DSH Lattice

Alpha implementation of the ECC-V1.0 specification. Source code now exists (see below); the normative contract remains ECC-V1.0.md.

DSH Lattice is a planned DeepSeek Harness (dsh) plugin that adds a provider-neutral multi-agent orchestration facade: declarative teams, durable task graphs, addressable rooms/groups, and stable result envelopes. It is intended to sit on top of the existing Harness subagent seam (ctx.subagents, send_message, report, session log, fork/resume) without reimplementing the agent loop, persistence store, or a second runtime.

This project is an independent community design. It is not affiliated with, endorsed by, or maintained by DeepSeek AI. "DeepSeek", "DeepSeek Harness", and "dsh" are trademarks of DeepSeek AI.

• Normative spec: ECC-V1.0.md
• License: Apache-2.0
• Attribution & trademark notice: NOTICE
• Upstream compatibility evidence: COMPATIBILITY.md

Status

• Phase: alpha (0.1.0).
• Implemented in this repository (the aggregator):
  • Cordis-style plugin registering ctx.lattice (§14.1): utoRun, sendMessage, interrupt, listAgents, resume, subscribe, status, agentMessage.
  • Optional agent_message shim mapping DSH send_message/report to restricted agent_message forms while preserving parent-child authorization (§6.2).
  • Orchestration engine: task/assignment/agent state machines (§8), coordinate/route/broadcast modes, deterministic idempotency keys and at-least-once duplicate suppression (§9.3), capability preflight that fails loud (§12/§22.2), session modes auto/reuse/fork/new with fingerprints, override authorization and handoff bundles (§16), run and task timeouts, cancel/interrupt/resume (§21).
  • Persistent central mailbox: direct/group/broadcast delivery, acks, hop-count loop suppression, backpressure, durable outbox with retry/DLQ (§9, §11, §19.5).
  • Event log with retention (default 90 days), secret redaction (<redacted:kind/name>) and JSONL crash recovery (§19, §21.1).
  • Config loading (JSON + documented YAML subset) with retentionDays, maxHops, credential refs (§12, §18).
  • Status/event projections: run status, task board, room transcript, capability matrix, trace (§15).
  • Examples: examples/run-example.mjs, examples/agent-message-shim.example.mjs.

Sibling repositories in this workspace deliver the other surfaces: @dsh-lattice/adapter-dsh, @dsh-lattice/adapter-command, @dsh-lattice/transports (CLI, JSON-RPC stdio, exactly-one-tool MCP server, ACP/A2A clients).

Quick start

pnpm install
pnpm build && pnpm typecheck && pnpm test
pnpm example        # runs examples/run-example.mjs

The example mounts the plugin on a minimal Cordis-like context, runs a three-member coordinate orchestration with the built-in local provider, and prints the deterministic result envelope, agent list, engine status and a shim demo.

Security

See SECURITY.md. Highlights: one-tool-per-caller (lattice.uto_run), override authorization with authorization_denied (never silent degradation), REQUIRED tenantId with cross-tenant rejection, credentialRef-only secrets with redaction and leak scan, shell: false local execution, at-least-once delivery with deterministic dedup, hop-count loop suppression, and no exactly-once / no guaranteed provider KV-cache-hit claims.

Correct known facts (preserved from the design stage)

• DeepSeek Harness currently ships an MCP client, not a public MCP server.
• Existing send_message/report are parent-child limited; the shim preserves that constraint.
• One-shot provider capabilities vary widely; the capability matrix documents required-vs-observed per provider.
• No exactly-once or guaranteed provider KV-cache-hit claims are made.

License

Licensed under the Apache License, Version 2.0. See LICENSE.