DeepSeek Harness 插件

polohot/dsh-adrian-inject-context

Star 数 ★ 1 分类 身份与通信 收录于 2026-09-10

把你保存的上下文条目以「Remember」行的形式注入到每条用户消息之后,可按轮或按会话一次;带设置编辑器与管理页。

安装

# GitHub 源码(首次需按提示配置 allowBuilds 构建授权后重试)

dsh plugin --profile web add github:polohot/dsh-adrian-inject-context

装任何插件都等于在你的机器上跑第三方代码,权限和你本人一样大——能读你的文件、用你的凭据、访问网络,工具审批管不到它。GitHub 来源的插件还会在安装时执行构建脚本——pnpm 默认拦截,所以安装可能停在 ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED 或 ERR_PNPM_IGNORED_BUILDS;dsh 会打印出需要添加的确切键名,把它加进该 profile 的 pnpm-workspace.yaml 的 allowBuilds 下,重跑一次即可装上。放行构建本身就是一次信任判断:请只安装可信来源,并尽量锁定 commit(github:owner/repo#sha)。

README

该插件的 README 只有英文版本。

Inject Context for DeepSeek Harness (DSH): persist your own context entries and have them injected as a standalone Remember: row — right after your message — on every turn or once per session, per entry.

Features

  • Standalone sourced row — never touches the initial system prompt or the shared runtime-context snapshot
  • Simple / Advanced datasets — two independent context lists; the active mode's dataset is what gets injected (exclusive)
  • Per-entry checkboxes — toggle any entry on/off, applies from the next request
  • Per-entry frequency (v0.3.0) — each entry has an Every turn switch: ticked (default) the entry is injected right after every message; unticked it is injected only at the start of a session and never again — restart-safe, detected from the session's persisted sourced-message surface plus in-memory per-session tracking
  • Native Settings UI — Settings → Inject Context: add, edit, delete, toggle, save
  • Persistent — datasets and active mode survive sessions and restarts
  • Standalone manager page — also available at /adrian-inject-context

Screenshots

Settings → Inject Context — manage your datasets

Inject Context settings

Remember: row in the Trajectory

Remember row in Trajectory

Install

dsh plugin --profile web add polohot/dsh-adrian-inject-context

Usage

  1. Open Settings → Inject Context
  2. Add context entries; per row, two switches:
    • Enabled — off = never injected
    • Every turn (ticked by default) — ticked = injected right after every message; unticked = only the first message of a session
  3. Pick the active tab (Simple/Advanced) — its dataset feeds the injection
  4. Send any message and check the Trajectory: your message sits above the Remember: block (order: SYSTEM → your message → Remember:)

Per-entry frequency (v0.3.0)

Enabled Every turn Behavior
off — never injected
on ticked injected right after every message of every session (the default, and the migration default for existing entries)
on unticked injected only at the start of a session (its first turn), never again in that session

Once-per-session entries are restart-safe: a process restart never re-injects a once-entry into a session that already carries it. Prior injection is detected from the session's persisted sourced-message surface (the adrian-inject-context:lessons rows) plus in-memory per-session tracking while the process lives. Unticking an entry mid-session lets it appear on the next message exactly once more, then never again — per dataset, so Simple and Advanced stay fully independent.

Configuration

Store: ~/.dsh/adrian-inject-context.json (schema v2, auto-migrated from v1):

{
  "version": 2,
  "mode": "simple",
  "simple":   { "lessons": [{ "id": 1, "text": "…", "enabled": true, "everyTurn": true }] },
  "advanced": { "lessons": [] }
}

everyTurn was added in v0.3.0 without a schema bump — entries missing the field default to true (the previous every-turn behavior).

Requirements

  • DeepSeek Harness dsh ≥ 0.2.0-rc.2 (tested on the web profile)
  • Not compatible with dsh 0.1.x — see Session format v4 below

How it works

Host-side: an agent/pre-step waterfall listener composes the block per step — all enabled every-turn entries plus enabled once-entries not yet delivered to that session — and splices the plugin's own independently-sourced user-role message right after the turn's user message (the same pattern as dsh-agent-instructions), freshly read from the store on every step. It never injects into an empty entering batch (the agent loop's turn-close signal). Client-side: a settings-section module renders the manager against two host routes. Zero system-prompt modification.

Session format v4 (v0.4.0)

DSH 0.2.0 ships Session format v4, which retired the catch-all { kind: 'plugin', plugin: '…' } message source. That kind is now refused at admission: emitting it raises SessionFormatError and aborts the whole turn with format v4 message requires a producer-owned source kind.

This plugin emits the v4 producer-owned form of its own identity:

source: { kind: 'plugin:adrian-inject-context:lessons' }

That is the same kind the shipped v3→v4 migration derives for a third-party plugin, so live rows and rows migrated from older sessions share one identity and the once-per-session surface scan recognises both.

The row's position is decided by a positive test — a user-role row counts as the turn's message only when source.kind === 'user'. Every other producer (the runtime-context snapshot, agent instructions, tool and model rows) declares its own kind and is skipped. v0.3.2 blocklisted the kinds it knew about, so the runtime-context snapshot was mistaken for the user message and the row landed after the snapshot instead of after the message it answers.

License

MIT

内容来自项目 README(GitHub)↗

链接

同类插件

查看整个分类 →

社区评论

评论公开保存在 GitHub Discussions。加载评论会连接 GitHub 和 Giscus;发表内容需要 GitHub 账号。