dsh-speak
一种能让你的harness开口说话的方案/Make your AI harness speak — a verified voice-announcement solution
- Stars
- 11
- Language
- JavaScript
- Created
- Aug 14, 2026
- Updated
- Sep 10, 2026
Introduction
dsh-speak 🔊 — Voice announcements for AI coding harnesses
English · 中文

Let your agent tell you when a long task is done — no more staring at the screen.
dsh-speak reads the final assistant reply aloud through system speech synthesis —
on Windows using natural voices (Windows 11 built-in, or
NaturalVoiceSAPIAdapter on Windows 10) with graceful fallback to stock voices;
on macOS using the built-in say (can follow a Siri natural voice). It was built
for DeepSeek Harness
and is structured so any harness can plug in.
Features
- Automatic: DSH web plugin watches the session event stream and announces the final reply (skips reasoning/tool-call narration, merges multi-step messages).
- Gets your attention: announces approval requests (hears "需要你的审批" when
the agent is waiting on you) and questions the agent asks via
ask_user_question. - Final-reply replay (1.7.0): every final reply (turn tail) has a 🔊 button in its action bar — click to replay that message, click again to stop, click another to switch. Speech execution stays fully owned by the DSH host (keeps speaking even with the browser closed).
- Host speech queue (1.7.0): only one native speech process runs at a time; queued items continue automatically. A WebSocket syncs the live state (which message is speaking, queue length) to the UI.
- Optional event announcements (1.6.0): turn end, command done, goal changes, tool errors, and todo updates can each be announced, toggled independently (off by default).
- Visual configuration (1.7.0): a dedicated Settings → dsh-speak settings page — every option (master switch, automatic speech, Markdown cleaning, code blocks, event toggles, fixed prompt, …) is editable from the Web UI, no hand-edited YAML.
- Master switch (1.6.0): silence everything with one toggle.
- Bundle auto-registration (1.3.0): declare the package in
dsh.profile.bundlesand the plugin registers itself via the bundledcordis.patch.yml— no manual patch entry needed. - Best-effort: never throws, never blocks the harness, never breaks a session.
- Natural voices: Windows prefers natural voices — Windows 11 built-in packs, or voices registered via NaturalVoiceSAPIAdapter on Windows 10 (e.g. Xiaoxiao); macOS uses the system reading voice (Siri natural voices on recent macOS). Both fall back to any installed voice.
- Robust text cleaning: strips markdown/URLs/emoji that make speech synthesis fail silently, and guards the adapter's per-utterance character ceiling.
- Portable engine: any process can speak with one line:
Windows
powershell -File speak.ps1 -Text "你好"/ macOS./speak.sh -t "你好".
How it works
harness event (DSH session event / Claude Code Stop hook / anything)
│
▼ adapters/… (harness-specific trigger: filter, throttle, cancel)
▼ engine/speak.ps1 / speak.sh (harness-agnostic: clean text → SAPI5 / say)
▼ 🔊 you hear the final reply
The adapter turns harness-specific events into engine calls; the engine cleans the text and speaks it, fully decoupled from any harness. Full design: docs/DESIGN.md.
Prerequisites
Windows:
- Windows 10 or 11, PowerShell (any recent version).
- Natural voices:
- Windows 11 (21H2–23H2): natural voice packs are built into the system — no extra installation. Enable/switch them in Settings → Accessibility → Narrator or Settings → Time & Language → Speech.
- Windows 11 24H2/25H2: natural voices moved to MSIX app packages, which
System.Speechmay not enumerate (falls back to a robotic stock voice). As on Windows 10, install NaturalVoiceSAPIAdapter to bridge them. - Windows 10: install NaturalVoiceSAPIAdapter and use its VoiceDownloader to download the natural voice pack(s) you want (Chinese or any other language).
- Without natural voices, the engine falls back to a stock voice (e.g. Huihui).
macOS:
- macOS (Apple Silicon or Intel), built-in
saycommand — no extra software. - Chinese voices: see the macOS section (incl. the Siri natural-voice picker and its pitfalls).
DSH web app:
- Tested against DSH 0.1.5-rc.1. Two host/client APIs changed after 0.1.1, both
handled here (1.8.0):
@deepseek-ai/dsh-settingsdeleted theinstallSettingsSection/settingsNamespacehelpers — the plugin now registers its namespace through thesettingsservice. On those older releases the plugin aborted the host boot (settingsNamespace is not a function); a missing settings provider now just leaves the composed patchconfigin force.- the Session snapshot stopped carrying Conversation target data — the 🔊 button
resolves the clicked message through the Chat target hook
useChat.
- The host floor lives where dsh-market reads it:
engines.dshinpackage.json(>=0.1.5-rc.1). The catalog card and its "compatible with current DSH" filter read exactly that field, so the floor moves only after a release has been verified against the new host.
Install & quick start
DSH — Option A: npm plugin (recommended)
# 1. install the plugin into your web profile (adds dsh-speak to
# ~/.dsh/profiles/web/package.json dependencies)
dsh plugin --profile web add dsh-speak
# 2. register it in ~/.dsh/profiles/web/cordis.patch.yml
# (for npm packages the bare package name is used — no file:/// URL needed):
# - insert:
# - id: speech-hook
# name: 'dsh-speak'
# 3. restart the DSH web app — replies are now announced automatically
No pnpm?
dsh pluginforwards to pnpm, which is not installed on every machine. The exact same install can be done with npm directly:npm install --prefix "$env:USERPROFILE\.dsh\profiles\web" dsh-speakOn macOS (bash):
npm install --prefix "$HOME/.dsh/profiles/web" dsh-speak
The engine ships inside the package (node_modules/dsh-speak/engine/), so no extra
copying is needed.
Let your agent do it? Paste this repo URL (
https://github.com/Alan2Z/dsh-speak) into your DSH session and ask it to install the plugin — your agent follows this very README. Approving the out-of-workspace writes (~/.dsh) is all that's needed.
DSH — Option B: file install (no npm needed)
# 1. clone
git clone https://github.com/Alan2Z/dsh-speak.git
cd dsh-speak
# 2. one-command install: copies engine + plugin, registers in cordis.patch.yml
powershell.exe -NoProfile -ExecutionPolicy Bypass -File adapters\dsh\install.ps1
# 3. verify the engine speaks
powershell -NoProfile -ExecutionPolicy Bypass -File "$env:USERPROFILE\.dsh\hooks\speak.ps1" -Text "你好,语音播报已就绪。"
# 4. restart the DSH web app — replies are now announced automatically
What the file installer did:
| file | destination |
|---|---|
engine/*.ps1 | %USERPROFILE%\.dsh\hooks\ |
adapters/dsh/speech-hook.js | %USERPROFILE%\.dsh\profiles\web\plugins\ |
| registration entry | appended to %USERPROFILE%\.dsh\profiles\web\cordis.patch.yml (backed up first) |
macOS
The same adapter runs natively on macOS — the plugin auto-detects the platform and
calls engine/speak.sh (the built-in say command) instead of speak.ps1.
Since 1.2.0 the macOS engine ships in the npm package — no extra software.
# 1. install into your web profile (no pnpm needed — only `dsh plugin` requires it)
npm install --prefix "$HOME/.dsh/profiles/web" dsh-speak
# 2. register in ~/.dsh/profiles/web/cordis.patch.yml (bare package name — no file:/// URL):
# - insert:
# - id: speech-hook
# name: 'dsh-speak'
# 3. no restart needed — the patch watcher hot-reloads; replies are announced
# after the throttle (~1.5 s); tool-calling replies are announced at turn end
With pnpm installed,
dsh plugin --profile web add dsh-speakworks identically.
Voices (important — two pitfalls)
- By default the engine follows the system reading voice (Settings → Accessibility → Spoken Content → System Voice). On macOS 26 that picker has an ⓘ circle icon next to it — click it for the full voice list; the plain dropdown does not contain the Siri natural voices. Pick e.g. "普通话 Siri 声音1(男声)" there.
- Siri voice (Settings → Siri → Voice) and the system reading voice are
two independent settings; Siri voices are not exposed to
say -v '?'and cannot be selected by name — they only work as the system default. - ⚠️ Pitfall 1 (reproduced): opening the "Spoken Content / Siri Voice" settings pane — even without changing anything — drifts/resets the system voice to the classic "婷婷 (Tingting)". If the voice suddenly changes, re-pick it via the ⓘ entry.
- ⚠️ Pitfall 2: the log lives at
$TMPDIR/dsh-speech-hook.log(os.tmpdir()— not/tmp). - Use
-v Eddy|Flo|Tingtingto force a specific voice (say -v '?'lists them). sayhas no volume flag — volume follows the system output volume.
Test the engine alone (no DSH needed)
curl -sfL -o ~/speak.sh "https://cdn.jsdelivr.net/gh/Alan2Z/dsh-speak@main/engine/speak.sh"
chmod +x ~/speak.sh
~/speak.sh -t "你好,Mac 版语音播报测试"
~/speak.sh -t "测试" -v Eddy -r 200 # explicit voice + rate
Claude Code
Register the Stop hook in ~/.claude/settings.json:
{
"hooks": {
"Stop": [
{
"hooks": [
{
"type": "command",
"command": "powershell.exe -NoProfile -ExecutionPolicy Bypass -File C:\\path\\to\\dsh-speak\\adapters\\claude-code\\stop-hook.ps1"
}
]
}
]
}
}
Any other harness
Call the engine directly from your agent / wrapper / script:
# announce a one-liner
powershell -NoProfile -ExecutionPolicy Bypass -File engine\speak.ps1 -Text "构建完成"
# announce a long summary (blocking, returns when done)
powershell -NoProfile -ExecutionPolicy Bypass -File engine\speech-summary.ps1 -Text "…"
# ask for user attention (blocking, for prompts/approvals)
powershell -NoProfile -ExecutionPolicy Bypass -File engine\speech-prompt.ps1 -Text "请做出选择"
Configuration
Engine parameters
See docs/DESIGN.md §5 configuration reference:
speak.ps1 -Text "…" -Volume 50 -Rate 1 -MaxChars 300 -LongTextMessage "本次播报内容较长,请自行阅读。"
DSH plugin config
Either way works, and they stay in sync (both write the same settings document):
- Web UI (1.7.0, recommended): a dedicated Settings → dsh-speak settings
page. Every option is editable and saved there (visible in
dsh --dump-config, per-profile, survives npm updates). - Profile patch
configblock (equivalent):
# ~/.dsh/profiles/web/cordis.patch.yml
- insert:
- id: speech-hook
name: 'dsh-speak'
config:
enabled: true # master switch: false silences everything
automaticSpeech: true # auto-speak final replies
queueAllMessages: false # true = enqueue every assistant message as it arrives
replayFullRead: false # true = manual replay skips the long-text truncation, reads everything
cleanMarkdownFormatting: true # convert Markdown to natural speech
readInlineCode: true # read inline code without backticks
codeBlocks: smart # all | smart | replace (fenced code blocks)
codeBlockMaxChars: 300 # smart-mode code block character limit
codeBlockReplacementText: 'You can see the code in our history.' # replace-mode text
throttleMs: 1500 # merge delay before announcing (ms)
engine: '' # engine path override; '' = auto-resolve
announceApprovals: true # speak approval requests
announceQuestions: true # speak ask_user_question content
stripApprovalPrefix: true # strip "escalate sandbox to ...: " prefix
questionGapMs: 2000 # pause between multiple question announcements (ms)
longTextMode: message # message | heading (speak largest md heading)
longTextMessage: '本次播报内容较长,请自行阅读。' # fixed prompt for message mode
maxChars: 300 # per-utterance ceiling (macOS default 0 = unlimited)
volume: 50 # Windows only
rate: 0 # 0 = engine default (Windows SAPI scale / macOS wpm)
# —— optional event announcements (1.6.0, all off by default) ——
announceTurnEnd: false # turn/end — "第 N 轮对话完成"
announceCommandDone: false # command/done — command finished/failed
announceGoalChange: false # goal/change — goal created/updated/completed
announceToolErrors: false # tool/result error — announce (english dropped)
announceTodoWrite: false # todo/write — todo list updated
Resolution order: schema default → patch
config→ UI user settings. Fields written in YAML show up in the UI too. Platform note:maxCharsdefaults to 0 on macOS (sayhas no ceiling) and 300 on Windows (SAPI safe limit).
Option reference
| option | default | effect |
|---|---|---|
enabled | true | master switch: when off, nothing is ever announced (final reply / approvals / questions / optional events / replay) |
automaticSpeech | true | auto-speak final replies; manual replay always remains available |
queueAllMessages | false | true enqueues every assistant message as it arrives (intermediate messages spoken too, FIFO); default only speaks the throttled final reply |
replayFullRead | false | true makes manual replay skip the long-text heading truncation (longTextMode: heading) and read everything in chunks |
cleanMarkdownFormatting | true | converts Markdown into natural speech text (link labels kept, URLs/heading/emphasis cleaned) |
readInlineCode | true | read inline code without backtick markers |
codeBlocks | smart | fenced code blocks: all read / smart (read when ≤ codeBlockMaxChars) / replace with the replacement text |
codeBlockMaxChars | 300 | code block character limit for smart mode |
codeBlockReplacementText | You can see the code in our history. | replacement spoken in replace mode (or over-limit smart) |
throttleMs | 1500 | how long a reply's text waits before being announced (merges multi-step messages) |
engine | '' | explicit engine script path; '' auto-resolves: <package>/engine/<platform> → ~/.dsh/hooks/<platform> |
announceApprovals | true | announce approval/asked events (reason, or the fixed prompt) |
announceQuestions | true | announce ask_user_question: each question spoken separately with a "问题N" prefix (when several) and "选项N" prefixes matching the UI numbering; a questionGapMs pause between questions |
questionGapMs | 2000 | pause between multiple question announcements (ms); 0 = no pause |
stripApprovalPrefix | true | strip the fixed English template prefix (escalate sandbox to danger-full-access: ) from approval reasons, keeping the human explanation |
longTextMode | message | message = fixed prompt for over-long text; heading = speak the largest markdown heading instead (see below) |
longTextMessage | 本次播报内容较长,请自行阅读。 | the fixed prompt spoken for over-long text in message mode (editable in the UI) |
maxChars | platform | per-utterance ceiling. macOS default 0 (say has no ceiling); Windows default 300 (SAPI fails silently beyond ~375-470) |
volume | 50 | Windows only (0-100); macOS volume follows the system |
rate | 0 | speech rate: Windows SAPI scale (-10 to 10, 0 = normal; try 1-3 for faster); macOS words-per-minute (default 175, 200 is a bit faster) |
announceTurnEnd | false | announce "第 N 轮对话完成/中断/异常结束" on turn end (turn/end) |
announceCommandDone | false | announce when a command finishes or fails (command/done) |
announceGoalChange | false | announce goal created/updated/completed/paused/resumed (goal/change, objective head) |
announceToolErrors | false | announce "工具调用出错" when a tool call returns an error: tool/result carrying error (structured failure identity) or a result block with isError === true. A non-zero shell exit does NOT count — pwsh/bash report exit code: N as result data by design, so only infrastructure failures (spawn errors, aborts) and structured tool failures (e.g. fs) set isError (English details / technical codes dropped, Chinese details kept) |
announceTodoWrite | false | announce "待办已更新:n/m 完成" when the agent updates its todos (todo/write) |
Long-text modes
When cleaned text exceeds maxChars:
message(default): speaklongTextMessage(本次播报内容较长,请自行阅读。, editable in the UI or YAML).heading: pick the largest markdown heading in the raw text — fewest#wins, tie → first. When there is no heading at all, speak a coherent opening instead of just the first line: the leadingmaxCharswindow, trimmed back to its last sentence end, and kept whole when that would drop more than half the window. Sentence ends are recognised bilingually: full-width。!?;and…always count, while half-width.!?;only count when followed by whitespace, a closing quote/bracket, or (for the very last character) one read past the window — so an Englishperiod + spaceat the edge still lands, but a decimal point such asVersion 0.1.does not. (Before 1.8.0 this fallback spoke the first non-empty line only, which sounded like the narration stopped after line 1.) The chosen candidate is still cleaned and subject to themaxCharsceiling, falling back to the message if it is itself too long.
Full architecture and design rationale: docs/DESIGN.md.
Customizing (survives npm updates)
You can tune behavior without forking, and your changes survive npm update:
-
Copy the engine out and edit it (recommended — this is where defaults live: volume, rate,
MaxChars,LongTextMessage, voice logic):# Windows Copy-Item "$env:USERPROFILE\.dsh\profiles\web\node_modules\dsh-speak\engine\speak.ps1" "$env:USERPROFILE\.dsh\hooks\my-speak.ps1" # macOS cp ~/.dsh/profiles/web/node_modules/dsh-speak/engine/speak.sh ~/.dsh/hooks/my-speak.shThen point the plugin at your copy in the
configblock:Windows: keep the file's UTF-8 BOM.
speak.ps1is a UTF-8 script and Windows PowerShell 5.1 only knows that from the 3-byte BOM (EF BB BF) at the start; an editor that saves it without one makes the system ANSI code page decode it instead, and Chinese text inside the script turns to mojibake — the symptom is silence or wrong trimming, with no error. The shipped script keeps all of its logic ASCII-only for that reason, so a lost BOM only garbles the Chinese comments and the default prompt. After editing, check withGet-Content -Encoding Byte -TotalCount 3 your-speak.ps1(expect239 187 191), or runnode scripts/test-engine-static.js.- insert: - id: speech-hook name: 'dsh-speak' config: engine: 'C:/Users/<you>/.dsh/hooks/my-speak.ps1' # or ~/.dsh/hooks/my-speak.sh on macOSThe plugin resolves the engine as
config.engine→ package engine →~/.dsh/hooks/, so your copy wins.npm updateonly touches the package — your engine stays. -
Edit the file inside
node_modules— works, but the nextnpm updateoverwrites it. -
Fork the repo — full control, publish your own package if you want.
Troubleshooting
| symptom | cause | fix |
|---|---|---|
| No sound at all, no error | no natural voice enabled/installed | Win11: enable a natural voice in Settings → Narrator / Speech; Win10: install NaturalVoiceSAPIAdapter + a voice pack. Test speak.ps1 directly |
| Long replies never spoken | adapter per-Speak character ceiling | already guarded at 300 chars — lower -MaxChars if needed |
| Narration stops after the first line | with longTextMode: heading, text over maxChars and no markdown heading made the engine speak only the first non-empty line (pre-1.8.0) | fixed in 1.8.0 (speaks a coherent opening instead); to change the policy use message mode or raise maxChars |
工具调用出错:Error: cannot read … spoken | the "is this Chinese?" detail filter only checked for the presence of a CJK character, so a Chinese directory name inside an English error passed it (1.8.0 regression) | fixed in 1.8.0 — the detail now needs more Chinese characters than Latin letters |
| Emoji-heavy text silent | SAPI fails silently on emoji | already stripped by the engine |
| Plugin not loading | raw Windows path as plugin name | use the file:///C:/… URL form (installer does this) |
| macOS: voice suddenly became "婷婷" | opening the "Spoken Content / Siri Voice" pane drifted the system voice | re-pick via Settings → Accessibility → Spoken Content → System Voice → ⓘ entry |
macOS: no log at /tmp | os.tmpdir() is /var/folders/.../T, not /tmp | log is at $TMPDIR/dsh-speech-hook.log |
Plugin diagnostics: Windows %TEMP%\dsh-speech-hook.log; macOS $TMPDIR/dsh-speech-hook.log
Repository layout
engine/ harness-agnostic speech engine (PowerShell + SAPI5 / bash + say)
speak.ps1 / speak.sh clean + speak (the only seam any adapter needs)
speech-prompt.ps1 blocking short announcement
speech-summary.ps1 blocking reply-summary announcement
adapters/
dsh/ DSH web plugin + one-command installer
speech-hook.js session-event trigger (throttle/cancel + optional events + FIFO speech queue + WebSocket + settings registration)
install.ps1 copies + registers + backs up
claude-code/
stop-hook.ps1 Claude Code Stop hook trigger
client/
client.js DSH browser bundle: turn-tail Speak/Stop button + Settings → dsh-speak settings page
docs/
DESIGN.md full design rationale, pitfalls, extension guide
scripts/ tests + manual dev helpers (not shipped in the npm package)
test-engine-static.js engine invariants: .ps1 BOM + PowerShell parse, .sh LF (also run by prepublishOnly)
test-engine-longtext.js long-text guard contract for BOTH engines (speak.ps1 -DryRun / speak.sh's perl)
test-speech-hook.js host plugin: event triggers, queue, tool-error detail filter
test-client-bundle.js browser bundle: slot registration + component rendering
test-settings-integration.js settings-service wiring + removed-API guard
session-log-dump.js read a DSH session log (manual: what text reached the engine)
settings-ui-check.py Playwright UI check (manual: needs a running, authenticated dsh)
dsh-events-check.py Playwright disclosure check (manual)
Writing a new adapter
Three reference patterns exist: event-stream (DSH), stop-hook (Claude Code),
agent-called (speech-summary.ps1 from a shell). In every case the adapter only
needs to: capture the final reply text → invoke the engine. See
docs/DESIGN.md §7.
License
MIT — see LICENSE.