dsh-notes

DSH PLUGIN记忆与知识

仓库 tyouter/dsh-notes · npm @tyouter/dsh-notes

记忆与知识 L4 · 沙盒安装通过 安全审查:低风险 可信度:银 可安装插件
安装这个插件

dsh-notes 是 DeepSeek Harness 里的极简写作笔记本插件,边写边排版,AI 建议、结构与翻译随叫随到。

一句话选型结论

按资料字段整理

dsh-notes 是记忆与知识类的 DSH 可安装插件,验证等级 L4 · 沙盒安装通过,安全审查为低风险,列出 4 项功能,有可直接复制的安装命令。验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么;涉及密钥或系统权限的,建议先在隔离环境试装。

分类记忆与知识 收录类型可安装插件 验证等级L4 · 沙盒安装通过 安全审查低风险
验证等级 L4 L4 · 沙盒安装通过
GitHub 星标 0 复刻 0 · 未关闭 issue 0
最近更新 2026-11-12 创建于 2026-11-04
README 17.3 KB 正文体量,越大说明说明书写得越细

安装

可安装插件
在 DSH 里执行,装完用 dsh plugin list 确认已挂上;标了 L4 / L5 的命令已在沙盒里真实跑通
dsh plugin --profile web add @tyouter/dsh-notes@1.1.3
  1. 1
    确认版本与运行环境

    仓库没有标注兼容版本与 Node.js 要求,先确认你的 DSH 版本能装,再继续。

  2. 2
    执行安装命令

    在 DSH 里执行上面的命令;多包仓库要注意区分具体子包名,别装错包。

  3. 3
    确认已挂载

    用 dsh plugin list 查看列表里是否出现这个插件,出现即挂载成功。

  4. 4
    试跑并检查权限

    加载后跑一个最小用例,确认它能正常工作;同时看它申请了哪些文件、命令或网络权限。

兼容 DSH 版本未标注版本不匹配时安装会报错
Node.js 要求未标注来自仓库 package.json 的 engines 字段
前置依赖无需要同时安装的同级依赖
npm 包名@tyouter/dsh-notes可用 npm view 查看包信息

能做什么

4 项功能
字段来自项目仓库与公开索引,中文说明由本站标注

dsh-notes:DeepSeek Harness 里随写随排版的极简笔记本

  • 边写边实时排版
  • AI 建议、结构与翻译
  • 分组历史与搜索标签
  • 笔记本统计面板

适用场景

记忆文件读写

上游标签

deepseek-harnessdsh-notesdsh-plugin

验证等级与安全审查

L4 · 沙盒安装通过
自动化流程结论,不是人工审核
验证等级L4 · 沙盒安装通过安装命令在隔离沙盒内真实执行成功,无依赖错误
安全审查低风险静态分析结论,未标注不代表已通过审查
仓库健康度活跃按仓库活跃度与最近更新时间给出
可信度银综合仓库活跃度与验证结果

上面的结论来自上游最近一次自动化验证(2026-11-12): 同一套检查会在插件发新版后重跑,页面显示的是最新一次的逐项结果。

逐项检查结果

L1 · 已找到 ✓ 通过
  • L1.0_DEFAULTED_FROM_L3 由 L3 推定 默认通过——L3 安装规范已通过(全库 L3 扫描策略)
L2 · 结构化 ✓ 通过
  • L2.0_DEFAULTED_FROM_L3 由 L3 推定 默认通过——L3 安装规范已通过(全库 L3 扫描策略)
L3 · 安装规范 ✓ 通过
  • L3.1_INSTALL_COMMAND_PARSED 安装命令已解析 方式:安装规范解析
  • L3.2_DSH_VERSION_DECLARED DSH 版本已声明 方式:DSH 版本声明
L4 · 安装已测 ✓ 通过
  • L4.1_INSTALL_EXECUTED_CONFINED 受限沙盒内执行安装 方式:沙盒安装执行
  • L4.2_INSTALL_SUCCESS 沙盒安装成功 方式:沙盒安装执行
  • L4.3_ARTIFACT_CONFIRMED 安装产物已确认 方式:沙盒安装执行
L5 · 运行已测 ✕ 未通过
  • L5.1_INSTALL_PASSED_SANDBOXED 沙盒安装通过 方式:沙盒安装执行
  • L5.2_WEB_BOOT_READY Web 启动就绪 boot failed
  • L5.3_HTTP_SERVED HTTP 服务响应

风险详情

  • 结论说明 静态扫描 低;动态审计无结论(以下以静态为准)→ 总评级 低。
  • 风险计数 严重 0 / 高 0

选择建议

装之前先看这几条
按条目字段给出的判断,不替你决定用不用

值得选的地方

  • 验证等级 L4:在沙盒里真实装过,依赖能装上,不是纸面声明。
  • 静态安全审查为低风险,没有发现明显可疑行为。
  • 有可直接复制的安装命令,不用自己翻文档找入口。
  • 列出了 4 项功能,能直接看出它解决什么问题。

先想清楚的地方

  • 没有声明 Node.js 版本要求,版本不匹配可能装不上。
  • 验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么。

更适合

  • 需要在记忆与知识场景里给 DSH 补能力的人。
  • 想装完就能用、不想自己排依赖的人。
  • 能接受在本地装依赖、愿意自己确认权限的人。

不太适合

  • 只使用 DSH 官方内置能力、不接受第三方插件的人。

同类对比

6 个同类
同分类里挑最接近的几条,字段以各自详情页为准
插件验证等级安全审查星标兼容版本安装命令
dsh-notes当前 L4 · 沙盒安装通过 低风险 0 未标注 有
ruflo L3 · 安装规范通过 低风险 7.4 万 未标注 无
OpenViking L3 · 安装规范通过 低风险 3.9 万 未标注 无
WeKnora L4 · 沙盒安装通过 低风险 3.3 万 未标注 有
distilly L4 · 沙盒安装通过 低风险 2.5 万 未标注 有
EverOS L4 · 沙盒安装通过 低风险 1.3 万 未标注 有

仓库档案

记忆与知识
字段来自项目仓库与公开索引,中文说明由本站标注
作者 / 维护方tyouter仓库 dsh-notes · 默认分支 main
分类记忆与知识knowledge
收录类型可安装插件声明了 dsh.bundle、可用 dsh plugin add 安装的条目
开发语言JavaScript仓库主语言
许可证MIT商用或二次分发前请确认条款原文
星标 / 复刻 / issue0 / 0 / 0收录时的数值,非实时
创建 / 更新2026-11-04 · 2026-11-12最后推送 2026-11-12
本站收录2026-11-05首次进入本站目录的时间

README 全文

17.3 KB
作者原文,中文版优先;只做安全转义,不改内容

dsh-notes

@tyouter/dsh-notes 1.1.3 — a quiet page for thinking, inside DeepSeek Harness. Typeset as you type,
AI completion and immersive writing, a searchable history, and an AI board that answers from your own
notes. See CHANGELOG.md for what this release contains.

Install

The package is on npm: @tyouter/dsh-notes — a DSH
bundle that carries the host half, the web panel and the agent presets it needs, so one install is
complete.

dsh plugin --profile  add @tyouter/dsh-notes

Then add @tyouter/dsh-notes to dsh.profile.bundles in the profile's package.json if your
installer does not do it for you, and restart. The plugin appears in the sidebar and the plugin
inventory as Notebook.

From a checkout instead:

git clone https://github.com/tyouter/dsh-notes.git
cd dsh-notes
npm run build          # writes client.js from src/
# then install the directory through Plugin Manager / install_bundle

Requirements: a DSH build with node:sqlite (Node 24 ships it). No other runtime dependency is
installed; everything under lib/ is first-party.

What it is for

Dedicated to: thinkers who love to think and enjoy the pure beauty of words.

A minimal writing plugin I built for myself, because:

  • when you open the tool, you have already forgotten what you meant to write
  • when you put up with the painful typing experience of an AI chat box
  • when a complicated notes app keeps interrupting you with its toolbars
  • when your train of thought stalls
  • when your notes become a forgotten corner

All we do is three things:

  • A sheet of paper — spaces and line breaks are the only formatting there is: two spaces make a bullet, four the next level, and your hands never leave the keyboard.
  • AI alongside — suggestions, structure and translation wait at the edge of the page and answer when you ask. Your notes are looked after by the AI, not by toolbars.
  • Writing as it should be — clean, direct, uninterrupted. The page is already set while you type.

Typed Markdown is rendered, not shown as source: headings, lists and task boxes,
quotes, rules, tables with aligned columns, and images. A picture is never
uploaded — paste it into the page (or Ctrl+V after a screenshot) and the bytes
land in /assets/, named by their content hash, with one line in the
note pointing at them.

Capture

History

Board

Immersive — the page alone, on the whole screen

What it stores, and what leaves the machine

  • Notes are plain JSON files under notes-vault/ in the workspace (configurable with notesPath),
    plus a disposable SQLite projection rebuilt from them. Deleting the database loses nothing.
  • Nothing is uploaded. Model calls go through the host's own llm service, so they use whatever
    provider and key the rest of DSH already uses.
  • The board's assistant is a real agent session with the notebook's query tools, notes_analyze,
    dashboard_chart and the notes tool — so asking it for a page creates one, in place. It cannot
    delete: that stays a human action, done from History where a deleted note is still recoverable.
Tab What it is
Capture One box, two pages. The right page is Format, running live on every keystroke; the toolbar's Structure button adds an AI rewrite beside it.
History The grouped history: two-line cards, a draggable list column, Markdown rendering, search and tags. Edit mounts the capture box — source on the left, the laid-out result on the right — so there is one editor, not two.
Board Statistics over the notebook and its usage, plus the host's native conversation running the notes-board agent preset.

The four actions

Action Input Lands in Changes language
Format the note, always right page, live (no request, no button) no
Structure the note; the selection when there is one an AI draft on the right page (Apply / Save / Translate) never
Translate the AI draft in place, or the note itself (selection, else whole) from the live preview a draft edit / a proposal with Apply yes
Apply draft or proposal back into the source, replacing only the range —

Format is deterministic (formatLocally), which is why it needs no button and no
model: separators, numbering, blank lines and stray stars are normalised, wording is
never touched, and the pass is idempotent. Saving a note writes the laid-out text, so
the right page is a promise rather than a hint. A selection in the editor highlights
the same lines in the preview; translate then works on that span.

Capture also works outside the panel: Alt+N or the small notebook icon in the
composer tool row opens a floating capture card, and /note 内容 saves a note
straight from the chat box.

Where notes live

notes.json is the source of truth: human-readable, diffable, and safe under
OneDrive. Everything else is derived.

/notes-vault/
notes.json      live notes (source of truth)
trash.json      deleted notes, kept as a safety net
links.json      which session belongs to the notebook
events.jsonl    append-only instrumentation: AI calls, UI actions, charts
dashboard.json  charts pinned to the dashboard
assets/         pictures a note points at, named by their content hash
index.db        SQLite projection of the above, for the query tools

notesPath in cordis.patch.yml changes the directory; a relative path anchors
on the default workspace from the registry, not on whichever session calls
first.

Deleting, and the trash

History lists two things: the notebook, and what was deleted out of it. The
switch sits at the top of the list, with a count on each side.

Deleting lives on the right mouse button. Right-click a note for open, delete,
select all and invert; right-click inside a selection and the action applies to
the whole selection. Ctrl/⌘-click adds one note to the selection, Shift-click
takes a range, and a selected row is marked on its left edge. Every deletion —
one note or forty — goes through a dialog that says how many notes are going and
names them, and nothing is deleted until that dialog is confirmed.

The note itself is not lost at that point: it moves to trash.json. The trash
view reads a deleted note back as a page, puts it back with one click (or many),
and deletes for good only through the same dialog. trash/purge and
trash/empty are the only routes that drop a body.

A note's title renders at 26px in the page. That is on purpose: the largest
heading inside a body is 19px, so a title cannot be mistaken for the page's own
first section.

Backup, and the versions you overwrote

The plugin's settings page owns two things beyond the writing partner: where a
second copy of the notebook goes, and whether earlier versions of a note are kept.

Destination What it is
Folder a directory this machine can see — a mapped NAS share, a Nextcloud/Dropbox/oneDrive folder, an external disk
WebDAV the same tree over HTTPS, which is what most NAS boxes expose (https://nas.local:5006/notes)

Either way the destination receives a restorable tree, and the notebook is never
read back from it — this is a backup, not a merge:

notes.json            the whole notebook, restorable by copying one file back
trash.json            the recycle bin
notes/.md         one plain Markdown file per note, readable in any editor
assets/         the pictures, byte for byte
history//.md  the kept versions, when history is on
sync.json             path → sha256, so the next run only writes what changed

A run is debounced behind each save, serialised, and never fails the save: an
unreachable NAS is a status line on the settings page, not a lost note. Mirror
deletions
is the one switch that removes anything on the far side, and it only
ever removes files this engine wrote itself.

History is local and independent of the backup: with Keep versions on, every
save first writes the body it is about to replace into /history//,
named by the UTC instant (20261111T101530-412.md). Version count is capped per
note, the newest are kept, and the clock button in the History tab opens the list
with a restore per row — a restore records the version it replaces, so it is
undoable too.

The WebDAV password is stored in plain text in settings.json, beside the notes,
and the password field says so. There is no keychain to borrow here.

Three AI surfaces, three different mechanisms

The distinction matters, and getting it wrong is what made an earlier version
send a truncated text dump into a prompt.

  1. Structuring (/notes/api/enhance/stream) — a single streamed model call.
    No session, no tools. start, delta…, done with {title, body, tags}.
    Reasoning effort is set to off; measured ≈0.5 s to first token.
  2. Completion (/notes/api/complete) — the next sentence, asked for only after typing
    stops for a second; the note's own repeated wording answers without a request.
  3. The dashboard chat — a real agent session on the notes-board preset,
    rendered with the host's own Conversation component. It has tools, so it
    queries instead of guessing:
Tool What it does
notes_query one guarded SELECT against index.db (read-only, single statement, ≤500 rows, ? params)
notes_analyze preset aggregates: by_tag, by_source, by_day, by_hour, lengths, terms, ai_usage, timeline
dashboard_chart add/replace a pinned chart on the dashboard
notes read and write the notes themselves

The panel only creates the session (POST /notes/api/session/create) and
renders it. Delivery, streaming, tool cards and approvals are the framework's:
the user types into the native composer, so no turn is ever pushed by hand.

The database

lib/db.js maintains a SQLite projection (index.db) with four tables:

Table Contents
notes one row per note, body is the full text
note_tags one row per (note, tag), so tags are a GROUP BY
events every AI call and UI action, with latency and outcome
messages the dashboard conversation transcript, keyed by (session_id, seq)

Two rules keep it honest:

  • It is disposable. Delete index.db and it rebuilds from the JSON on the
    next read. A cache must never hold data the files do not.
  • It opens lazily and closes with the plugin. Windows locks an open database
    file, so the disposer releases it before the directory could be moved.

node:sqlite ships with the app's own runtime (Node 24). If it is ever missing,
the query tools disable themselves and say so; the rest of the notebook works.

Instrumentation

Every AI call appends one line to events.jsonl — kind, characters, elapsed time,
time to first token, success. UI beacons (POST /notes/api/event) record what the
user did: tab switches, note opens, AI calls, chart removals. The dashboard
conversation is ingested into messages on each poll, keyed by sequence number so
re-reading is idempotent.

That is what the 「AI 使用」tile and the average-first-token figure come from, and
what lets the assistant answer "what did I ask you last week".

Files

File Role
index.js Host half: the notes service, tools, command, data plane.
lib/store.js The notebook files: notes, trash, links, search.
lib/db.js The SQLite projection and its guarded queries.
lib/text.js Term extraction (non-overlapping CJK bigrams, English words).
lib/analytics.js Pure statistics for the dashboard.
lib/events.js The event log and the pinned-chart store.
lib/llm.js Streamed model call, reasoning-effort selection, timing.
lib/chat.js The translate stream (whole note or numbered lines).
lib/prompt.js Prompts and parsers: structuring, translation.
lib/tools.js Tool adapters: query, analyze, chart, notes, enhance.
lib/api.js /notes/api routes, including the SSE streams.
src/head.js Browser prologue: i18n, api helpers, formatting, Markdown, styles.
src/board.js Dashboard: chart renderers, statistics view, and the editor behaviours (spaces, Backspace, completion).
src/panel.js Panel: tabs, capture, history, session shell, mount points.
build.mjs Concatenates the three sources into client.js.
tools/check-sources.mjs Parses the browser sources the way build.mjs wraps them.
tools/fix-encoding.mjs Repairs a CJK string written through a byte-mangling pipeline.
test/host.mjs Store, prompts, event log, chart store, tool adapters.
test/prompts.mjs Structuring and completion prompts, term extraction.
test/api.mjs The whole data plane in-process, including both SSE streams.
test/render.mjs Slot wiring, tabs, dashboard, history editor and completion wiring.
test/markdown.mjs Markdown rendering, snippets, tags, the drawer switch.

Working on it

This directory is its own git repository; the first commit is the baseline the
rest of the work is measured against.

node tools/check-sources.mjs     # syntax check for the factory-bodied sources
node build.mjs                   # src/*.js -> client.js
node --check client.js
node tools/fix-encoding.mjs      # repair double-encoded CJK (only after a bad write)

The suites, in the order they are usually run:

Suite What it covers
test/host.mjs store, analytics, API routing
test/prompts.mjs structuring prompt, Markdown parsing, title rules
test/api.mjs routes end to end with a fake model
test/render.mjs component trees (Capture, History, Board)
test/markdown.mjs rendering, snippets, tags, outline markers
test/document.mjs whole documents: coverage repair, index-aligned assembly, typography gate
test/typing.mjs the 极简写 keyboard flows, simulated slowly: spaces, nesting, Backspace
test/layout.mjs dock layout contract + a preview page for the composer pinning
test/corpus.mjs live run against the app: 17 inputs → structure → render → translate

client.js is generated from src/ by build.mjs. It is committed, because the host loads it
as the package's ./client export: a fresh clone therefore works without a build step, and
npm run build is only needed after editing src/. prepare/prepack rebuild it on install and
publish. exports/ holds generated previews and is ignored.

License

MIT — see LICENSE.

Built with

Built with DeepSeek Harness. The plugin was written in a
conversation with it — design, code, tests, the recorded clips and this README — and the same harness runs
its suites. Commits carry Co-Authored-By: DeepSeek Harness as the record.

Notes for maintainers

  • Edit src/, then node build.mjs. node --check src/panel.js fails by design
    (the files are factory bodies); use node tools/check-sources.mjs.
  • STYLES and the i18n dictionaries live in a template literal. A backtick in
    a CSS comment, or a ${ in prose, silently truncates the string.
  • Never rewrite these files through PowerShell text pipelines. Get-Content -Raw reads them as ANSI and Set-Content writes UTF-8, which double-encodes
    every CJK string. Use the file tools, or Node with explicit UTF-8.
  • No Config export: a profile-installed bundle resolves only its own
    dependencies, so no schema library is imported.
  • Optional services (commands, webServer, layout, llm,
    agentDefaultModel, sessionController, sessions) are read through
    ctx.get(...), never ctx.: cordis throws on an undeclared property read.
  • The panel declares a notes.board.conversation child slot; that declaration is
    what makes the framework inject SessionProvider + renderSlot.
  • The shell strips a slot children array before rendering the panel.
  • A key like notes is used by both the sidebar icon and the main panel; select
    the panel by slot name in tests, not by key.
  • Every visible style is a --dsw-alias-* token; literal colors appear only in
    icon.svg… with one deliberate exception: the contribution matrix uses GitHub's
    exact five-step green ramp (--dshn-heat-0..4, with GitHub's dark variant under
    prefers-color-scheme: dark). Opacity over an accent colour cannot reproduce
    that ramp, and matching it is the point — so it is pinned, in one place, and
    named here rather than hidden.

The contribution matrix

One column per week, one cell per day, a year of days. Intensity is quantised by
quartiles of the non-zero counts, as GitHub does, not by a ratio to the peak:
a notebook with one note a day therefore shows one light shade rather than
painting every day in the darkest green. The busiest day is always the darkest.
src/board.js (Heatmap) draws it; lib/analytics.js (calendarYear) supplies a
Sunday-aligned series so the renderer needs no date arithmetic.
- Host-side changes need an app restart; client-side changes need a refresh.

常见问题

7 问
答案由本站依据条目字段整理,不引用上游原文
dsh-notes 怎么安装?

在 DSH 里执行 `dsh plugin --profile web add @tyouter/dsh-notes@1.1.3` 即可。对应的 npm 包名是 `@tyouter/dsh-notes`。

dsh-notes 的验证等级是什么意思?

L4 · 沙盒安装通过。安装命令在隔离沙盒内真实执行成功,无依赖错误

dsh-notes 安全吗?

低风险。静态扫描 低;动态审计无结论(以下以静态为准)→ 总评级 低。

dsh-notes 装之前要先确认什么?

先看它会读写哪些文件、执行哪些命令、连接哪些网络地址;验证等级只说明装得上、跑得起来,不等于安全。涉及密钥或系统权限的,建议先在隔离环境试装。

dsh-notes 用的是什么许可证?

上游标注为 MIT。商用或二次分发前请到仓库确认许可证原文。

dsh-notes 有哪些功能?

边写边实时排版、AI 建议、结构与翻译、分组历史与搜索标签、笔记本统计面板。

这条记录的数据可靠吗?

本站按仓库名去重后合并整理,字段以作者仓库与 npm 元数据为准;安装命令、仓库地址与 README 保持原文,带 L4 / L5 标记的安装命令已在隔离沙盒里真实跑通。

同名或近似条目

8 条
不同作者的仓库分开列,请确认你要装的是哪一个
记忆与知识
按星标排序,可作替代方案

ruflo

ruflo

L3 · 安装规范通过 7.4 万 星

OpenViking

OpenViking

面向 DeepSeek Harness 的 OpenViking 记忆与上下文插件:pre-step 自动召回与画像注入、会话捕获、`vik

L3 · 安装规范通过 3.9 万 星

WeKnora

WeKnora

把 WeKnora 知识库接入 dsh 的四个只读工具:列出知识库、混合检索原文片段、按顺序还原单篇文档,以及直接取用 WeKnora 自己

L4 · 沙盒安装通过 3.3 万 星

distilly

distilly

Distilly — Distill how they think into reusable Skills for any Agent o

L4 · 沙盒安装通过 2.5 万 星

EverOS

EverOS

L4 · 沙盒安装通过 1.3 万 星

MemOS

MemOS

L4 · 沙盒安装通过 1.2 万 星

tyouter 的其它插件

2 个

插件的元信息来自作者仓库;分类、验证等级与安全结论的中文说明为中文整理,最近核验 2026-11-12。