Awoodwhale/dsh-agent-persona

dsh-agent-persona is a native plugin built specifically for DSH (DeepSeek Harness); it does not target Claude Code, Codex, Cursor, or any other agent runtime, and exists solely to extend one DSH profile. The package is distributed on npm and installed with dsh plugin --profile web add dsh-agent-persona, which writes the plugin entry into the profile's bundles; a dsh web restart is then required because profiles read their bundle list only at startup. After restart the host side is loaded (verified by cat ~/.dsh/dsh-agent-persona/state.json), and three surfaces become available: a dedicated settings page, a per-session view in the conversation panel, and an optional card in the right sidebar that requires dsh-better-sidebar to be installed alongside it.

The typical workflow begins on the settings page, where the user creates a persona, adds one or more scope lines (each line is either a workspace directory or a specific session ID, picked from DSH's own lists), writes the persona body, and flips the enable switch — newly created personas stay disabled so they cannot affect existing conversations by accident. Matching supports four operators (exact, prefix, substring, regex), with session rules outranking workspace rules and exact matches beating prefix or regex; if nothing matches and a "default persona" is flagged, that one is used, otherwise the DSH-native system prompt is left untouched. Bodies support {{model}} and {{cwd}} placeholders, can be appended after or replace DSH's own identity line, and an empty body at a given scope is the explicit way to say "no persona here." The plugin also exposes read-only previews of the actual outgoing system prompt, an "AI tune" action powered by DSH's currently configured model (overridable via tuneProvider/tuneModel), and JSON import/export with live word- and rule-count previews.

Dependencies are narrow: DSH 0.1.5-rc.1 or 0.1.5-rc.2 is the only version range the author has tested, and dsh-better-sidebar is an optional companion only needed for the right-sidebar card; everything else ships inside the npm bundle. Personas live at ~/.dsh/dsh-agent-persona/personas.json with mode 600 and atomic writes (defaulting to a single global copy across profiles, overridable per profile through cordis.patch.yml's storePath), while state.json records load heartbeats. License is Apache-2.0, the build chain is TypeScript plus esbuild (npm run build must run after any src/** change, and lib/index.js host changes require a dsh web restart because ESM caches by URL). The tamper guard is behavioural, not a security boundary: it blocks file writes and shell commands that reference the persona file, but a danger-full-access host can still bypass it, so the README recommends OS-level hardening such as chflags uchg or running DSH inside a restricted sandbox.