破坏公开 API\" --test-evidence \"pnpm test 通过\" --wait\n/workflow runs\n"}]}] 20:["$","p","p-11",{"children":[["$","code","code-0",{"children":"/workflow create "}]," 和未知名称的 ",["$","code","code-1",{"children":"/workflow <自然语言请求>"}]," 会像 KodaX 一样立即结束命令处理，并把显式 workflow 意图交给当前主 Agent。用户原始 query 以真正的 user message 进入 Session，所以会在对话中显示、参与 DSH 会话标题生成并可在左侧工作区中按标题识别；内部 authoring contract 则作为独立的折叠 plugin context 交给模型，不会污染标题或用户气泡。主 Agent 先用自身工具调查真实 workspace，再以 ",["$","code","code-2",{"children":"source + manifest"}]," 调用 ",["$","code","code-3",{"children":"run_workflow"}]," 生成和启动流程；长时间 scout/authoring 不会把斜杠命令卡在 ",["$","code","code-4",{"children":"command/run"}],"。这条命令只为对应消息中的第一次",["$","strong","strong-0",{"children":"通过预启动冒烟校验"}],"的 inline workflow 提供一次性显式授权；如果脚本或子任务字段无效（例如 ",["$","code","code-5",{"children":"modelHint"}]," 不是 ",["$","code","code-6",{"children":"fast | balanced | deep"}],"），插件会在启动任何真实子 Agent 前返回精确错误，并保留本 turn 的一次性授权供主 Agent 修正后重试。内部 relay、后续直接用户消息或重复的有效调用都不能复用授权；工具产生的 scouting context 不会误撤销它。",["$","code","code-7",{"children":"approvalMode: always"}]," 和 trusted-local workflow 的审批仍然保留。由于 authoring 由当前 Agent turn 接管，create/free-text 形式不接受 ",["$","code","code-8",{"children":"--wait"}],"；需要同步等待时请对命名 workflow、rerun、review 使用 ",["$","code","code-9",{"children":"--wait"}],"，或在工具调用中使用 ",["$","code","code-10",{"children":"wait: true"}],"。"]}] 21:["$","blockquote","blockquote-0",{"children":["\n",["$","p","p-0",{"children":"DSH Web 的左侧工作区在“手动排序”且会话数超过 5 条时会折叠其余会话；新 workflow 会话已归属对应工作区，必要时点击“展开其余 N 个会话”，或将视图排序切换为“最近更新”让活动会话自动前置。"}],"\n"]}] 22:["$","p","p-12",{"children":["workflow 启动和 ",["$","code","code-0",{"children":"run_workflow"}]," 默认立即返回 ",["$","code","code-1",{"children":"{ runId, status, jobId? }"}],"，不会让一个长流程占住当前 turn；支持等待的子命令显式传入 ",["$","code","code-2",{"children":"--wait"}],"（工具参数为 ",["$","code","code-3",{"children":"wait: true"}],"）才等待终态。",["$","code","code-4",{"children":"/workflow show"}]," 默认显示最新 run，",["$","code","code-5",{"children":"/workflow stop"}]," 默认停止当前活动 run。"]}] 23:["$","p","p-13",{"children":"模型也可以调用三个工具："}] 24:["$","ul","ul-0",{"children":["\n",["$","li","li-0",{"children":[["$","code","code-0",{"children":"workflow_list"}],"：发现 built-in、pattern、项目和个人 workflow；无效条目会报告但不会执行。"]}],"\n",["$","li","li-1",{"children":[["$","code","code-0",{"children":"run_workflow"}],"：运行命名 workflow、从自然语言 scout-then-author，或执行受限 inline workflow。"]}],"\n",["$","li","li-2",{"children":[["$","code","code-0",{"children":"workflow_manage"}],"：查看、暂停、恢复、停止、重跑、续跑、保存、改名、修订、删除和清理。"]}],"\n"]}] 25:["$","h2","h2-2",{"children":"能力"}] 26:["$","h3","h3-0",{"children":"与 KodaX workflow 对标的执行模型"}] 27:["$","ul","ul-1",{"children":["\n",["$","li","li-0",{"children":["版本化 ",["$","code","code-0",{"children":"dsh.workflow"}]," v1 capsule：manifest、source、intent、inputs、requires、provenance。"]}],"\n",["$","li","li-1",{"children":["统一 ",["$","code","code-0",{"children":"async function run(wf, args)"}]," 模型。"]}],"\n",["$","li","li-2",{"children":["完整 WorkflowApi：",["$","code","code-0",{"children":"phase"}],"、",["$","code","code-1",{"children":"spawnAgent"}],"、",["$","code","code-2",{"children":"runAgent"}],"、",["$","code","code-3",{"children":"wait"}],"、",["$","code","code-4",{"children":"snapshot/output"}],"、",["$","code","code-5",{"children":"send/stop"}],"、",["$","code","code-6",{"children":"parallel"}],"、",["$","code","code-7",{"children":"pipeline"}],"、",["$","code","code-8",{"children":"synthesize"}],"、单层嵌套 workflow、artifact、log、budget。"]}],"\n",["$","li","li-3",{"children":[["$","code","code-0",{"children":"runAgent"}]," 对普通子任务失败返回 ",["$","code","code-1",{"children":"null"}],"，让 workflow 能按策略降级；显式 handle 的 ",["$","code","code-2",{"children":"wait"}]," 仍保留完整失败结果。要求 object JSON Schema 的任务在原生 structured capture 缺失时只做一次同路由、无工具修复，仍不合规则明确失败。"]}],"\n",["$","li","li-4",{"children":"Agent 元数据：phase、scope、constraints、read-only、provider/subagent type、fast/balanced/deep 路由、显式 model、isolation、token、evidence、verification、output schema、terse result。"}],"\n",["$","li","li-5",{"children":["两个 built-in：可按 rubric/agent/concurrency 参数化的 ",["$","code","code-0",{"children":"parallel-investigation"}],"，以及完整 packet/schema/read-contract/双 primary/逐 finding verifier/audit artifact 的 ",["$","code","code-1",{"children":"scoped-review"}],"。公共 ",["$","code","code-2",{"children":"writeReviewPackets()"}]," 从调用方已经捕获的 diff、约束和测试证据生成工作区内 content-addressed、不可覆写的分区文件；",["$","code","code-3",{"children":"/workflow review"}]," 可直接捕获当前 Git 范围并启动该流程，不依赖 DSH 核心额外提供 ",["$","code","code-4",{"children":"/review"}]," patch。"]}],"\n",["$","li","li-6",{"children":"稳定的 ProcessSnapshot、WorkflowOutcome 与 AgentResult 投影：包含 item/count/progress、失败与未验证结果、structured output、验证证据、路由、usage、artifact 和缓存重放来源。"}],"\n",["$","li","li-7",{"children":"六个标准 pattern：classify-and-act、fan-out-and-synthesize、adversarial-verification、generate-and-filter、tournament、loop-until-done。"}],"\n"]}] 28:["$","p","p-14",{"children":["完整逐项验收见 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/docs/KODAX_PARITY.md","rel":"noreferrer","target":"_blank","children":"KodaX 对标矩阵"}],"。本项目只参考行为与能力，不复制 KodaX 的受限许可源码。"]}] 29:["$","h3","h3-1",{"children":"发现与复用"}] 2a:["$","p","p-15",{"children":"搜索顺序是 deterministic 的："}] 2b:["$","ol","ol-0",{"children":["\n",["$","li","li-0",{"children":"插件内置 workflow 与 pattern（不可被磁盘文件遮蔽）；"}],"\n",["$","li","li-1",{"children":["项目目录 ",["$","code","code-0",{"children":".dsh/workflows"}],"；"]}],"\n",["$","li","li-2",{"children":["个人目录 ",["$","code","code-0",{"children":"$$DSH_HOME/workflows"}],"。"]}],"\n"]}] 2c:["$","p","p-16",{"children":["项目同名条目覆盖个人条目；同一目录中 ",["$","code","code-0",{"children":".workflow.json"}]," 优先于 ",["$","code","code-1",{"children":".ts/.mjs/.js"}],"。符号链接、路径逃逸、超大文件、未知 capsule 字段、版本不兼容和 manifest/文件名不一致都会在执行前失败。"]}] 2d:["$","p","p-17",{"children":["受限 capsule 示例见 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/examples/review.workflow.json","rel":"noreferrer","target":"_blank","children":"examples/review.workflow.json"}],"。可信本地模块适用于人工维护的高权限流程，但每次执行都需要显式确认。"]}] 2e:["$","h3","h3-2",{"children":"生命周期、持久化与续跑"}] 2f:["$","p","p-18",{"children":["每个 run 都有 ",["$","code","code-0",{"children":"running → paused/completed/failed/denied/stopped"}]," 状态和稳定 id。默认在项目中写入："]}] 30:["$","pre","pre-4",{"children":["$","code","code-0",{"className":"language-text","children":".dsh/workflow-runs//\n├── run.json # 状态、结果摘要、成本\n├── events.jsonl # append-only 事件图\n├── workflow.workflow.json # 不可变执行快照（生成型 workflow）\n├── results/ # 只保存已完成且验证通过的确定性 effect cache\n└── artifacts/ # workflow 命名证据\n"}]}] 31:["$","ul","ul-2",{"children":["\n",["$","li","li-0",{"children":"按 run id 重跑：使用该 run 的不可变 capsule snapshot。"}],"\n",["$","li","li-1",{"children":"按 saved name 重跑：使用当前保存版本。"}],"\n",["$","li","li-2",{"children":[["$","code","code-0",{"children":"resume-run"}],"：相同调用序号 + 相同 task input 命中缓存，其余任务继续执行。"]}],"\n",["$","li","li-3",{"children":["终态 run 自动按 ",["$","code","code-0",{"children":"maxRetainedRuns"}]," 清理；也可 preview/执行 ",["$","code","code-1",{"children":"prune"}],"。"]}],"\n",["$","li","li-4",{"children":["同时记录原生 ",["$","code","code-0",{"children":"tool-workflow/*"}]," Session 事件，复用 DSH 已有 UI/可观察性。动态 workflow 的 run-start 使用 Session 生命周期：启动它的 tool step 或 Agent turn 结束时，后台流程仍保持 ",["$","code","code-1",{"children":"running"}],"，直到真实 ",["$","code","code-2",{"children":"run-end"}]," 决定完成、失败或取消，不再被 UI 误标为“已中断”。"]}],"\n"]}] 32:["$","h2","h2-3",{"children":"常用命令"}] 33:["$","pre","pre-5",{"children":["$","code","code-0",{"className":"language-text","children":"/workflow help\n/workflow list\n/workflow create \n/workflow review [base | sha ] [--lean] [--risk low|medium|high] [--requirement \"...\"] [--test-evidence \"...\"] [--wait] [-- ]\n/workflow [JSON args]\n/workflow runs [--all|--limit N]\n/workflow show [--full] [runId]\n/workflow pause|resume|stop [runId]\n/workflow rerun|resume-run [JSON args] [--wait]\n/workflow save [project|personal]\n/workflow rename-run \n/workflow rename-saved [project|personal]\n/workflow revise \n/workflow delete-run [--force]\n/workflow delete-saved [project|personal]\n/workflow prune [--dry-run] [--keep N] [--older-than 7d|24h]\n"}]}] 34:["$","p","p-19",{"children":["斜杠命令通过 ",["$","code","code-0",{"children":"ctx.userQuestions"}]," 做一次性人类确认；模型工具使用 DSH 当前 turn 的 ",["$","code","code-1",{"children":"ctx.approval"}],"。后台运行会尽可能注册到 ",["$","code","code-2",{"children":"ctx.jobs"}],"，并始终保留插件自己的 durable run id。三条路径共享同一个引擎、run store 和安全策略。"]}] 35:["$","h2","h2-4",{"children":"配置"}] 36:["$","p","p-20",{"children":["常见配置如下；完整字段和治理建议见 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/docs/CONFIGURATION.md","rel":"noreferrer","target":"_blank","children":"配置参考"}],"。"]}] 37:["$","pre","pre-6",{"children":["$","code","code-0",{"className":"language-yaml","children":"- id: dsh-external-workflow\n name: '@dsh-external/workflow'\n config:\n approvalMode: generated-and-local # never | generated-and-local | always\n maxAgents: 64\n maxConcurrency: 8\n maxRetainedRuns: 500\n fastProvider: spawn # ctx.subagents transport\n fastModelProvider: deepseek-official\n fastMaxTokens: 4096\n balancedProvider: spawn # ctx.subagents transport\n balancedModelProvider: deepseek-official\n balancedMaxTokens: 8192\n deepProvider: spawn # ctx.subagents transport\n deepModelProvider: deepseek-official\n deepMaxTokens: 16384\n readOnlyAllowedTools: # 与当前父 Agent 可见工具动态求交集\n - read\n - read_image\n - glob\n - grep\n - lsp\n - skill\n - web_search\n"}]}] 38:["$","p","p-21",{"children":[["$","code","code-0",{"children":"availableTools"}],"、",["$","code","code-1",{"children":"availableMcp"}],"、",["$","code","code-2",{"children":"availableSkills"}]," 是部署能力清单，供 capsule preflight 使用。workflow 声明的 requirement 不在清单中时会失败，不会偷偷降级。"]}] 39:["$","h2","h2-5",{"children":"安全与能力边界"}] 3a:["$","ul","ul-3",{"children":["\n",["$","li","li-0",{"children":"生成型脚本只能通过冻结的 WorkflowApi 发起 effect；脚本结果、参数和 RPC 值必须可 JSON 序列化。"}],"\n",["$","li","li-1",{"children":"生成脚本运行在 QuickJS WebAssembly 独立堆中；宿主只暴露 JSON capability RPC。静态 policy 还会拒绝 import/require、process、文件、shell、网络、timer 与非确定性 API。"}],"\n",["$","li","li-2",{"children":"同步执行、总墙钟、WASM 内存与栈都有上限；主函数返回或墙钟超时时会关闭 RPC、abort run，并等待所有已接收的宿主 RPC 与已发布 child 静默退出。可信本地模块仍具有宿主权限。"}],"\n",["$","li","li-3",{"children":[["$","code","code-0",{"children":"readOnly: true"}]," 使用“当前父 Agent 可见工具 ∩ 可信只读 allow-list”，未来新增写工具默认不可见；provider 不支持 ",["$","code","code-1",{"children":"toolFilter"}]," 时直接失败。"]}],"\n",["$","li","li-4",{"children":"token budget 在子 Agent 发布前预留，本地 Agent 有 usage 时按 Session 实际值核算。"}],"\n",["$","li","li-5",{"children":["read-path、成功 mutation tool + Git workspace 指纹变化、每个 required changed path 的前后内容指纹、final-text 与 bounded same-actor repair 已内建；部署可以用带稳定 ",["$","code","code-0",{"children":"cacheIdentity"}]," 的 ",["$","code","code-1",{"children":"registerVerificationAdapter()"}]," 叠加非 Git 或更强的 workspace 证据。worktree 通过 ",["$","code","code-2",{"children":"registerIsolationAdapter()"}]," 接入，未注册时明确失败。"]}],"\n",["$","li","li-6",{"children":"catalog 保存/替换/改名/删除使用规范化根目录、逐段 junction/symlink 拒绝与原子独占发布；并发同名保存不会互相覆盖。"}],"\n",["$","li","li-7",{"children":["DSH one-shot seam 没有原生 existing-agent target / effort 控制；部署可在首次运行前注册 ",["$","code","code-0",{"children":"registerDispatchAdapter()"}]," 完整承接这两个字段，否则 fail loud。"]}],"\n"]}] 3b:["$","p","p-22",{"children":["更多细节见 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/docs/SECURITY.md","rel":"noreferrer","target":"_blank","children":"安全模型"}],"和",["$","a","a-1",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/docs/ARCHITECTURE.md","rel":"noreferrer","target":"_blank","children":"架构说明"}],"。"]}] 3c:["$","h2","h2-6",{"children":"开发与验证"}] 3d:["$","p","p-23",{"children":["仓库旁需有兼容 DSH checkout，默认路径为 ",["$","code","code-0",{"children":"../test-icetomoyo"}],"，也可设置 ",["$","code","code-1",{"children":"DSH_SNAPSHOT_DIR"}],"。"]}] 3e:["$","pre","pre-7",{"children":["$","code","code-0",{"className":"language-sh","children":"pnpm install\npnpm check # 快照 pin + 真实 DSH 投影 + 179 tests + typecheck + build\npnpm test:coverage # 语句/分支/函数/行全局阈值均为 80%\npnpm pack\n"}]}] 3f:["$","p","p-24",{"children":["兼容基线、commit 和验证时间记录在 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/compatibility.json","rel":"noreferrer","target":"_blank","children":["$","code","code-0",{"children":"compatibility.json"}]}],"。发布前必须重新 fetch DSH 默认分支并更新此文件。"]}] 40:["$","h2","h2-7",{"children":"已知限制"}] 41:["$","ul","ul-4",{"children":["\n",["$","li","li-0",{"children":["trusted-local ",["$","code","code-0",{"children":".ts"}]," 使用 Node 22 原生 erasable-syntax TypeScript，并遵循 Node module cache（修改后重启 DSH）；需要 enum 等 transform-only 语法或热重载时请发布为 ",["$","code","code-1",{"children":".mjs/.js"}],"。"]}],"\n",["$","li","li-1",{"children":"当前 DSH 通用 subagent seam 不直接支持 existing-agent target、per-agent effort 和 worktree；相应请求需要部署注册 dispatch/isolation adapter，未注册时 fail loud。"}],"\n",["$","li","li-2",{"children":"内建 verification 能证明实际 read/mutation tool evidence、Git workspace 变化、每个 required path 的任务前后指纹与文本后置条件；非 Git 工作区或需要外部权威证据的策略由 verification adapter 补充。"}],"\n",["$","li","li-3",{"children":"仅生成型 capsule run 能保存不可变 script snapshot；纯函数 trusted-package/local run 不能从 run id 再保存。"}],"\n",["$","li","li-4",{"children":"capsule v1 与 KodaX capsule 不做 wire compatibility；外部 capsule 不会被误执行。"}],"\n",["$","li","li-5",{"children":"capability-generated 源码与宿主对象隔离；但 trusted-local workflow 会以 Node 宿主权限执行，不要把不可信第三方源码标为 trusted-local。"}],"\n"]}] 42:["$","h2","h2-8",{"children":"致谢"}] 43:["$","ul","ul-5",{"children":["\n",["$","li","li-0",{"children":[["$","a","a-0",{"href":"https://github.com/dsh2026/test-icetomoyo","rel":"noreferrer","target":"_blank","children":"DeepSeek Harness"}]," 提供 Harness、插件和子 Agent 能力面。"]}],"\n",["$","li","li-1",{"children":[["$","a","a-0",{"href":"https://github.com/icetomoyo/KodaX","rel":"noreferrer","target":"_blank","children":"KodaX"}]," 提供 workflow 产品设计的行为参考；本插件为独立实现。"]}],"\n",["$","li","li-2",{"children":[["$","code","code-0",{"children":"dsh-external"}]," 社区插件为 bundle 安装、验证、安全边界和文档结构提供了实践参考。"]}],"\n"]}] 44:["$","h2","h2-9",{"children":"License"}] 45:["$","p","p-25",{"children":["MIT，见 ",["$","a","a-0",{"href":"https://github.com/omdsh-dev/dsh_workflow/blob/HEAD/LICENSE","rel":"noreferrer","target":"_blank","children":"LICENSE"}],"。"]}]

omdsh-dev/@dsh-external/workflow

NanmiCoder/dsh-agent-teams

btspoony/mstar-harness

btspoony/mstar-harness

titanwings/dsh-automation