DSH Agent Handoff & Deliberation

Privacy-first coordination primitives for DeepSeek Harness integrations.

1. Cross-agent task handoff: recipient-bound queued → accepted → completed|blocked transitions with an audit event trail.
2. Multi-agent deliberation / disagreement: independent positions, direct rebuttals, and a decision gate that refuses false consensus.

Independent ecosystem project; it is not an official DeepSeek product. It follows DeepSeek Harness guidance to publish ecosystem projects with the dsh-plugin topic.

Scope

Included: stateful handoffs, independent positions, rebuttals, decision gates, recursive credential redaction, unit tests, and CI.

Explicitly excluded: mutual teaching, scheduling / cron / process spawning / autonomous dispatch, credential storage or transport, and provider-specific model calls.

Install

npm install @wbj0256/dsh-agent-handoff-deliberation

Usage

import { HandoffLedger, DeliberationRoom } from '@wbj0256/dsh-agent-handoff-deliberation'

const handoffs = new HandoffLedger()
handoffs.create({ id: 'design-7', from: 'planner', to: 'builder', task: 'Implement the validated API contract.' })
handoffs.accept('design-7', 'builder')
handoffs.complete('design-7', 'builder', { artifact: 'commit reference' })

const debate = new DeliberationRoom()
debate.open('release-1', 'Release now?', ['builder', 'reviewer', 'lead'])
debate.position('release-1', 'builder', 'Release after tests.', ['unit tests passed'])
debate.position('release-1', 'reviewer', 'Hold for the abuse-case test.', ['threat model'])
debate.rebut('release-1', 'builder', 'reviewer', 'The boundary test covers this case.')
debate.decide('release-1', 'lead', 'Release only with boundary evidence recorded.')

Harness adapter

apply(host) registers neutral tool definitions against a tiny host.tools.register() seam. This keeps the policy core testable and avoids coupling to unstable internal APIs. A deployment adapter can map these definitions to the installed DeepSeek Harness Cordis and defineTool version.

Tools: handoff_create, handoff_accept, handoff_complete, deliberation_open, deliberation_position, deliberation_rebut, and deliberation_decide.

Security

Redaction happens before a payload enters a handoff or deliberation record. It is defense-in-depth, not secret management: do not provide credentials to agents or logs. The package persists nothing by default.

Development

npm install
npm run check

MIT licensed.