radres/dsh-plugin-call-me

dsh-plugin-call-me

Your DeepSeek Harness agent rings your actual phone. It asks the question out loud, you answer out loud, and what you said goes straight back into the run.

Every other reachability plugin sends you a notification. This one places a phone call. Your phone rings through CallKit like any other call, you pick it up, a voice reads the agent’s question, you say “yes, ship it, but hold the migration”, and the transcript of that sentence is what the agent reads next. No tab to come back to, no app to open, no keyboard.

you walk away  ->  agent finishes  ->  your phone rings  ->  you answer out loud  ->  the run continues

Install

dsh plugin --profile web add github:radres/dsh-plugin-call-me

Plain JavaScript, no build step, so a git install needs no allowBuilds permission. Then pair a phone:

1. Get the free /call-me app: https://serdaroztetik.com/aiphone/go/dsh (iPhone)
2. Open it. It shows a 10-digit number.
3. Tell the plugin about it, in the profile’s cordis.patch.yml:

- insert:
    - id: call-me
      name: dsh-plugin-call-me
      config:
        number: '5551234567'

If this machine already runs /call-me for another agent, skip step 3: the number in ~/.aiphone/config.json is picked up automatically, and both agents reach the same phone.

Nothing rings until a number resolves. An unpaired install is inert on purpose.

Prove the phone half in five seconds, before installing anything

curl -sS https://serdaroztetik.com/aiphone/ring \
  -H 'content-type: application/json' \
  -d '{"to":"<YOUR_10_DIGITS>","text":"Can you hear me?","from":"dsh"}'

That is the same call the plugin makes. It blocks, rings your phone, and prints what you said back.

What you get

Two tools the model can call on purpose

Three things that happen without the model asking

• Turn-end reachability. A run stops, and 2 minutes later your phone gets a line quoting what the agent last said. Type anything in that window and your phone stays quiet, so being at the keyboard costs you nothing. Set turnEnd.mode: call and it calls instead, then feeds your answer back with agent.steer(): a finished run picks itself up from what you said.
• Approvals by phone. A tool waiting for permission can text you about it, or (approval.mode: answer) ring you and take the decision from your voice. Anything that is not a clear yes denies, and an unanswered call hands the question back to whoever is at the keyboard. Silence never approves.
• Replies from the phone reach the run. Text the thread from your phone an hour later and it lands in that session: an idle run wakes up (agent.followup()), a busy one picks it up at its next step (agent.inject()).

Configuration

Every field has a default that works. Add only what you want to change, and remember that a patch row replaces the whole config value, so restate the keys you need.

Ring-the-phone-when-I-stop, and let me answer by voice:

- insert:
    - id: call-me
      name: dsh-plugin-call-me
      config:
        number: '5551234567'
        turnEnd:
          mode: call
          graceSeconds: 60
        approval:
          mode: answer

How it works

No core is patched. Everything is an ordinary Cordis plugin on a documented extension point:

Three rules the code keeps, because they are what makes a plugin like this safe to leave installed:

• A listener never throws. approval/request and the turn-end path sit in your agent’s own control flow. A phone network blip must not end a run.
• Unsolicited contact is throttled and grace-delayed. A plugin that rings on every turn gets uninstalled by lunchtime.
• Nothing happens unpaired. Every path resolves the number first.

What this is

/call-me is a free hosted service plus a free iPhone app. Calls arrive over CallKit and VoIP push, what you say is transcribed live and not stored, and the agent never learns your real phone number: it dials a 10-digit /call-me number that belongs to the app.

• App Store: https://serdaroztetik.com/aiphone/go/dsh
• Privacy policy: https://serdaroztetik.com/aiphone/privacy
• Also available for Claude Code and as a remote MCP server: https://github.com/radres/call-me

Known limits, stated plainly:

• iPhone today. An Android build exists and is in closed testing, so it is not something you can install yet.
• approval.mode: answer holds the desktop prompt while the phone rings. That is the cost of taking the decision by voice; the other modes hold nothing.
• A voice answer is a transcript. The approval path accepts only a clear yes and denies everything else, but do not point it at commands you would not want decided by a sentence.
• There is no self-hosted deployment.

Development

npm install
npm test        # 24 offline tests: a fake Cordis context and a recording fetch, no phone rings
npm run check   # syntax

MIT. Issues and PRs welcome.