Oscar-Williams/dsh-deepcanary

DeepCanary

Let tasks run quietly. Know when they need you. Return to the right session.

English · 简体中文 · Documentation · Changelog

DeepCanary adds a local task inbox to DeepSeek Harness. It brings questions, approvals, failures and completion summaries together, applies quiet notification policies, and returns you to the relevant session.

Release candidate: 0.1.6-rc.4. The supported Host baseline is released DSH 0.2.1-rc.2 for WebUI and official Windows Desktop. Get the package from npm or GitHub Releases. Both latest and next select this RC.

Background jobs remain visible through completion and plugin reload. Inbox places urgent work first, and choosing Already resolved marks the selected reminder handled. Background failures return you to their owning session. Healthy background activity stays quiet.

Choose a delay, review the reminder in Scheduled, adjust its time or restore it to pending. Each arrangement is tracked independently across tabs and reloads. Due reminders use current notification preferences, and Inbox preserves human waits and scheduled work when routine updates arrive in large numbers.

Install

Desktop

Download dsh-deepcanary-0.1.6-rc.4.tgz and SHA256SUMS from the release assets. Open DSH Plugins → Add plugin, select the local tgz through the official package manager, and follow the manager's activation instructions. Save active work before a requested restart. Desktop owns its profile and manages its packages through the application.

WebUI

Use DSH 0.2.1-rc.2 and an explicit Web profile:

dsh --version
dsh plugin --profile web add dsh-deepcanary@0.1.6-rc.4 --registry=https://registry.npmjs.org/
dsh web

To run the host through npm, prefix each command with npx --yes --package=@deepseek-ai/dsh@0.2.1-rc.2. For example:

npx --yes --package=@deepseek-ai/dsh@0.2.1-rc.2 dsh web

Open the authenticated URL printed by DSH. A built source checkout can use its documented pnpm dsh entry. Use that checkout's own package manager version.

To install the verified GitHub archive, use its local path:

dsh plugin --profile web add ./dsh-deepcanary-0.1.6-rc.4.tgz --registry=https://registry.npmjs.org/

Update and remove

Use the official manager's update control when it offers one. An installation request for an already installed bundle can be refused by the current manager; remove that bundle through the manager before adding its replacement. Follow its applied/restart status and confirm the loaded version.

The Web CLI forwards package operations to pnpm. To update Web, run the installation command with the explicit version above, finish current work, stop that Web Host, start dsh web again and reload its page. Confirm the loaded plugin version. To remove the Web installation:

dsh plugin --profile web remove dsh-deepcanary

DSH profiles own their sessions and configuration. Save active work before changing the owning host process.

Use

1. Open DeepCanary from the DSH sidebar.
2. In DSH Settings, select Built-in plugins → DeepCanary to set the notification level, hourly budget and quiet hours.
3. Enable browser notifications when you want them, then run your tasks normally.
4. Use an Inbox item's session action to return, inspect its evidence, snooze it or provide explicit feedback.

Level · Meaning · Behavior C1 · Suggested check · Routine outcomes and completion summaries remain in Inbox. C2 · Needs attention · Failures and possible stalls follow your notification policy. C3 · Immediate human attention · Requires authoritative evidence of an active question, approval or blocking condition.

Related events are grouped and deduplicated. Tools stay quiet while progress is being observed within the configured grace period. Timed questions remain answerable after timeout, and accepted replies close their reminder. Completion summaries survive recovery and reload. Stopped tasks retain their stopped state; fork history stays quiet.

Background jobs appear in the activity status while they run. Progress closes a previous stall reminder when activity returns. During live observation, an uncollected result enters Inbox at C1 on completion or C2 on failure. Results already received by a waiting task and intentional cancellation stay quiet. A reply that finishes while background work continues says so explicitly. Reload restores tracking and collects missed observations once. Recovered messages identify their context and preserve uncertainty about earlier result collection. Tasks the Host cannot confirm retain unknown status.

Inbox orders pending items by urgency, with questions and approvals ahead of routine updates. Further pages remain accessible through Show more updates. Choosing Already resolved records your feedback and marks that reminder handled; new questions retain their own reminder lifecycle.

Remind later offers 5, 15, 30 and 60 minutes. Scheduled cards show their return time and remain available for review. At the deadline, C1 returns to Inbox and C2 follows quiet hours and the rolling budget. C3 requires current authoritative evidence. A resolved or acknowledged item stays closed. Local profile state preserves deduplication, budget and notification status through plugin replacement. Actual OS delivery depends on the device and application lifecycle.

The resizable Inbox has opaque light/dark surfaces, keyboard controls and expandable evidence. Navigation verifies the target in DSH's public session catalog. An unavailable target keeps its summary and explains its availability.

Settings use the Host's configuration service with revision checks. A concurrent write produces a conflict and preserves the draft. Discarding the draft reads the current Host snapshot. Plugin replacement waits for pending reminder writes before the replacement starts reading state.

Privacy

Reminder state stays in the local profile. Stored fields are bounded metadata, hashed references, explicit feedback and the local session handle needed for navigation. Conversation text, prompts, model output, tool arguments and credentials remain in their owning Host services.

HTTP endpoints use DSH's authenticated shared API, Host/Origin checks, bounded JSON input and sanitized errors. Feedback is optional. Usefulness comes from explicit feedback. See security and feedback calibration.

Compatibility and limits

• Notifications require a running Host and renderer, browser permission and suitable OS settings. Device observations establish actual delivery and click behavior.
• Desktop shares the core, settings and Inbox. Native window reveal and notifications outside the renderer require further public Host capabilities.
• Windows WebUI and Desktop are the device targets. CI configuration also covers source checks on its named operating systems.
• Supervisor is experimental and disabled by default. Its local projection lasts while the owning Host runs.
• Live reminders use deterministic rules. Real feedback and independent evaluation guide further improvements.

See compatibility, roadmap, development, architecture and contributing.

License

MIT. Built on the public DeepSeek Harness plugin APIs.