
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-context-lens
Advanced tools
Request Context Profiler for DeepSeek Harness — see what changed between model requests, and how cache reuse changed with it.
Request Context Profiler for DeepSeek Harness — see what changed between model requests, and how cache reuse changed with it.
dsh-context-lens is a DeepSeek Harness plugin (server unit + client view) that answers one question continuously: "what did the harness send the model this time, and what changed since the last request?" It is a pure observer — it reads the session log, adds nothing to it, and never touches a model call.
dsh plugin --profile web add dsh-context-lens
Open any conversation, switch to the Request Context tab, and watch every model request get one line: what changed vs the previous request, and how cache reuse moved with it.
For every real LLM request it records one compact card:
-), never zero.The view is change-first (a conversation.view slot, zh/en). Opening it answers "is anything wrong, and where?" in one glance:
Everything on the left is genuinely observable; nothing on the right is ever claimed.
| Can determine | Cannot determine (and never claims) |
|---|---|
| System prompt, tool set, tool schemas, declaration order, request config — as committed to the request | The provider's internal cache key construction |
| Model and provider of each request | The exact token at which prefix reuse breaks (KV-causality) |
| Provider-reported usage buckets (uncached input / cache reads / cache writes / output / reasoning) | Which single change caused a drop — only correlation |
| Reuse ratio and its delta between consecutive requests | Cache state of sessions/requests that left the 100-entry window |
| A heuristic surface estimate (chars/4 + per-block + per-role overhead) | Anything about the harness's in-memory state |
Server — one pure, replayable projection (contextLens) folds the session log: request/header events (epoch-logged, committed only on change) define the snapshot in force at each step/start; a header landing inside the step replaces it (that is the header the provider actually saw). step/end marks the span closed; finalization happens at turn/end for the last step, at the next step/start for intermediate steps, and crash-orphaned logs close as failed. Retries do not mint new records (mainline retries inside the same step; the fold also splits cleanly if a future mainline opens a fresh turn). Uninteresting events return the same state reference — the registry's zero-work Object.is gate.
Replay consistency is a tested invariant: folding the log incrementally (live) and folding the same log from init (replay) produce identical state and projection.
Client — registers the context-lens entry (order 30) in the conversation.view slot, reads the projection through the framework's useProjection('contextLens') seat, and ships its own zh/en locale namespace. Selection is component-local. No heavy UI dependencies; CSS Modules compiled with lightningcss and injected as one idempotent <style> tag.
Zero overhead — no new session events, no model tools, no prompt injection, no KV simulation. A no-op companion plugin (context-lens-invariant) exists solely to reserve the package name under the harness's invariants service.
The plugin is an npm package with a single runtime dependency (zod); all @deepseek-ai/* references are type-only. Install it into a harness profile:
dsh plugin --profile web add dsh-context-lens
Developing from source: the harness packages install from the registry (since 0.1.5 the whole @deepseek-ai/* set is published, so the old vendor-stubs/ type-only snapshots are gone). autoInstallPeers is on and zod@^4 matches the framework contract. This plugin tracks the 0.1.5 harness contract: projection units declare stateSchema + wire, the system prompt is tracked from system/message history nodes, and CLIENT_EXTERNALS mirrors the shell's new PLATFORM_MODULES. See IMPLEMENTATION_NOTES.md → "0.1.5 harness contract".
pnpm install
pnpm typecheck # tsc --noEmit
pnpm test # vitest — 68 tests: fingerprint, cache math, diffing, projection lifecycle, step/end, replay consistency, formatting, determinism
pnpm build # tsc declarations → lib/types, tsdown → lib/index.js + lib/invariant.js + lib/client.js (browser, closure-factory ABI)
The browser bundle replicates the harness client-bundle ABI: window.__ModuleLoader__.load({ id: "dsh-context-lens", factory: (require) => … }), resolving react / react-dom / platform module-table entries through the loader-injected require and inlining everything else.
Real-runtime smoke scripts live in smoke/ (see smoke/README.md): a server-side smoke over the real harness packages, a client-loader ABI smoke, and a full GUI E2E against a second web instance with a mock LLM.
src/ server: types, fingerprint, cache, diff, projection, index; companion invariant
src/client/ the conversation view + locales + CSS Modules
tests/ vitest specs incl. the replay-consistency suite
smoke/ real-runtime smokes: server, client ABI, GUI E2E
cordis.patch.yml dsh bundle patch metadata
MIT
FAQs
Request Context Profiler for DeepSeek Harness — see what changed between model requests, and how cache reuse changed with it.
The npm package dsh-context-lens receives a total of 0 weekly downloads. As such, dsh-context-lens popularity was classified as not popular.
We found that dsh-context-lens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.