Agent-Body — plugins as organs: 26-organ catalog, a heartbeat, zero-model-call reflex arcs, sleep-time memory, closed-loop self-healing

[1420079678-ctrl]

Agent-Body turns the plugin list into a body. Instead of another bundle of tools, it lets each plugin declare itself an organ — capabilities, senses, reflexes — and then runs the physiology around it: command routing, a heartbeat, reflex arcs, sleep, memory consolidation and closed-loop self-healing. Then it hides the capabilities you are not using this turn.

Repo: https://github.com/1420079678-ctrl/agent-body · MIT · topic dsh-plugin
Catalog: catalog/organs.json declares 26 organs in four install tiers (core / general / professional / experimental), each with its permissions and its fallback chain written down. Only core + general install by default, so a fresh session does not start with the entire capability surface on screen.

---

The mechanisms

1. Command → nerve impulse → organ. The operator's sentence is routed deterministically to the organ that owns the intent, and the impulse says which capability to use — no model call, so the same sentence always reaches the same organ. Unrouted intents are counted rather than silently dropped.

2. A heartbeat, not a loop wrapper. A pacer carries law + interoception + homeostasis alerts to every organ. It is a real variable-rate clock: faster under alerts, slower when the body is quiet. Every plugin can subscribe to the heartbeat and join the circulation.

3. Reflex arcs that fire with zero model calls. Deterministic conditions (error / ok / slow:N / hit: / miss:, combinable), no eval, with re-entrancy suppression, cooldown and quotas so a reflex cannot become a loop. A repeated failure is answered by logic, not by thinking about it again.

4. Sleep and consolidation. Two minutes of quiet → light sleep; five → deep sleep. During deep sleep a deterministic pass (still zero model calls) turns run history into memory cards — pitfalls, playbooks, weak spots, unresolved items — which are then recalled when a matching command arrives.

5. Closed-loop self-healing. Failure → attribution (tool_missing / arg_error / permission / timeout / network / not_found / conflict) → prescribed remedy (read-only ones run automatically; side-effecting ones are left to the model; argument errors are never auto-retried) → re-check, which only closes the wound when that organ actually succeeds next time. Plus: intent-gated tool schemas. Capabilities are surfaced per turn; a gated capability is one body_call away, never gone.

---

See it work in 30 seconds — no install, no host, no API key

git clone https://github.com/1420079678-ctrl/agent-body && cd agent-body
npm run demo

Real output from a fresh clone (trimmed; the demo is bilingual and drives a real end-to-end chain — command → impulse → dispatch → execute → failure → attribution → reflex fires):

full tool schema        55154 tokens  (256 entries)
surfaced this turn      11031 tokens   (47 entries)
saved 80.0%
...
48 representative commands: mean token saving 84.71%, median 85.67%, worst 75.20%
correctness guardrail: 0 defects (must be 0) · 6 truncated · 0 unrouted

The truncated / unrouted ones are counted separately instead of being folded into the saving, because they cost an extra hop to recover. benchmarks/results/REPORT.md documents how the number was measured, and npm run check re-runs it offline.

Install an organ into DSH

The self-contained organs ship prebuilt tarballs on the release page; the manifest declares dsh.bundle, so installing also mounts it on the next start:

dsh plugin --profile web add https://github.com/1420079678-ctrl/agent-body/releases/download/v0.1.0/dsh-external-dsh-organism-0.1.0.tgz

Ten organs ship this way (the ones needing no external toolchain); the rest are built from the repo by replay-*.ps1 scripts.

Evidence, not adjectives

Command (run by me, on this repository)	Result
node scripts/verify-repo.mjs	11 ok · 1 warning(s) · 0 failure(s)
node scripts/run-tests.mjs	tests 30 / pass 30 / fail 0
node workspace/plugins/dsh-organism/scripts/smoke-test.mjs (installed harness)	197 通过 / 0 失败

Honest status

• Not on npm yet. Installs come from the release tarballs or the repo. I would rather say this than imply an npm i.
• First public release 2026-09-11; the repo ships offline regressions and a reproducible benchmark instead of a feature list.
• If you try it and something is wrong, telling me is more useful to me than praise — the honest failure modes are the interesting part.

---

中文

Agent-Body 把插件表变成一具身体：插件不再是一堆工具，而是各自声明为器官（能力、感知、反射），生理机制跑在它们周围——命令路由、心跳、反射弧、睡眠、记忆巩固、闭环自愈，再把这一轮用不到的能力收起来。

仓库： https://github.com/1420079678-ctrl/agent-body · MIT · topic dsh-plugin
目录： catalog/organs.json 声明 26 个器官、四个安装分级（核心 / 通用 / 专业 / 实验），每个器官写明权限与代偿链。默认只装核心 + 通用，新会话第一屏不会铺满全部能力。

五个机制： ①命令按意图确定性路由到负责它的器官，指明用哪个能力，零模型调用；②真起搏器式心跳，按内环境变速（告警加快、静默放慢）；③反射弧用确定性条件求值（无 eval），命中即执行、零模型调用，带重入抑制与冷却；④静默 2 分钟浅睡、5 分钟深睡，深睡里用确定性规则把经历巩固成记忆卡；⑤失败走「归因 → 处方 → 复检」，参数错误绝不自动重试，器官下次成功才闭合伤口。外加按意图显影工具 schema——被收起的能力一次 body_call 就能取回。

30 秒看到它在干活（不用装、不用宿主、不用 API key）：

git clone https://github.com/1420079678-ctrl/agent-body && cd agent-body
npm run demo

Demo 在本机真实跑出的结果（节选）：全量 tool schema 55154 token（256 项）→ 这一轮显影 11031 token（47 项），省 80.0%；48 条代表性命令平均省 84.71%、中位 85.67%、最差 75.20%，正确性缺陷 0。可信度不靠形容词：benchmarks/results/REPORT.md 写明口径，npm run check 离线复跑。

装进 DSH： 自带预构建 tarball、声明了 dsh.bundle，一条命令即装（见上文命令）。

当前状态： npm 包尚未发布（从 release tarball 或仓库安装）；2026-09-11 首次公开发布，仓库里放的是离线回归与可复现基准，不是功能清单。有反馈直接说，哪里不对告诉我比夸我更有用。

[1420079678-ctrl]

A note for anyone who lands here from a search: v0.1.1 is out, and it is the install path to use.

What it fixes — on harness 0.1.7-alpha.2 the organs used to stop a turn with 本轮运行失败 format v4 message requires a producer-owned source kind. Injected messages carried the retired { kind: 'plugin', plugin: … } wrapper, which format V4 refuses on both the read and the write path. All five injection sites now emit the portable { kind: 'plugin:<name>' }, which V4 requires and which the V3 native write path accepts (measured against the host's own encodeCurrentEvent, not inferred).

Three things came out of it that outlive the fix:

• organ-sdk exports injectedSource(name) — organ authors get the portable value from the SDK instead of rediscovering it. This is the same producer-side helper I asked the harness team for upstream; ours exists now.
• npm run check:sources gates it — the build fails if any plugin source or built output carries the retired wrapper, or if a plugin: literal drifts from what the SDK produces. Checked both ways: the tree passes with 10 occurrences across 23 plugin directories, and a planted wrapper is reported with file and line.
• The tarballs are now reproducible from a clone. Seven of the ten organs do not commit a lib/, so a plain npm pack on them silently produced a package whose main pointed at a file that was not in it — the first attempt at packaging this release shipped exactly that, and it was caught and rebuilt before publishing. scripts/pack-organs.mjs stages manifest + patch + README + lib/ (committed, or built for the occasion) before packing, and every uploaded asset was checked for lib/index.js and cordis.patch.yml.

Install:

$rel = "https://github.com/1420079678-ctrl/agent-body/releases/download/v0.1.1"
dsh plugin --profile web add "$rel/dsh-external-dsh-organism-0.1.1.tgz"
dsh plugin --profile web add "$rel/dsh-external-dsh-cortex-0.1.1.tgz"

Release: https://github.com/1420079678-ctrl/agent-body/releases/tag/v0.1.1 · Write-up and the diagnostic probe: docs/session-format-v4-compat.md and scripts/probe-source-kind.mjs in the repository.

[1420079678-ctrl]

There is now a live replay you can open without installing anything: https://1420079678-ctrl.github.io/agent-body/

It is generated from a real install's runtime files rather than written by hand - vitals.json (38 organs with call counts), bloodstream.json (beat, blood pressure, the healing ledger, learning counters), pulse.jsonl (the real pulse stream, replayed) - with the capture time and provenance printed on the page itself, so any figure traces back to the file it came from. The page also states plainly that the animation replays recorded events instead of pretending to be live.

Two things changed in the repository alongside it:

• Install is one command. dsh plugin forwards its arguments to pnpm add inside the profile, so the body kernel, the memory organ and zero-residence install together:
  dsh plugin --profile web add <organism.tgz> <cortex.tgz> <zero-residence.tgz>
• The README now leads with a verifiable payoff table - the offline demo, the reproducible 84.71% tool-schema gating, the healing ledger, the anatomy self-check - instead of the metaphor. Runtime counts are labelled as measured on a development install.

The page exists because "plugins as organs" is easy to say and hard to picture: a visitor now sees the heartbeat, the organs and the pulse stream before deciding whether to install anything.