DeepSeek Harness Plugin Hub

发布与管理完整 Harness Profiles,发现适合你的插件。

探索

插件目录环境预设文档中心动态

社区

发布插件联系我们报告问题

相关链接

Plugin Hub GitHubDeepSeek Harness 官方项目系统状态隐私说明
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

独立、非官方社区项目,与 DeepSeek 官方无隶属、授权或背书关系。

Session Toolkit — DeepSeek Harness 插件(DSH Plugin)
← Plugins
S

dsh-session-toolkit

Session Toolkit

统一本地插件:会话身份、全局提示、自动恢复、Web 重启、会话日志重新定位、对等消息(整合 6 个插件)。

插件会安装到这里;不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add github:Han-Yao94/dsh-session-toolkit#fc40587c489e9eef11510af3af5e1208b8d68f0c
README兼容性版本

兼容性与来源证明

Session Toolkit 以 dsh-session-toolkit 发布,当前版本为 0.1.9。Plugin Hub 会校验它的 manifest,并保存精确安装来源,便于复现安装结果。

DSH 兼容范围
*
运行环境
web
发布来源
github
Registry 更新时间
2026/9/18

版本

0.1.9stable
2026/9/18
0.1.8stable
2026/9/15
0.1.7stable
2026/9/3
查看其余 5 个版本
收起版本
0.1.4stable
2026/8/30
0.1.3stable
2026/8/23
0.1.2stable
2026/8/23
0.1.1stable
2026/8/21
0.1.0stable
2026/8/20

相关插件

继续浏览 memory-context 分类下经过校验的插件。

Memory Plugin@openviking/dsh-memory-plugin适用于 DeepSeek Harness 的 OpenViking 记忆与上下文套件Contextdsh-context用于上下文洞察和管理的 DeepSeek Harness 插件,提供上下文仪表板和上下文命令,帮助了解上下文的构成及其演变过程。Weknora@wxg-prc-cpg/dsh-weknora适用于 DeepSeek Harness (dsh) 的 WeKnora 知识检索工具:通过自有知识库进行语义搜索、文档阅读以及 RAG/代理回答。Memsearch Dsh@zilliz/memsearch-dsh适用于 DeepSeek Harness 的 MemSearch 插件:在多个代理之间共享 Markdown 记忆,支持捕获、步骤前上下文注入、记忆召回技能和技能候选审核面板。
最新版
0.1.9
DSH
*
HMR
重启进程
Tree shaking
未声明可安全裁剪
解包体积
未提供
文件数
未提供
Surface
web
许可证
MIT
发布源
github
GitHub
★ 3
周下载
0
最近提交
2026/9/18
查看源码 ↗
README Badge

点击下方 Badge 复制 Markdown,粘贴到 README 即可。

这是你的 Plugin?认领权益 · 优先安全扫描

验证 package.json 声明的 GitHub 仓库,即可管理这个公开页面。认领后,Hub 会优先安排当前版本的安全扫描,并在通过后公开展示结果。

认领这个 Plugin →
报告问题
DeepSeek Harness Plugin Hub
ProfilesPlugins分类动态文档登录管理 Profiles
ProfilesPlugins分类动态文档登录

README

dsh-session-toolkit

English | 中文

A consolidated plugin toolkit for the DeepSeek Harness. Six previously separate local plugins — session identity, global prompt, session auto-resume, web restart service, Session-log button relocation, and peer-session messaging — merged into a single installable package that ships in the official bundle form (dsh.bundle.patch) and installs with dsh plugin add; it also includes a Prompt Dedup feature.

Current version: 0.1.9, verified against DeepSeek Harness dsh-v0.1.6-alpha.2 (older kernels keep working through the fallbacks noted below).


Features

Session Identity

Per-session persona prompt injected into that session's system prompt (independent section session-identity, order 40, resolved per agent at every assembly), with a default identity plus per-session overrides. UI provides an identity dialog (enable switch, 4000-char soft limit, save/reset, edit default, inherit default) and status buttons in both conversation.session.header.actions (id session-identity, order 40) and conversation.input.left (id session-identity-input, order 40).

Global Prompt

A settings page (settings.section, id global-prompt, order 30) rendered as Tabs (Global / Per workspace). The Global tab injects one prompt into every conversation's system prompt (section global-prompt, order 50); the Per workspace tab injects per-workspace prompts (section workspace-prompt, order 60). Both sections are registered with interpolate: false, so {{...}} inside prompt text and referenced files stays literal — user content is never rewritten, and an unregistered {{name}} can never fail assembly. On kernels older than 0.1.6 (no per-section interpolate flag) lib/prompt-literal.js falls back to escaping { runs in the assembled text.

Workspace Prompt

Per-workspace prompt injected for sessions whose cwd prefix-matches a configured workspace directory (that directory plus its subdirectories). The workspace list is derived from active sessions' cwd (ctx.agents.roots()), deduplicated and counted. When several enabled workspaces prefix-match a session's cwd, the most-specific (longest matching path) one wins. removed records paths the user removed so the active-workspace sync never re-adds them. The workspace row's enable switch is live-save (persisted immediately); the Save button only persists the prompt content + referenced files.

Referenced Files

Both global and workspace prompts can reference a list of files. Every assembly re-reads each referenced file (UTF-8, content cached by mtimeMs + size, so an unchanged file is not re-read) and injects it after the prompt text. Byte budgets are enforced (globalPrompt.maxFileBytes / maxTotalBytes, defaults 256 KiB / 1 MiB): an oversized file is skipped rather than blocking assembly. A read failure is skipped too, and both cases are reported in the UI with the reason. Supports plain text and markdown. Per-file read status is projected to the UI via the prompt-file-status namespace (ok: N chars / fail: reason / pending); the projection is only written when the status actually changed (a settings write persists the whole settings.yaml).

Session Auto-Resume

Sessions with the per-session switch on are resumed automatically after a GUI restart, through the official resume path (ctx.sessionController.resolveAgent) when it exists — that is what restores the session's own model selection (via installSelection) in addition to the preset mount, and it validates subagent ownership and de-duplicates concurrent resumes. Older kernels without sessionController fall back to ctx.agents.resume plus a preset mount, carrying the default model from agentDefaultModel. Switching a session on resumes it immediately (false→true edge). Filters: switch on, top-level only (no subagent origin, no delegationDepth > 0, no parentSession), non-blank (eventCount !== 0, snapshot shape). Concurrency-bounded (CONCURRENCY = 3) with per-item failure isolation and an in-flight set that prevents duplicate resume.

Web Restart

A "Restart service" entry in the General settings (settings.general.item, id web-restart, order 90) that restarts the GUI server and shows a full-screen progress overlay (probe-driven progress, fill-up animation before reload, 90 s timeout fallback with manual refresh). Two platform chains, both detached and independent of the dying server:

  • Windows (windows-script): wscript.exe runs the launcher VBS, which hides the console and runs <DSH_HOME>/autostart/dsh-web-restart.cmd; the spawn inherits the server process token, so the elevated branch (the only UAC source) is never reached.
  • macOS / Linux (posix-relaunch, or posix-script when webRestart.scriptPath is set): with no configuration the host restarts itself — it generates a one-shot /bin/sh script that SIGTERMs the current PID, waits up to 10 s (then SIGKILLs), cds back to the original CWD and re-executes process.execPath with the original process.argv.slice(1), appending output to <DSH_HOME>/autostart/dsh-web-restart.log. Point webRestart.scriptPath at your own .sh to take over instead (useful when the server was started by a supervisor).

The client probes GET /api/restart on mount and hides the entry when the host reports available: false (unsupported platform); POST returns 501 there. Routes: GET /api/restart (health probe, constant 200 + available/mode/platform) and POST /api/restart (trigger; 409 while a restart is in flight, 500 with the reason when the configured script is missing or self-relaunch is impossible, 202 + 500 ms buffer before spawn). The client only enters the overlay on 202 — any other status is shown inline as an error instead of a 90 s dead wait. Recovery is detected by interruption-then-restore: the overlay only reloads after it observes the probe fail for restartFailThreshold consecutive checks and then return 200 again; if the probe is reachable the whole time it reports "no restart detected" (noRestart) until the timeout, offering a manual refresh.

Session-Log Button Relocation

Shadows the official entry in conversation.session.header.utilities (same id session-log-download, priority −1, cell-shadowing) and registers a copy in conversation.session.header.actions (id session-log-download-moved, order 41), reusing the official sessionLogDownload controller (ctx.get('sessionLogDownload')) so download behavior stays identical to stock. The copy mirrors the 0.1.6 official surface — a "⋯ More actions" menu whose single item triggers the shared download dialog (localized through this plugin's own locale namespace) — and is a frozen replica: a stock upgrade that changes that UI must be synced by hand, and the shadowing registration must be re-checked whenever the official entry gains new menu items.

Peer Messaging

send_to_session / list_sessions tools on the host plane (session addressing by id or workspace path, wakeup delivery) plus a "copy session ID" button in both conversation.session.header.actions (id copy-session-id, order 30) and conversation.input.left (id copy-session-id-input, order 30). Outgoing message content is converted to plain text (toPlainText) before delivery so recipients see tidy text rather than raw markdown.

Prompt Dedup

Performs cross-section line-level deduplication across the identity / global / workspace system-prompt sections (session-identity, global-prompt, workspace-prompt, orders 40/50/60). promptDedup.enabled is on by default (disable only by setting it to false). Splits each section on \n and keeps only the first occurrence of each identical original line (a single seen set spans all three sections, so intra-section self-duplicates also collapse); duplicate lines in later sections are dropped. Blank lines (including whitespace-only lines) never take part in deduplication — they are markdown's paragraph/list separators, and treating them as duplicates silently collapsed every section after the first one. Every section's unique content is preserved. It does not parse {{name}} placeholders (single-line complete groups, never split by line), does not break markdown, never sets complete, and never touches harness-owned sections (harness:identity / deployment:persona / tool sections). Mechanism: subscribe to the system-prompt/assemble waterfall on the plugin's root ctx, await next(), then deduplicate sections on the returned result before returning it.


Compatibility

The plugin is verified against DeepSeek Harness dsh-v0.1.6-alpha.2. The host- and client-side integration points it uses are present in that native version; the two 0.1.6-only capabilities it consumes (interpolate: false, ctx.sessionController.resolveAgent) are each guarded by a fallback, so older kernels degrade instead of breaking.

  • Framework: @deepseek-ai/cordis 4.0.2 and @deepseek-ai/schemastery 3.18.2 (the versions dsh-v0.1.6-alpha.2 vendors). The plugin loads through the cordis harness and registers as a bundle via dsh.bundle.patch.
  • Host services (verified against the native source): ctx.settings.register(ns, schema, { applies: 'live', base }) → scope { get / watch(next, prev) / update / replace } where get() returns a deep-frozen value; ctx.systemPrompt.section({ name, order, text, interpolate: false }); ctx.agents.{ get, resume({ resumeSessionId, agentOptions, setup }), roots, requireInitiator }; ctx.sessionController.resolveAgent(sessionId); session.header fields (cwd, origin, delegationDepth, parentSession, agentPreset; there is no seedLength); ctx.inject(names, cb) for late-arriving optional services; ctx.get('webServer').register({ kind: 'exact', path, handler }); @deepseek-ai/dsh-tools defineTool + tools.register(); and ctx.get('agentDefaultModel'), sessionPersistence, sessionTitle, workspaceRegistry, sessionLogDownload, timer, on, effect.
  • Client services (verified): window.__ModuleLoader__.load({ id, factory }); ctx.get('slots') → slots.register(meta, render) / slots.inject(name, fn) with lower-priority shadows; ctx.get('settingsScope').bind({ namespace }) → { getSnapshot()/.value/.status, set(field, value), subscribe }; ctx.get('locale') → register(ns, { zh, en }) / bind(ns); and the timer client service (ctx.timeout). The bundle's runtime requires resolve against the platform seed words (react, react/jsx-runtime, @deepseek-ai/dsh-client-store, @deepseek-ai/dsh-client-ui-primitives, …).

Configuration validation

The plugin's host-side Config validates the entire configuration tree with schemastery as soon as the plugin loads. config.client is not delivered to the browser by cordis: the harness creates every client entry with loader.create({ name }) and its boot-graph rows carry only id/url/rev/inject/immediately/external, and the browser module table has no @deepseek-ai/schemastery, so a client bundle cannot export a Config either. The host therefore mirrors config.client into the session-toolkit-ui settings namespace as its composition base, and the client half reads that namespace through ctx.get('settingsScope').bind({ namespace: 'session-toolkit-ui' }). Resolution order is schema default → config.client (base) → user's settings.yaml; if the namespace is unavailable the client keeps its frozen fallback values.


Architecture

  • Host half — lib/index.js composes nine feature modules (identity.js, global-prompt.js, auto-resume.js, web-restart.js, peer-message.js, log-reposition.js, prompt-dedup.js, prompt-literal.js, ui-config.js). inject is the deduplicated union of module dependencies; each module's apply runs inside a safe() guard so one failing module never takes the whole package down. Every contribution is lifecycle-bound (ctx.effect for prompt sections and HTTP routes, plugin-fiber registrations for tools; timers go through the timer service). global-prompt.js owns the global-prompt, workspace-prompt, workspace-registry-active, and prompt-file-status namespaces, the readPromptFiles helper (mtime/size-cached live read), and the workspace/live-workflow projection (agents.roots() → active workspaces); prompt-literal.js is the pre-0.1.6 fallback for literal prompt rendering; ui-config.js registers the session-toolkit-ui namespace that carries config.client to the browser.
  • Client half — client/client.js is a single window.__ModuleLoader__.load bundle; the five UI modules live in IIFEs and are collected into one apply that registers all slots in order (guarded per module). All UI uses React.createElement; styles are injected as data-plugin style tags with theme CSS variables and dark-mode coverage; no global DOM manipulation. The global-prompt module renders the Tabs (Global / Per workspace) page plus a reusable FileRefsPanel (add/remove referenced files, per-file status via the bound prompt-file-status scope).

Registered slots

SlotIdOrder / priorityFeature
settings.sectionglobal-promptorder 30Global + workspace prompt page (Tabs)
settings.general.itemweb-restartorder 90Restart entry
conversation.session.header.actionscopy-session-idorder 30Copy session ID
conversation.session.header.actionssession-identityorder 40Identity button
conversation.session.header.actionssession-log-download-movedorder 41Session log download
conversation.input.leftcopy-session-id-inputorder 30Copy session ID (tool row)
conversation.input.leftsession-identity-inputorder 40Identity button (tool row)
conversation.session.header.utilitiessession-log-downloadpriority −1 (shadow)Hide stock button

Configuration

Settings namespaces

Schema-validated namespaces, applies: live, persisted in settings.yaml:

NamespaceSchemaNotes
session-identity{ default: {enabled: boolean, text: string}, sessions: Record<sessionId, {enabled, text}> }Resolution: session record → default → empty. Disabled or empty entries inject nothing. Identity text is clipped to 8000 chars (token guard).
session-auto-resume{ sessions: Record<sessionId, boolean> }Switch per session; absent keys mean off.
global-prompt{ enabled: boolean, content: string, files: string[] }Injected into every conversation when enabled. files is the list of referenced files appended at assembly (live read with mtime/size cache; failed or oversized files skipped).
workspace-prompt{ workspaces: Record<path,{enabled, content, files: string[]}>, removed: string[] }Per-workspace prompt. A session gets the most-specific (longest matching path) enabled workspace whose directory prefix-matches its cwd. removed lists paths the user removed so the active-workspace sync never re-adds them.
workspace-registry-active{ active: [{path, sessionCount}] }Read-only projection of live workspaces aggregated from ctx.agents.roots() (each agent's session.header.cwd, deduped and counted). Never sourced from workspaceRegistry (which is not visible in this plugin's scope).
prompt-file-status{ byScope: Record<global|path, [{filePath, status: 'ok'|'fail', charCount?, reason?}]> }Read-only projection of the most recent read result of each scoped referenced file; the UI's FileRefsPanel reads it to show ok: N chars / fail: reason. Written only when the status changed (each write persists the whole settings.yaml).
session-toolkit-ui{ identityCharLimit, restartTimeoutMs, restartPollMs, restartFillMs, restartFailThreshold, restartSettleMs, copyFeedbackMs }Host-registered, read-only-by-convention namespace carrying the UI knobs to the browser half; config.client is its composition base. This is the only host→browser configuration channel available to a client bundle.

Plugin Config (cordis)

The plugin exposes a single Config (schemastery schema) with per-feature keys. Defaults equal current behavior; override them via the plugin row's config in cordis.yml / cordis.patch.yml without touching code. config.client is validated on the host and becomes the base layer of the session-toolkit-ui namespace, which is how the browser half receives it (see Configuration validation).

- id: session-toolkit
  name: 'dsh-session-toolkit'
  config:
    identity:
      maxText: 8000
      sectionOrder: 40
    globalPrompt:
      sectionOrder: 50
      workspaceSectionOrder: 60
      maxFileBytes: 262144    # per referenced file; oversized files are skipped and reported as fail
      maxTotalBytes: 1048576  # across all referenced files of one section
    autoResume:
      concurrency: 3
    webRestart:
      scriptPath: ''          # optional; default derived as <DSH_HOME>/autostart/dsh-web-restart.cmd
      spawnDelayMs: 500
    promptDedup:
      enabled: true           # cross-section line-level dedup across identity/global/workspace; default true (disable only by setting false)
    client:
      identityCharLimit: 4000
      restartTimeoutMs: 90000
      restartPollMs: 1000
      restartFillMs: 600
      restartFailThreshold: 2
      restartSettleMs: 8000
      copyFeedbackMs: 1600
KeyDefaultMeaning
identity.maxText8000Identity text clip limit (chars, token guard). UI soft limit is client.identityCharLimit (4000, editor); host hard-clip is this value (8000).
identity.sectionOrder40System-prompt order of the identity section. Migration: users who explicitly pinned identity.sectionOrder: 55 must set it to 40 to keep the identity-before-global ordering.
globalPrompt.sectionOrder50System-prompt order of the global prompt section.
globalPrompt.workspaceSectionOrder60System-prompt order of the workspace prompt section (placed last).
globalPrompt.maxFileBytes262144Per referenced file byte limit; an oversized file is skipped (status fail) instead of blocking assembly.
globalPrompt.maxTotalBytes1048576Combined byte budget for all referenced files of one section.
autoResume.concurrency3Max in-flight resumes during startup restore.
webRestart.scriptPathderivedRestart script path. Empty (default) = derive <DSH_HOME>/autostart/dsh-web-restart.cmd on Windows / …/dsh-web-restart.sh on macOS+Linux, and on POSIX additionally enable self-relaunch (no script needed). Set a path to take over with your own script — on POSIX it runs via /bin/sh, and a missing file makes POST fail fast with 500 instead of hanging the overlay.
webRestart.spawnDelayMs500Delay before spawning the restart script (202 buffer).
promptDedup.enabledtrueCross-section line-level deduplication across the identity/global/workspace system-prompt sections (on by default; disable only by setting it to false). When on, each identical non-blank original line across the three sections keeps only its "first occurrence" (a single seen set spans all three); duplicate lines in later sections are dropped, while blank lines are always preserved (they are markdown's paragraph/list separators). Every section's unique content is preserved. It does not parse placeholders, does not break markdown, never sets , and never touches harness-owned sections.
KeyDefaultMeaning
client.identityCharLimit4000Identity editor character limit (UI soft limit; the global-prompt editor uses it too).
client.restartTimeoutMs90000Restart overlay timeout before the manual-refresh hint.
client.restartPollMs1000Restart health-poll interval (and progress tick).
client.restartFillMs600Progress fill animation after recovery detected.
client.restartFailThreshold2Consecutive failed health polls before an interruption is considered observed.
client.restartSettleMs8000Settle window (ms) after recovery before the auto-reload. DSH session titles are generated asynchronously by the LLM with no "ready" signal, so this is the wait window for the first post-restart reload to reduce the title fallback (showing the workspace name). If a session title still shows the workspace name, refresh manually or raise this value. A full fix requires DSH to expose a "titles ready" signal.
client.copyFeedbackMs1600Copy-feedback checkmark duration.

Deployment

Install into any profile (bundle layer; single source, no copies):

# from npm
dsh plugin --profile web add dsh-session-toolkit

# from GitHub
dsh plugin --profile web add github:Han-Yao94/dsh-session-toolkit

# from a local checkout / tarball
dsh plugin --profile web add ./dsh-session-toolkit-<version>.tgz

The package's dsh.bundle.patch (cordis.patch.yml) registers the single entry (id: session-toolkit, name: 'dsh-session-toolkit') as a bundle layer — applied after dsh-base / dsh-web-app and before the profile patch layer (layer order: bundles in sequence → profile patch → home patch → --patch overlay).

Uninstall: dsh plugin --profile web remove dsh-session-toolkit.

Local development

To iterate on the source without publishing, install the checkout directly (dsh plugin --profile web add <path-to-checkout>, which uses a pnpm link: dependency), or use a manual junction into the profile's node_modules plus an explicit - insert: entry in the profile's cordis.patch.yml. Prefer dsh plugin add.

Verification gate for the source checkout only (scripts/ is not shipped in the published package; no build step and no dependency install needed):

pnpm check    # syntax gate — node --check over every shipped JS file
pnpm verify   # + packaging contract — entry reachability, undeclared imports, EN/ZH README version parity

pnpm verify asserts that the working-tree content equals the tarball content, so it fails on purpose if a prepare/prepack/prepublishOnly script is ever added. The DSH integration-point inventory used when upgrading the harness lives in docs/agents/integration-contracts.md.

Share & Install

Published on npm as dsh-session-toolkit (v0.1.8, MIT) and mirrored on GitHub at github.com/Han-Yao94/dsh-session-toolkit. Pure-JS package — no build step, no prepare script. files whitelists lib/, client/, cordis.patch.yml and the READMEs.

  • npm: consumers run dsh plugin --profile web add dsh-session-toolkit; new versions are released with npm publish (or pnpm publish).
  • GitHub: dsh plugin --profile web add github:Han-Yao94/dsh-session-toolkit.
  • Tarball: pnpm pack → dsh plugin --profile web add ./dsh-session-toolkit-<version>.tgz.

Runtime dependencies (@deepseek-ai/schemastery, @deepseek-ai/dsh-tools, @deepseek-ai/dsh-home-paths) are declared in dependencies and install automatically; platform modules (react, @deepseek-ai/cordis, @deepseek-ai/dsh-client-locale, @deepseek-ai/dsh-client-store, @deepseek-ai/dsh-client-ui-primitives) are peerDependencies provided by the DSH host. Harness-provided ranges are written as a prerelease union — ^0.1.2-alpha.5 || ^0.1.6-alpha.2 — because caret ranges never cross a minor line and ^0.1.2-alpha.1 cannot match 0.1.6-alpha.2 (this is exactly what produced the §F resolution skew: the plugin ended up with its own older copy while the host ran a newer one). @deepseek-ai/dsh-client-ui-slots is intentionally absent: the slots service is seeded by the web shell, so a npm peer declaration was dead weight. Verified: a clean install of the packed tarball resolves all imports without any local junction. Two install-side tools back this up (they need an external checkout/profile, so they are not CI jobs — see docs/agents/integration-contracts.md §D/§E/§F):

node scripts/dependency-skew.measure.mjs --profile <DSH_HOME>/profiles/web   # §F: 期望 SKEW_COUNT=0
node scripts/dsh-log-ui.drift.mjs --harness <deepseek-harness 路径>          # §E: 复刻件漂移

Model Experience

System prompt contributions

What the model sees

Three sections are contributed per assembly, in order: session-identity (order 40) → global-prompt (order 50) → workspace-prompt (order 60), placed after the deployment persona and before tool guidance (100–199). The identity section is resolved per agent (AssembleContext.agent) at assembly time from session-identity settings and is skipped for subagents (origin/delegationDepth). The workspace section injects the most-specific (longest matching path) enabled workspace prompt for a session whose cwd prefix-matches a configured workspace; otherwise nothing.

Each of the global and workspace sections appends its referenced files' content after the prompt text: every assembly re-reads files with fs.readFileSync (UTF-8, live), sanitizes each file's content (spaces out { runs), and concatenates them. A file that cannot be read is skipped (its content is not injected) but its read status is recorded for the UI. Empty sections are dropped at render.

Token effect

All three sections repeat their text on every request when enabled. The global prompt applies to every conversation; the identity text applies only to sessions that resolve it (their own record or the default); the workspace text applies only to sessions whose cwd prefix-matches an enabled configured workspace (most-specific match wins). Referenced files add their full content to the effective prompt and therefore consume additional tokens — a large referenced file meaningfully increases the per-request token cost. Identity text is clipped to 8000 chars as a token guard.

KV Cache effect

Each section's rendered text is a fixed part of the request prefix while its settings are unchanged. Editing a session identity or a global/workspace prompt (or editing / adding a referenced file) may invalidate provider cache reuse from the first changed token (same semantics as stock persona sections).

Tool surface

send_to_session and list_sessions are registered on the host plane and visible to every session (subagents inherit them through the standing preset composition). Their arguments and results are JSON-compatible.


Mechanisms and Red Lines

  • Identity injection uses a single global section whose text provider resolves per agent — no per-agent registration, no lifecycle churn, real-time on settings change.
  • Frozen-settings rule (red line) — DSH's ctx.settings.register(...).scope.get() returns a value frozen by deepFreeze (immutable). Any host write to a scope must first { ... } copy the object (and .slice() arrays) into a mutable object, then use update() (the register scope has get/watch/update/replace, no set); writing to the frozen object directly throws object is not extensible (this was the root cause of the "workspace list empty" bug fixed here). On the client side, settingsScope.bind().set(field, value) is used (the client scope supports set). The same { ... } copy rule applies on the client for workspace-prompt writes (onWsFilesChange / save / saveWsEnabled / removeWorkspace).
  • Referenced files are read live and failures are skipped — readPromptFiles runs inside the prompt text() on every assembly; a failing file never breaks assembly and its status is recorded in prompt-file-status for the UI.
  • Auto-resume never calls dispose() — AgentHandle.dispose() removes the session from storage; turning a switch off only affects the next restart, it never takes a live session down.
  • Restart is UAC-free by construction — the spawn inherits the server process token (SYSTEM or user), so taskkill targets a same-privilege process and the script's elevated branch (the only UAC source) is unreachable. If port 3080 is held by another program, an elevated retry may still appear (documented in the restart script).
  • Shadowing is cell-based — the utilities entry re-registers the stock session-log-download cell at a lower priority; the stock entry abdicates gracefully if the shadow crashes.
  • Plain-text conversion — toPlainText (10 rules, code-fence state machine, loose matching) runs at send time only; the message structure and source: { kind: 'user' } are unchanged.

Known Limitations and Deferred Work

  • Client half is a hand-maintained single-file IIFE bundle; adding a feature touches both lib/ and client/client.js.
  • The relocated Session-log entry depends on the official sessionLogDownload controller interface and mirrors the 0.1.6 official surface (a "⋯ More actions" menu). It is a frozen replica: run node scripts/dsh-log-ui.drift.mjs --harness <checkout> after a DSH upgrade — it audits both sides for the same anchors and exits non-zero on drift (§E).
  • Loose emphasis matching in toPlainText can drop * pairs in non-format positions (e.g. a * b * c); acceptable for agent-generated messages, boundary tightening is optional.
  • The aggregate inject union waits for every listed service; a profile missing one service delays the whole package (web profile provides all of them today).
  • Harness-provided dependency ranges are prerelease unions; pnpm install must be re-run after changing them, and the resulting install should be checked with node scripts/dependency-skew.measure.mjs --profile <DSH_HOME>/profiles/web (expect SKEW_COUNT=0; DE-INSTANCE = same version, different instance, which §F treats as acceptable).
  • ctx.get('agentDefaultModel'), sessionTitle and workspaceRegistry are resolved lazily at call time and degrade to cwd/path addressing; tools and webServer are awaited through ctx.inject so a late-arriving service cannot silently disable a feature (the loader creates entries concurrently, so apply-time ctx.get had no ordering guarantee).
  • Restart probe window — a restart is only detected when the health probe fails for restartFailThreshold × restartPollMs (default 2 × 1000 ms = 2 s) and then recovers. If a relaunch completes in under that window, the overlay can misreport "no restart detected" (noRestart); lowering restartFailThreshold to 1 makes detection more sensitive but also lets a single transient failure masquerade as a restart interruption.
  • Referenced files are warmed on the assembly path — readPromptFiles runs a statSync per referenced file on every assembly and reads only when mtimeMs/size changed; the per-file and total byte budgets prevent a huge file from blocking assembly or inflating the prompt, and the status projection is written only on change. On the client, files are saved immediately (onWsFilesChange / ).

Recovery

Uninstall the bundle: dsh plugin --profile web remove dsh-session-toolkit, then restart the GUI. To roll back to the pre-consolidation layout, re-enable the original plugins instead of installing this package.

{{name}}
complete
The client.* keys below are validated by the host and become the base layer of the session-toolkit-ui namespace — the channel the browser half actually reads. Users can also override them per user in settings.yaml under that namespace.
save
  • UI knobs are read from session-toolkit-ui — because the harness gives client entries no config channel and no schemastery, the browser half cannot validate or receive config.client directly; the host mirrors it into the settings namespace (see Configuration validation) and the client falls back to frozen defaults when the namespace is unavailable.