@dsh-plugin/echo-notes
Echo Notes 回声笔记 — 以情绪为先的加密日记、模板和写作提醒，适用于 DeepSeek Harness。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Smallballoons01/echo-notes#30086471daa3b575099f4940e70dd4364795e64eEcho Notes 以 @dsh-plugin/echo-notes 发布，当前版本为 0.3.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
An emotion-first diary for DeepSeek Harness, with the agent as a writing partner: emotion/persona templates, chronological and mood browsing, optional passphrase encryption, and scheduled writing prompts.
The native panel and echo_note Agent tool run in DeepSeek Harness. The same
portable JSON Schema tool contract is documented below for adapters in other
Agent hosts; host-side capabilities such as reminders and storage require the
Harness runtime or an adapter.
| Emotion templates | i 人 / e 人, plus one per mood (开心、伤心、焦虑、疲惫…) and a blank free-write. Author your own and shadow a built-in without editing code. |
| Browsing | By time window, by mood, by tag, by template, and full-text search. Aggregates by mood/day/tag plus a writing streak. |
| Encryption | AES-256-GCM, key derived from your passphrase with scrypt, per-note random IV, note id bound in as AAD. Off until you create a vault. |
| Reminders | Daily, weekly, interval, or one-shot. When one fires the agent is woken with a prompt and writes the entry. |
| Agent access | One echo_note tool (9 actions) plus an echo-notes skill carrying the writing guidance. |
| Auto-lock | Optionally drops the key from memory after an idle period. |
| Surface | Compatibility | Requirements |
|---|---|---|
| DeepSeek Harness native Agent tool | Native echo_note tool with standard JSON Schema arguments/output | Plugin enabled in Harness |
| MCP-capable Agent clients | echo_note via included stdio MCP adapter | Harness running locally; set ECHO_NOTES_API_URL |
| Claude Desktop / Cursor / Continue | MCP stdio transport, subject to each client’s config support | Node.js 20+, client-specific MCP setup |
| Direct REST callers | Local JSON API under /echo-notes/api | Loopback Host; POSTs must be same-origin or omit Origin |
| Agents without MCP or custom tools | Not directly supported | Use an MCP bridge or the client’s tool-adapter feature |
This is interoperability through shared schemas and adapters, not a claim that one plugin binary runs unmodified inside every Agent product. The Harness owns the vault, encryption key, reminders, and persistence; external MCP clients forward to that running service and cannot unlock it with a tool call.
From a local DSH session, install this directory as a bundle using the Plugin Manager and the absolute path to this checkout. The bundle registers one Host row and a Client panel; after activation, open 回声笔记 from the sidebar and create a vault.
Install the tagged GitHub release through the DSH Plugin Manager. The repository,
homepage, and bugs fields in package.json already point at this project.
See RELEASING.md for the release checklist.
Other MCP-capable agents can use the portable MCP adapter in mcp/ against the
same Echo Notes data service when configured. The UI, local storage domain,
reminder scheduler, and passphrase lifecycle are Harness-owned; another host
must provide an adapter/storage service and must not share the raw data directory
while the Harness process is running. See Agent compatibility.
status
first, picks the matching template, writes in your voice, and confirms in one
line.daily: { kind: daily, at: "21:30" }
weekly: { kind: weekly, at: "09:00", weekdays: [1, 5] } # 1 = Monday
interval: { kind: interval, everyMinutes: 45 }
once: { kind: once, at: "2026-10-09T09:00:00+08:00" }
A reminder that comes due while the machine is asleep is skipped, not replayed — opening the app after a holiday will not produce a wall of nudges. The grace window is 10 minutes.
Edit this bundle's row in cordis.patch.yml (or the plugin's settings page):
| Key | Default | Meaning |
|---|---|---|
autoLockMinutes | 0 | Drop the key after this much idle time. 0 disables auto-lock. |
defaultReminder | "21:30" | Time used by a reminder created without one. |
encryptByDefault | true | Encrypt bodies as soon as a vault exists. |
tickSeconds | 30 | How often the reminder/auto-lock loop runs. |
index.js Host half: vault, tools, skill, reminder loop, HTTP API
client.js Client half: the panel (plain JS, React from the module table)
src/crypto.js scrypt + AES-256-GCM, no dependencies
src/store.js note index, filtering, revisions, encryption migration
src/templates.js the emotion templates and their rendering
src/reminders.js pure schedule maths (next fire, catch-up policy)
skills/echo-notes/SKILL.md agent-facing workflow
test/ unit, integration, MCP protocol and render tests
Three decisions worth knowing about:
One action dispatcher, multiple adapters. The Harness tool and HTTP routes
call the same runToolAction/operations logic. The MCP adapter forwards the
same echo_note JSON Schema/action request to /tool; it does not implement a
second data store or business-logic copy. Integration tests exercise each
adapter surface.
The Client calls the Host over HTTP, not a Remote namespace. This bundle is
plain JavaScript with no code-generation step. ctx.webServer.register gives
the panel a same-origin transport; loopback Host and Origin checks limit browser
requests. MCP stdio is intended for local clients connecting to a running Harness.
Do not expose the HTTP endpoint publicly or proxy it without adding real
authentication and TLS.
Metadata is plaintext; note bodies and revisions are encrypted. The stored index still includes title, mood, tags, timestamps, word count and pin state so filtering works without decrypting every note. The 40-character preview is cleared after encryption is enabled. These metadata fields can still reveal private information; treat the storage directory accordingly.
pnpm install
pnpm check
pnpm test
The Node built-in test suite covers encryption and tamper detection, storage and migration, reminders, HTTP and native-tool operations, standard JSON Schema portability, MCP stdio JSON-RPC, and Client view rendering. The profile install uses DSH-owned package peers; local development uses the exact peer versions listed in the lockfile. See CONTRIBUTING.md for guidance.
The Harness versions this plugin develops against are published to npm but
not under the latest tag — npm's latest for @deepseek-ai/dsh-tools is
still the placeholder 0.0.1-rc.1. They are reached through the alpha tag,
and the lockfile pins 0.2.1-alpha.4 together with its companion versions
@deepseek-ai/cordis 4.0.5-alpha.2 and @deepseek-ai/schemastery
3.18.5-alpha.2. The lockfile is committed and CI installs with
--frozen-lockfile, so a dependency change must move the lockfile with it.
tickSeconds of the deadline, not exactly on it.scripts/browser-smoke.mjs (pnpm test:browser,
needs a running dsh web and Playwright) drives the real Web UI: the
sidebar entry opens the panel, the first-run passphrase card renders, and
the --dsw-alias-* tokens resolve to different palettes under light and
dark schemes. Verified against DeepSeek Harness 0.2.1-alpha.4.The echo_notes domain stores three tables (notes, revisions, settings)
with deliberately permissive schemas. The record shape grows while the diary is
in use — a strict schema would turn every added field into a migration — so the
invariants that matter are enforced by NoteStore and covered by tests instead.