dsh-cipher
A DeepSeek Harness plugin package that brings cipher's core design — persistent thinking, the three platforms (execution / insight / memory), four local memory types (attention, experience, preference, cognitive), and the UNNI/LOOP session modes — to DSH as a native bundle (no Rust process, no cipher binary required).
After installing and configuring a model in DSH, UNNI and LOOP become selectable in DSH's native agent-preset picker (next to Standard / PTC / Minimal). Conversations composed from one of these presets get the full cipher pipeline: every turn is sedimented into four memory types, recalled cross-session, and LOOP sessions self-continue after each sediment round.
Features
- UNNI / LOOP as native agent presets: on activation the plugin materializes two presets (copies of your deployment's
standard preset + the cipher rows) into the user preset root — they show up in the native picker immediately, no restart
- Four-type memory (attention / experience / preference / cognitive) sedimented after every turn via 4 memory agents (one LLM call each, parallel, error-isolated)
- Cross-session recall with deterministic retrieval (per-type quota + 14-day time decay + term/keyword matching) injected into the system prompt (
systemPrompt.context, re-recorded only when the snapshot changes)
- Insight review (recorded, three-question self-check per turn) whose output feeds memory only — never shown raw to the user
- Per-session mode override: a
Cipher·UNNI / Cipher·LOOP toggle in the session header (cipher-preset sessions only); LOOP auto-continuation uses interval + run-count guards via Agent.followup, independent of DSH goal APIs
- Two model tools:
cipher_memory_search, cipher_memory_ingest
- Settings page (SOUL editor, quotas, LOOP guards, fallback defaults) and a sidebar AgentPool panel showing live subagent status
- Editable SOUL injected as a static session-start section (provider caching friendly)
Install
dsh plugin --profile <name> add dsh-cipher
What you get after install:
- UNNI · 交互协同 / LOOP · 记忆驱动 in the native agent-preset picker (conversation composer seat and Settings → General). The two presets are materialized into the user preset root (
~/.dsh/.agent-presets/) by copying your deployment's standard preset and appending the cipher rows. Re-synced automatically on plugin upgrade; removed on uninstall. A user-authored preset with the same id is never touched.
- A Cipher settings section (Settings → Cipher): SOUL editor, LOOP interval/run limits, per-type quotas, sediment/insight toggles
- A right-side collapsible Cipher 池 (AgentPool) panel (subagent mode/activity/label, 5s refresh): expanded it docks as a full-height right panel, collapsed it folds into a slim right-edge rail that doubles as the entry point — styled after the native session/workspace panels
- A Cipher·UNNI / Cipher·LOOP toggle in the session header — shown only in cipher-preset sessions
- Two tools:
cipher_memory_search, cipher_memory_ingest (only in cipher-preset sessions)
Quick start
- Configure the model in Settings → Models (the plugin reuses DSH's default model route).
- Start a conversation and pick UNNI or LOOP in the preset picker, then type a message. After the turn, memories are sedimented automatically.
- Ask "what do you remember about me?" in a following turn — recalled memories are injected.
- In a LOOP session, the agent continues by itself after each sediment round (guards: interval + run cap), or switch a session with the header toggle.
Requirements
- Node.js >= 22.19
- DSH with the agent-presets roster and a writable user preset root (both defaults): the presets are authored via
agentPresets.copy('standard', ...) — the deployment's standard preset (or the default preset) is the composition source. Without it the plugin still runs (settings/pool), but the UNNI/LOOP presets cannot be materialized and no cipher rows activate.
- Model configured in DSH; memory agents and insight review make one LLM call per agent per turn (in UNNI/LOOP sessions — cost is by design, see mode semantics)
storageDomain is optional: when the composition mounts storage, memory persists to the deployment storages directory (cipher_memory domain). Without it, the plugin degrades to in-process memory (warned once, not durable across restarts).
How it works
The bundle rows split into two planes (v0.1.2, "Design A" — cipher capabilities exist only inside the UNNI/LOOP presets):
| Plane | Row | Responsibility |
|---|
| host (bundle patch) | dsh-cipher/core | Private service ctx.cipher: four-type memory store, deterministic retrieval, quotas, session mode, settings namespaces |
| host | dsh-cipher | Dual-face panel row: host REST routes (config/settings/mode/subagents) + client settings page / pool panel / header toggle |
| host | dsh-cipher/presets | Materializes the UNNI/LOOP presets (copy standard → append cipher rows → metadata; idempotent, version-marked, self-healing) |
| preset (UNNI/LOOP) | dsh-cipher/memory | Sediment: session/event turn/end → evidence → 4 memory agents → store (deduplicated, per-session watermark) |
| preset | dsh-cipher/insight | Evidence review (three-question self-check) → output sedimented as [INSIGHT] experience |
| preset | dsh-cipher/prompt | Injection: SOUL+mode section (order 60, static snapshot) + four-type memory context (re-recorded only on snapshot change) |
| preset | dsh-cipher/mode | Mode pinning (presetMode row config, written as the session default at creation) + LOOP followup scheduling after sediment |
| preset | dsh-cipher/tools | cipher_memory_search / cipher_memory_ingest |
Preset rows are mounted once per preset (standing mount) and joined per session by scope, exactly like other DSH preset rows. Sessions composed from Standard/PTC/Minimal have no cipher rows at all.
Storage note: the memory domain is optional at runtime — storage faults (for example headless one-shot teardown windows) degrade to in-memory storage for the process instead of failing the turn.
Mode semantics (v0.1.2)
- UNNI (interactive): user and agent cooperate; execution/insight outcomes become sedimented evidence, and replies always come from the agent itself (platform outputs never surface raw — information isolation).
- LOOP (memory-driven): after each turn's sediment completes, the session re-arms itself with the freshest attention/experience memory as direction (guards: minimum interval, per-session run cap). Converged or stopped by the user, it wraps up quietly.
- The preset pins the session's default mode (row config
presetMode); the header toggle overrides it for that session (stored in the modes table), and the settings default is the last fallback.
Data & privacy
- Memories live in the deployment storages directory (
cipher_memory domain; per process when no storage is mounted).
- All memory is local. Sediment/insight/loop calls go through DSH's default model route.
Model experience (KV cache effect)
Per DSH package convention:
- SOUL + mode section (order 60): stable repeated prefix — text unchanged within a session, provider prompt cache remains reusable; editing SOUL in settings replaces existing request tokens on the next assembly.
- Memory
context (cipher-memory): append-only growth — re-recorded only when the full snapshot changes (new sediment or compaction removal); zero re-record otherwise.
- The memory injection block is evaluated per assembly but yields stable text when nothing changed.
cipher_memory_search/ingest are independent requests; they do not affect session request caching.
Development
pnpm install
pnpm build # tsc (host lib/) + tsdown (client/client.js, __ModuleLoader__ format)
pnpm test # vitest (retrieval, evidence boundaries, preset materialization)
pnpm preflight # publish artifact checks
- Service packages (
@deepseek-ai/dsh-*) are declared as peers and resolved against the DSH install; only zod is a direct dependency.
Security
Installing a plugin runs third-party code with your own permissions — review the source before installing. This package runs no post-install scripts beyond building its own artifacts (prepare).
License
MIT
