dsh-turn-fork
DeepSeek Harness 对话的按轮原子化消息编辑、重试、重新生成和版本树导航
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-turn-fork@0.1.4Turn Fork 以 dsh-turn-fork 发布，当前版本为 0.1.4。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Turn-atomic message editing, retry, reroll, and version-tree navigation for DeepSeek Harness conversations.
truncate or preserve downstream turns).dsh-message-edit fails (see below).dsh-client-locale service.dsh plugin add dsh-turn-fork
Then restart dsh. The plugin registers a Turn Fork tab (between Trajectory and Prompt Studio), compact undo/redo/regenerate buttons in the session header, and retry/regenerate buttons on each finalized assistant message.
dsh-message-edit (v0.2.3) has a P0 defect: its durable provenance event
message-edit/version is written without the ignorable marker. The live
write path accepts it, but after a dsh restart the persistence layer's
cold-read vocabulary guard (assertEventsSupported) rejects the whole log
with SessionFormatUnsupportedError — every branch session becomes
unreadable. See tests/p0-persistence.test.mjs for a reproduction (live
write OK → restart → cold read REJECTED) and this plugin's regression test
(ignorable marker → restart → cold read PASSES), run against the real
dsh-session + dsh-session-persistence-jsonl packages in a fresh child
process.
dsh-turn-fork also fixes the design gaps the review found in the community
plugin:
| Gap | This plugin |
|---|---|
Custom events must be ignorable: true | turn-fork/version is always ignorable; schema-versioned for future migration |
| HTTP route without trust fence (CSRF / DNS rebinding, quota burning) | Origin/Host loopback fence + content-type check + 64 KiB body cap |
| Message targeting by DOM text guessing | Official slots only (conversation.view, conversation.session.header.actions, conversation.chat.assistant-actions) |
reasoningEffort / config lost on fork | provider/model/maxTokens derive from the last request/header; reasoningEffort and adapterDefaults ride the inherited header inside the seed |
| Steering messages dropped on replay | Every user input of a turn is preserved and replayed in order |
Assistant edits forge source: {kind:'model'} and drop tool calls | Not supported (honest limitation, see below) |
| Undo navigation leaves branches running silently | Running branches are reported; each has an explicit Stop control |
preserve replays N turns with no confirmation | Cost hint and explicit cascade choice before saving |
| No tests, no i18n | node:test suite + P0 regression + dsh-testkit lifecycle gate; zh/en dictionaries |
from "…" to "…"), marks the current version, and offers Undo/Redo
navigation plus Open for any branch. Branches with a running agent show a
warning and a Stop control.truncate drops everything after the edited turn;
preserve replays the edited turn and every later turn (each replayed input
becomes its own turn, with inputs of the same original turn kept in order).
The editor shows how many turns preserve will replay before you confirm.session.fork(atSeq) RPC cuts including
the anchored turn, which cannot express "edit turn N and re-run it". This
plugin therefore uses the same underlying transaction seam the official
fork uses internally — ctx.agents.create — with the seed cut before the
target turn, alpha.4 lineage fields (parentSession, isSeeded, the
separate inheritedEventCount, cwd, and agentPreset), the source's
preset re-mounted, and durability flushed before the branch is announced.dsh-checkpoint-rewind) when you need workspace state rewind.dsh-message-edit. Logs written by the broken event
format are refused by the persistence layer itself, so no reader — this
plugin included — can repair them in place. The Timeline detects the
refusal and reports it explicitly. To recover old transcripts, use the
official export flow before upgrading, or wait for the upstream fix.The host route /turn-fork is served by the dsh web server, which performs no
origin checks of its own. Every request must pass the plugin's fence: a
browser Origin must be http(s)://localhost|127.0.0.1|[::1] with the
server's exact port (relaxed only when the server listens on 0.0.0.0, the
operator's explicit remote-exposure opt-in); requests without an Origin
must carry a loopback Host. POST bodies must be application/json and at
most 64 KiB.
npm install
npm run build # tsc typecheck + tsdown host/client bundles
npm test # build + node:test (core, lineage, P0 persistence regression)
Version 0.1.4 is developed and release-tested against DSH 0.1.5-rc.1 and
Cordis 4.0.2. The browser side uses the Session Controller and client store,
waits for the renderer, Conversation, and Chat slot owners, and contains no
dependency on the removed dsh-client-runtime package. The npm development
graph pins the full DSH peer closure to 0.1.5-rc.1 because the packages'
prerelease-compatible ranges would otherwise allow npm to mix in a newer
alpha.
0.1.5-rc.1 tightened the seeded-session contract in two ways this build now
honours. The session constructor admits only the exact inherited prefix, so the
plugin's provenance event is appended to the constructed session instead of
riding along in the constructor seed; and a stored seeded log must carry the
library's session/end-seed marker at the inherited cut before the cold-read
guard will interpret it. The persistence regression in tests/ covers both, and
inspect/readFrom are replaced by the open/read/close handle seam.
This build does not claim dual compatibility with 0.1.1-rc.2. The two hosts
have incompatible creation fields (seedLength versus isSeeded plus
inheritedEventCount) and incompatible browser service/module tables. A
shared source tree could carry explicit rc.2 and 0.1.5-rc.1 adapters, but one
manifest and one emitted client bundle cannot truthfully target both.
tests/p0-persistence.test.mjs — the P0 regression: the plugin's real fork
seed is written through a real dsh-session store and
dsh-session-persistence-jsonl backend, flushed to disk, then cold-read in
a fresh child process ("restart"). A negative control proves the guard
rejects the same log with the marker stripped.tests/core.test.mjs — steering fidelity, plan boundaries, seed
construction, model-config derivation, alpha.4 client event revisions,
trust-fence matrix, body cap, operation decoding.tests/lineage.test.mjs — version projection, undo/redo stacks, running
flags.tests/alpha4-lifecycle.test.mjs and
tests/alpha4-package-contract.test.mjs — optional Web lifecycle injection,
a POST fork through the alpha.4 creation API, client-loader boundaries, and
exact alpha.4 manifest/lock closure.dsh-testkit.yaml — real-host lifecycle gate (install → boot → register →
uninstall → reboot → residue) via the community
dsh-testkit, plus the generated
.github/workflows/dsh-lifecycle.yml CI workflow, both pinned to alpha.4.The published dsh-testkit package currently declares prerelease peer ranges
that do not semver-admit 0.1.2-alpha.4, so it is deliberately absent from
this candidate's npm development lock. The checked-in quick-suite contract and
CI action target alpha.4; local package checks use the direct lifecycle, real
JSONL persistence, and exact package-lock tests above without resolving a
mixed prerelease graph.
MIT. The client bundle preset under scripts/dsh-client-preset.ts is vendored
from the DeepSeek Harness repository (MIT, © DeepSeek).