
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-composer-tools
Advanced tools
DSH web plugin: arrow-key input history (session-scoped, draft-preserving) + instructions viewer/editor (global & project AGENTS.md/CLAUDE.md) + prompt library (Cherry Studio agents-zh, AGPL-3.0, append-to-input).
DSH web 输入体验增强插件:方向键输入历史 + 指令查看/编辑面板 + 提示词库。
给 DSH(DeepSeek Harness)的输入框加三个实用功能,全部本地运行、不联网、不需要密钥。
在输入框按 ↑ / ↓ 翻看本会话发过的输入,像 shell 历史一样:
输入框工具区的 🧩 按钮打开面板,查看当前会话实际生效的指令:
~/.dsh/AGENTS.md.git 标记)到当前目录每层的 AGENTS.md / CLAUDE.md / AGENTS.local.md / CLAUDE.local.md内置 780 条中文提示词(源自 Cherry Studio agents-zh.json,AGPL-3.0 许可,面板内常驻标注来源):
包内已声明 prepare 构建脚本;pnpm 从 Git 安装时会自动执行 node build.mjs 生成 lib/。pnpm 10+ 默认拦截依赖的构建脚本,按 dsh-market 的提示把 pnpm 打印的 key 加入 profile 的 pnpm-workspace.yaml 的 allowBuilds 后重试即可。
# dsh-market 目标与此等价:
dsh plugin --profile web add "github:wsxwj123/dsh-plugins#path:/packages/dsh-composer-tools"
lib/ 不入库,本地 link: 安装不会触发依赖构建,需要先构建:
# 1. 构建
cd packages/dsh-composer-tools
pnpm install
pnpm build
# 2. 装进你的 profile
cd ~/.dsh/profiles/web
pnpm add "link:/绝对路径/packages/dsh-composer-tools"
# 3. 装完检查 @deepseek-ai 物理复制坑(见下方"已知问题"),然后重启 dsh web
或直接 dsh plugin --profile web add "link:$PWD/packages/dsh-composer-tools"。
兼容版本:@deepseek-ai/dsh 0.1.5 与 0.2.0-rc.2(两版都免豁免可装)。
0.2 适配说明:0.2 从
sessions.list快照删掉了current字段,本插件改为读 会话作用域的标准sessionIdprop 来定位当前会话目录(snapshot.current仅作 0.1.5 兜底)。0.2 桌面真机实测待补。
/ct 前缀 RPC(loopback 信任围栏 + POST-only)——指令发现(.git 找项目根 + 祖先链,lstat 拒符号链接)、读写(basename 白名单 × 精确发现成员资格双闸门防逃逸 + mtime 乐观锁 + 截断保护)、提示词库按需下发conversation.input.right slot 注入入口按钮;方向键用 document capture keydown 拦截(先于 React),官方 inputActions.setDraft 回填;发送采集走 phase 状态机(发送失败自动剔除误录)pnpm test:acceptance # 131 条契约验收(真实实现)
node --test tests/unit/*.test.mjs # 112 条白盒单测
npx playwright test tests/e2e/ # 7 条真实 dsh web e2e(需先起 composer-e2e profile)
装插件后若所有工具调用报 Cannot read properties of undefined (reading 'prepare')——是 pnpm install 把 @deepseek-ai/* 物理复制成第二份导致 Symbol 分裂。检查 ~/.dsh/profiles/<name>/node_modules/@deepseek-ai/,若是真目录则 mv 掉它(回退共享 symlink),重启 dsh。详见 deepseek-harness discussion #783。
MIT(插件代码)。提示词数据源自 Cherry Studio(AGPL-3.0)。
FAQs
DSH web plugin: arrow-key input history (session-scoped, draft-preserving) + instructions viewer/editor (global & project AGENTS.md/CLAUDE.md) + prompt library (Cherry Studio agents-zh, AGPL-3.0, append-to-input).
We found that dsh-composer-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.