
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
dsh-model-manager
Advanced tools
Model tags, reasoning capabilities, image routing, and vision proxy support for DeepSeek Harness
中文 | English
dsh-model-manager provides an independent Model Center settings page and shares model metadata with the official DeepSeek Harness model settings page and model picker. This first stage does not replace llm-pi-ai, credentials, onboarding, the official model picker, or @deepseek-ai/dsh-tool-fs.
off, minimal, low, medium, high, xhigh, and max reasoning levels through the official reasoningEfforts field.input field.read_image calls with the same session, image, route, focus, and prompt-template version.The host's model-discovery dialog starts every newly discovered model unchecked and provides Select all and Clear actions. Those controls belong to the compatible host build, not to this plugin's stored metadata.
This plugin requires a DeepSeek Harness build that provides ctx.imageInput, additive model-settings extensions, and additive model-selection filters. Released hosts that do not contain those APIs are incompatible; update the host before enabling the plugin. The Host service requires imageInput, attachments, and llm, so Cordis will not activate it without the required public services.
The Model Center currently owns only this plugin's tag and image-routing metadata. Loaded LLM adapters remain the source of the runtime model directory. The page does not copy model routes, OAuth tokens, or Host credentials; future OAuth providers will contribute to the center while retaining their own protocol and adapter implementations.
Provider plugins can call registerModelCenterExtension() from dsh-model-manager/client to render sign-in, account, or provider-specific configuration in the independent page without adding provider branches to the manager core.
Native image capability always wins. For a text-only source model, the plugin uses only its explicitly configured proxy. The proxy target must exist, be different from the source, and directly declare image input; proxy chaining and fallback searches are not performed.
Uploaded images remain unchanged in the durable user message. Before the provider request, the plugin records a replayable proxy observation and removes image blocks only from the outgoing copy consumed by the text-only model. read_image accepts an optional focus string and returns the proxy observation instead of injecting the original image into that model's context.
Proxy requests use the Harness LLM and credential services. Cancellation propagates from the active turn, and proxyTimeoutMs adds an upper bound. A failed proxy request fails explicitly and is not retried with another model.
- insert:
- id: dsh-model-manager
name: dsh-model-manager
config:
proxyTimeoutMs: 60000
# metadataPath: D:/dsh/model-manager.json
# dshHome: D:/dsh-home
By default, metadata is stored at <DSH_HOME>/plugins/dsh-model-manager/config.json. Writes use an atomic replacement and a monotonic revision; a stale page is rejected instead of overwriting a newer page.
The selected tag filter is normal, global UI state stored under dsh.model-manager.selector.global.tags.v1. Invalid or unavailable browser storage falls back to no filter. Model tags, reasoning levels, image capability, proxy routes, credentials, and form drafts are not stored in browser storage.
pnpm run typecheck
pnpm test
pnpm run build
pnpm run pack:check
FAQs
Model tags, reasoning capabilities, image routing, and vision proxy support for DeepSeek Harness
The npm package dsh-model-manager receives a total of 0 weekly downloads. As such, dsh-model-manager popularity was classified as not popular.
We found that dsh-model-manager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.