
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
User-side undo/redo for DeepSeek Harness (dsh): the /undo command rolls the transcript back to before the last message and /redo restores it.
User-side undo/redo plugin for DeepSeek Harness (dsh), inspired by the undo/redo experience in coding agents like opencode.
The plugin registers two slash commands (never sent to the model):
/undo — rolls the transcript back to before the last message. If the last message is an assistant reply, its whole closing reply flow (assistant fragments and tool results) is shadowed out of the visible context; if the last message is yours, that message is removed. The durable session log keeps every rolled-back event, so nothing is lost./redo — restores the messages the most recent /undo removed, re-adding them exactly as they were.The session log is append-only, so /undo never deletes events. Instead it appends one empty-content assistant/message whose surface replace op shadows the targeted messages. Empty assistant content derives to no message, so the transcript and the model context show exactly the pre-undo state, while the log remains a complete, replayable, reversible history. /redo re-appends fresh copies of the shadowed events as ordinary surface appends (with re-minted message identities; tool results keep their call correlation, so transcript tool-call → tool-result adjacency is preserved).
Design notes:
/undo removes the closing reply flow of the last turn (or the trailing user message), returning to your last input. Repeated /undo calls walk back one reply at a time.ctx.sessions.flush) before reporting success; if persistence cannot be proven, the command reports an error rather than lying.The package is a dsh bundle: package.json declares dsh.bundle pointing at cordis.patch.yml, which activates the plugin row.
From npm:
dsh plugin --profile demo add dsh-undo
From git (source checkout — the prepare script builds lib/ on install; authorize the build in the profile's pnpm-workspace.yaml first):
dsh plugin --profile demo add github:LingLambda/dsh-undo#<sha>
For local development against a source checkout of deepseek-harness, load the plugin directly as an overlay:
pnpm dsh web --patch ./cordis.patch.yml --patch /absolute/path/to/dsh-undo/overlay.yml
where overlay.yml references the source entry:
- insert:
- id: undo
name: /absolute/path/to/dsh-undo/src/index.ts
Type /undo in the composer to roll back to your last input, then /redo to restore what was undone:
/undo
/redo
Each command's result is shown in the transcript as a command card (已回滚 N 条消息 / 已恢复 N 条消息, or an error such as 没有可撤销的内容).
yarn install
yarn typecheck
yarn test
yarn build
MIT
FAQs
User-side undo/redo for DeepSeek Harness (dsh): the /undo command rolls the transcript back to before the last message and /redo restores it.
We found that dsh-undo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.