dsh-learning-hub
A local-first learning hub for DeepSeek Harness (DSH).
It turns plain Markdown/JSON files in a _learner directory into:
- a course → concept branch tree;
- a prerequisite/relationship concept graph;
- mastery, evidence-backed progress, and 1/3/7/14-day review;
- a
learning_hub tool for DSH agents;
- a small three-column dashboard with a records form.
There is no database, no CDN, no telemetry and no cloud dependency. The data stays in your _learner folder and can be read, diffed, backed up and edited by hand.
Status: 0.1.1, early. The data schema and tool actions may evolve. See ROADMAP.
Changelog
0.1.1 — 2026-10-27
- Dashboard drilldown: click KPI cards, mastery buckets, the stacked bar, or hero stats to inspect the concepts behind the number in a native dialog.
- Photo to DSH: the record form can attach a photo, compress it in the browser, and send it to a selected DSH session over same-origin RPC.
- One-click DSH login:
GET /learning-hub/auth redirects through DSH's browser auth and sets an HttpOnly cookie; the panel then loads session/list and session/prompt without manual token handling.
- Mixed seed/real mode:
seed:true fixture rows stay strict; real record rows use seed:false + a session id + non-placeholder evidence.
- Session and review sync:
record creates/reuses a sessions.jsonl row and updates the matching reviews.json entry (due, mastery, interval_days, status, last_reviewed) on every concept update.
- Safer evidence gate: empty evidence or
seed: / 待补充 / 示例: placeholders are rejected before anything is written.
- Tests: 34 plugin tests + 523 panel selfcheck checks.
0.1.0 — 2026-10-26
- Initial open-source release:
learning_hub tool, branch/concept graph, dashboard, records, spaced review, local HTTP API, demo _learner.
- Tests: 23 plugin tests + 412 panel selfcheck checks.
Features
| |
|---|
| Branch tree | Active and planned courses, each with concepts and a next step |
| Concept graph | Prerequisite edges, related edges, mastery colours, click-to-inspect |
| Evidence first | mastery only changes with a record; no silent "I think you know it" upgrades |
| Records | study / practice / exam / review / misconception |
| Review | 1 / 3 / 7 / 14-day schedule; review returns due concepts |
| Routing | cwd, keywords, branch names and concept names → primary/secondary branch + confidence |
| Dashboard | collapsible sidebars, desktop/tablet/mobile layouts, light/dark, no build step |
| Drilldown | click KPI / distribution / stacked bar / hero stats to inspect the concepts behind a number |
| Photo to DSH | compress a photo in the browser and send it to a selected DSH session over same-origin RPC |
| Safe writes | loopback-only HTTP, same-origin writes, realpath containment, 64 KiB body limit, pre-write backups |
| Mixed data | seed fixtures and real record rows can coexist; real rows carry seed:false, session and evidence |
Requirements
- DSH
>=0.2.1-rc.3 <0.3.0-0
- Node.js
>=20 (DSH ships its own runtime; a standalone Node is useful for tests)
Install from a checkout
# 1. Link the package into a DSH profile
dsh plugin --profile desktop add D:\path\to\dsh-learning-hub
# 2. Point the plugin at your learner data and the bundled panel
# Edit <DSH_HOME>\profiles\desktop\cordis.patch.yml:
- id: learning-hub
name: dsh-learning-hub
config:
dataRoot: 'D:\path\to\learner'
panelDir: 'D:\path\to\dsh-learning-hub\public'
# port: 19480 # optional loopback-only extra port
Restart DSH, then:
- tool
learning_hub is available;
- panel:
http://127.0.0.1:<DSH_PORT>/learning-hub/;
- API:
/api/learning-hub/state, /record, /route.
Without any config, the plugin uses the bundled demo:
- data:
examples/demo-learner/
- panel:
public/
Quick start (demo)
node --test # 35 tests (34 plugin + panel selfcheck)
node test/panel-selfcheck.mjs # 523 panel checks
Open public/index.html via any static server, or install the plugin and open /learning-hub/.
Tool
One tool, several actions:
{"action":"status"}
{"action":"route","cwd":"D:/courses/c","text":"pointers and arrays"}
{"action":"record","branch":"cs.c","unit":"pointer","event":"practice","mastery":2,"evidence":"homework-4 Q3"}
{"action":"search","query":"pointer"}
{"action":"review","withinDays":7}
{"action":"link","from":"cs.c.array","to":"cs.c.pointer","relation":"prereq"}
event is study | practice | exam | review | misconception.
evidence is required and must be traceable (homework id, file, session id).
HTTP API
| Route | Method | |
|---|
/learning-hub | GET | 302 → /learning-hub/ |
/learning-hub/ | GET | dashboard |
/learning-hub/auth | GET | 302 → DSH /?token=…; sets a 30-day HttpOnly cookie |
/learning-hub/<asset> | GET | static assets |
/api/learning-hub/state | GET | canonical state |
/api/learning-hub/record | POST | append a record |
/api/learning-hub/route | POST | route text/cwd |
All non-loopback requests are rejected. Write requests must be same-origin JSON and are limited to 64 KiB.
Data model
_learner/ is the single source of truth:
profile.md
branches.json
concepts.json
progress.jsonl
errors.json
reviews.json
sessions.jsonl
materials/index.md
.backups/ # created by the plugin before writes
A concept has id, name, aliases, branches, prereq, related, mastery (0–5), evidence, misconceptions, sources, next_review, plus seed and mastery_basis in mixed mode.
Prerequisites are directed and acyclic; related links are symmetric.
Seed rows keep seed:true and placeholder evidence; a real record writes seed:false, appends a real evidence string, adds a session, and syncs the matching reviews.json row. See docs/DATA-SCHEMA.md.
Security and privacy
- Local data only; no outbound network calls, no telemetry, no credentials in
_learner.
- HTTP is loopback-only; writes require a same-origin
Origin/Referer and JSON.
- The panel uses DSH's browser auth via
GET /learning-hub/auth (30-day HttpOnly cookie); no token is returned in JSON or stored in _learner.
- Static paths are realpath-checked;
.., absolute paths, symlink escapes and NUL bytes are rejected.
- Every write is atomic and backed up under
_learner/.backups/.
Please read SECURITY.md before exposing the panel through a tunnel or reverse proxy. Authentication is for the local DSH browser only; this is not a multi-user or remote-access product.
Development
node --test # store/router/api/escape tests
node --check public/app.js
node test/panel-selfcheck.mjs
The panel is plain HTML/CSS/JS. There is no build step and no frontend dependency.
The plugin is a normal Cordis package (lib/index.js); edits to lib/ require a DSH restart, panel edits only need a browser refresh.
See CONTRIBUTING.md and docs/ARCHITECTURE.md.
License
MIT. See LICENSE.
