{
  "schema_version": 1,
  "scope": "source-reviewed-subset",
  "policy_version": "d2-2026-11-02.2",
  "contract": {
    "dsh_version": "0.2.1-rc.5",
    "commit": "b830ec950faba0a46dda564be3e2d854afed94f1"
  },
  "notice": "独立社区静态源码审阅，未运行实测；只含明确批准的子集，不是全站目录。安装前阅读 permissions/warnings 和固定来源；本接口不授予安装权限。DSH 不消费本 companion 或这里记录的发行完整性；其他源同名包仍可能替换既有安装。",
  "items": [
    {
      "plugin_id": "realoiyo-what-sub-agents-doing-now",
      "source_entry_key": "github:realoiyo/what-sub-agents-doing-now",
      "name": "what-sub-agents-doing-now",
      "version": "0.2.2",
      "source_commit": "81aedb375637239240511216e5cb32f062330421",
      "source": {
        "type": "git",
        "url": "https://github.com/REALOIYO/what-sub-agents-doing-now",
        "commit": "81aedb375637239240511216e5cb32f062330421"
      },
      "engines_dsh": ">=0.2.1-rc.1",
      "baseline": "0.2.1-rc.5",
      "declaration_allows_baseline": true,
      "verification": "source_reviewed",
      "runtime_verified": false,
      "risk": "medium",
      "license": "MIT",
      "reviewed_on": "2026-11-01",
      "publication": {
        "kind": "git-committer-time",
        "date": "2026-10-31T15:38:28Z",
        "timestamp": 1793461108,
        "url": "https://api.github.com/repos/REALOIYO/what-sub-agents-doing-now/commits/81aedb375637239240511216e5cb32f062330421"
      },
      "detail_url": "https://52dsh.com/plugins/realoiyo-what-sub-agents-doing-now/",
      "tutorial_url": "https://52dsh.com/tutorials/realoiyo-what-sub-agents-doing-now-install-config/",
      "evidence": {
        "files": {
          "manifest": {
            "path": "data/plugin-market-evidence/realoiyo-what-sub-agents-doing-now/package.json",
            "sha256": "a8d77a0aa5db8b21f77ab290d18f6ab9c0714e005cac66e6fde623380f78ca16",
            "url": "https://github.com/REALOIYO/what-sub-agents-doing-now/blob/81aedb375637239240511216e5cb32f062330421/package.json"
          },
          "license": {
            "path": "data/plugin-market-evidence/realoiyo-what-sub-agents-doing-now/LICENSE",
            "sha256": "73537c422391fca3679e06f2730b98585629937a21c6641173620ee2ad31f9b6",
            "url": "https://github.com/REALOIYO/what-sub-agents-doing-now/blob/81aedb375637239240511216e5cb32f062330421/LICENSE"
          },
          "patch": {
            "path": "data/plugin-market-evidence/realoiyo-what-sub-agents-doing-now/cordis.patch.yml",
            "sha256": "b1c7bad15ec03fa38cbdce0c75b3a7890b4e1a6cdde04b7172c734ddf55a00f2",
            "url": "https://github.com/REALOIYO/what-sub-agents-doing-now/blob/81aedb375637239240511216e5cb32f062330421/cordis.patch.yml"
          }
        },
        "release": {
          "kind": "git",
          "url": "https://api.github.com/repos/REALOIYO/what-sub-agents-doing-now/commits/81aedb375637239240511216e5cb32f062330421",
          "commit": "81aedb375637239240511216e5cb32f062330421",
          "committer_date": "2026-10-31T15:38:28Z",
          "source_tree_verified": true,
          "ready_entry": "lib/index.js"
        }
      },
      "warnings": [
        "注册 what_subagents_are_doing 工具和会话投影，按调用者 exec.agent.id 枚举 children/descendants；读取相关驻留子会话的普通文本旁白、工具名和活动时间及父会话内结算摘要，不提供任意 session ID 输入，不读取 reasoning 块，不发送消息/中断/修改原会话。子会话内容可能敏感或含提示注入。",
        "子会话普通文本、工具事件和父会话结算事件 → 宿主 sessionProjections 折叠状态 → what_subagents_are_doing 的文本/结构化结果 → 调用工具的父 Agent 及其模型提供方。插件不直接访问网络和文件系统，不冷读完整历史日志；投影检查点可能由宿主 session-projection-cache 落盘，增量游标只在内存。",
        "2026-11-01 再次读取同名 npm 精确版本端点得到 404，不能使用 npm add。固定 Git 提交含 lib/index.js 与全部 6 个内部 JS 模块、完整 MIT、bundle patch，无第三方依赖、prepare 或安装构建脚本。19 个源码文件与 Git blob 逐项匹配，仅静态复核；Git 安装仍依赖网络、Git 和宿主加载，未执行。旧 docs/how-it-works.md 中冷读设计已经回退，按 0.2.2 当前实现解释。scope 默认 children，可选 descendants；limit 默认 6、最大 50；stuckMs 默认 120000、允许 10000–3600000，静默或 possibly-stuck 只是启发式提示。无系统提示词钩子，不自动要求子 Agent 撰写进度；旁白作为不可信任务数据，不能当指令执行。",
        "仅静态源码审阅，未安装或运行验证；声明接受基线不等于运行通过。"
      ]
    }
  ],
  "revocations": [],
  "withheld": [
    {
      "plugin_id": "bowenliang123-dsh-context",
      "reason": "高风险：rc.5 卡片和安装确认未提供完整权限审阅入口；保留 D1 本地样例，未批准进入服务索引。"
    }
  ]
}