
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
dsh-ultracode
Advanced tools
Ultra mode for DeepSeek Harness: a per-session effort tier that pins reasoning to max and activates an orchestration policy section, with a composer ULTRA chip and rainbow border in the web UI
English · 简体中文
dsh-ultracode adds an ultra tier to DeepSeek Harness: one per-session switch that pins every model request to the serving model's deepest reasoning effort and activates a standing orchestration policy — workflow fan-out by default on substantive tasks, adversarial verification before reporting, context hygiene.
Modeled on Claude Code's ultracode tier: the tier's substance is the standing orchestration policy, not a deeper reasoning parameter. Works on any provider whose adapter declares efforts from the shared vocabulary — DeepSeek (max), GLM / Kimi routes (high or max, whichever the model declares), or fully custom OpenAI-compatible routes.
Toggle it from the composer: a ULTRA chip appears next to the model selector, and while active the composer card carries an animated rainbow border.
| Capability | What it changes |
|---|---|
| Per-session effort tier | One switch pins every model request to the serving model's deepest declared effort (auto), or a literal configured value. |
| Orchestration policy | A deployment-owned prompt section rides the system prompt while active: standing workflow opt-in, adversarial verification, narrow-the-wave retries on provider limits. |
| Composer chip + rainbow border | A ULTRA chip in the composer bar; the composer card glows while the tier is in force (static under prefers-reduced-motion). |
| Picker consistency | Toggling re-syncs the native effort picker through the public models API, so the display always matches the pinned reality. |
| Delegation-aware | Spawn subagents inherit the effective state through the delegation chain; forks inherit through their seeded prefix and freeze there. |
[!NOTE] Requires an existing DeepSeek Harness installation (
@deepseek-ai/dsh-* >= 0.1.0-rc.6).
dsh plugin --profile <name> add dsh-ultracode
git clone https://github.com/BackMountainBird/dsh-ultracode.git
cd dsh-ultracode
pnpm install
pnpm build
dsh plugin --profile <name> add .
Run pnpm build again after changing the source. The local plugin install remains linked to this checkout.
Validate the composed profile and restart DSH:
dsh --profile <name> --dump-config
dsh --profile <name> web
Then switch the tier on — from the composer chip, or directly:
/ultra
Use ultra mode to audit every integration point of this repository against its pinned dependencies, with parallel verification.
Leave with /ultra off (or click the chip again).
/ultra (and /ultra off) execute through the harness command runtime, which appends the command/run session event before the handler runs. That event is the durable state — the plugin defines no session event of its own, so resume and replay restore it for free, and the last command wins.ultra:policy section renders into every request. The text is deployment-owned config; the default is the orchestration policy (standing workflow opt-in, adversarial verification, context hygiene, narrow the wave when a provider's concurrency limit times parallel subagents out).agent/request waterfall listener — prepended, so it stays outside the per-agent model-selection listener that would strip it — replaces each request's reasoning effort. auto (default) resolves the deepest effort the serving model declares under the shared off…max vocabulary; a literal value pins exactly and fails loud if the adapter does not declare it.parentSession, resolved against the live session store) and get the pin and policy too — the effort resolving against the child's model. Fork children inherit only through their seeded completed-turn prefix; a parent's later switch never reaches an already-spawned branch.conversation.input.right seat; state rides the host-computed ultra projection (zero client-side ultra state), and while active the chip marks the composer card — an injected stylesheet renders the rainbow border. The bundle ships as a closure factory (window.__ModuleLoader__.load) with platform externals resolved through the loader's module table.Profile row dsh-ultracode:
- id: dsh-ultracode
config:
effort: auto
| Field | Default | Meaning |
|---|---|---|
section | built-in policy text | Rendered as the ultra:policy prompt section while active |
effort | auto | auto pins each request to the deepest effort the serving model declares; a literal value must be one of the serving adapter's declared efforts (fails loud otherwise) |
promptSectionOrder | 120 | Prompt-section order |
command/run event: no custom session events, and the tool catalog never changes across modes (request-cache stability)./plan + /ultra = max-effort planning under plan's read-only constraints).pnpm install
pnpm run typecheck
pnpm run build
pnpm run verify
Host half in src/ (command, effort pin, prompt section, session projection, delegation-chain walk); browser half in src/client/ (composer chip, rainbow stylesheet, picker sync). Peer floors are @deepseek-ai/dsh-*@^0.1.0-rc.6; devDependencies pin the floor so development cannot drift onto newer-only APIs.
FAQs
Ultra mode for DeepSeek Harness: a per-session effort tier that pins reasoning to max and activates an orchestration policy section, with a composer ULTRA chip and rainbow border in the web UI
The npm package dsh-ultracode receives a total of 32 weekly downloads. As such, dsh-ultracode popularity was classified as not popular.
We found that dsh-ultracode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.