
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
DSH host plugin: scheduled background 'dream' (memory consolidation) passes that distill recent session work into long-term memory (memory/MEMORY.md) and a dream diary (memory/dreams.md), without manual triggering. Includes dream_status / dream_run agent
DSH "Dream" plugin — scheduled background memory consolidation for DeepSeek Harness, inspired by OpenClaw's Dreaming.
While a root agent is idle, the plugin periodically runs a dream pass in a background subagent (not in the main conversation): it reviews recent session work and distills it into long-term memory files under <workspace>/memory (MEMORY.md + dreams.md). No manual triggering needed, nothing pollutes the chat.
mode: subagent, default). The dream conversation is separate, so nothing appears in the main session; the child gets a compact digest of recent messages + the memory files, keeping token use low.intervalSeconds defaults to 21600 (6 h); the event watermark counts real user messages only (the plugin's own activity is excluded), so dreams never self-trigger in a loop.memory/ with seed files; archives MEMORY.md to memory/archive/ and rebuilds it when it exceeds maxMemoryBytes.memory/.dream-<sessionId>.json and survives restarts.dream_status — view dream state (mode, interval, last/next dream time, user-event watermark, memory directory).dream_run — request a dream pass immediately (runs when idle, queues while busy).In the DSH web profile directory (Windows default: C:\Users\<you>\.dsh\profiles\web):
npm i dsh-dream
Place the package at <DSH_HOME>\plugins\dsh-dream, then add to the profile's package.json dependencies:
"dsh-dream": "link:<DSH_HOME>/plugins/dsh-dream"
Add an insert entry in the profile's cordis.patch.yml:
- insert:
- id: dream
name: dsh-dream
config:
intervalSeconds: 21600 # check every 6 hours (min 300)
minNewEvents: 3 # dream only when >= 3 new user messages
maxMemoryBytes: 20000 # archive MEMORY.md when it exceeds 20 KB
memoryDir: "F:/your-workspace/memory" # recommended: set explicitly
mode: "subagent" # subagent (default, background) | followup (legacy, visible)
subagentProvider: "spawn" # "spawn" = fresh context; "fork" = inherits parent history
# diagFile: "F:/your-workspace/dream-diag.log" # optional diagnostic log
Then restart the web service (e.g. dsh-web-restart.cmd or restart the profile).
Note: the
subagentmode requires thesubagentsservice (part of the standard DSH web profile, which ships@deepseek-ai/dsh-subagent-spawn-in-process). If it is unavailable, the dream is skipped and a warning is logged.
| Field | Default | Description |
|---|---|---|
intervalSeconds | 21600 | Check interval in seconds (min 300) |
minNewEvents | 3 | Minimum number of real user messages since the last dream before a dream is worth doing (plugin activity is excluded) |
maxMemoryBytes | 20000 | Archive & rebuild MEMORY.md when it exceeds this size (0 = disabled) |
memoryDir | see below | Memory directory. Recommended to set explicitly to <workspace>/memory. When unset, resolution falls back to session meta.cwd → process.cwd(); when the web is launched by the logon scheduled task, process.cwd() defaults to C:\Windows\System32, which would write memory files into the system directory |
diagFile | off | Optional absolute path for a plugin diagnostic log (event stream); enable for troubleshooting |
mode | subagent | subagent = background subagent (nothing in the main chat); followup = legacy visible [DREAM] user message |
subagentProvider | spawn | Subagent provider: spawn (fresh context, low tokens) or fork (inherits the parent's full history — more context, more tokens) |
digestEvents | 40 | How many recent user/assistant messages to include in the dream child's digest |
digestChars | 8000 | Max digest length (older content is truncated) |
startContinuable with the configured provider).MEMORY.md / dreams.md (the same pattern as the dream-consolidate skill) and replies with a short summary that stays in the child's session.dsh-schedule); sessions created after a restart get the capability automatically.intervalSeconds / minNewEvents.MIT
FAQs
DSH host plugin: scheduled background 'dream' (memory consolidation) passes that distill recent session work into long-term memory (memory/MEMORY.md) and a dream diary (memory/dreams.md), without manual triggering. Includes dream_status / dream_run agent
The npm package dsh-dream receives a total of 17 weekly downloads. As such, dsh-dream popularity was classified as not popular.
We found that dsh-dream demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.