opencues

1. 安装并启动 DeepSeek Harness：npx @deepseek-ai/dsh web
2. 在终端执行上面的安装命令（CLI 会解析插件并核验来源）
3. 用 dsh plugins list 确认已安装，必要时重启 Harness 生效

插件以当前 dsh 进程的权限运行，安装时可能执行代码。请先通读仓库源码与许可证，确认无破坏性命令与越权访问；本站只做索引，不对第三方插件安全性作担保。

事实信息来自公开插件目录快照（2026-10-01），介绍文案由本站再加工。

以下为插件仓库 README 全文（原始内容，由公开目录抓取整理）。

[图片: OpenCues]

  [图片: OpenCues]

#

[图片: Associations:]
[图片: Mod of r/ClaudeAI]
[图片: OpenSourceIRL]
[图片: Anthropic Ambassador]
[图片: Cerebras Ambassador]

**Turn any text field into a two-way LLM channel.** It reads what you write and fills what you ask: catching a slip as you type, or answering the moment you end a line with `_`. A drop-in for Claude Code, OpenCode, Gemini CLI, your shell, and Chrome. Model-agnostic, output you review before it sends, an open standard with no chat window.

The model comes to your cursor, both ways. **Cues** react to what you've already written and surface a fix or a sharper line inline, unprompted. **Blanks** act on demand: end a line with `_` and the model fills in the rest. No chat window, no copy-paste, no context switch.

[图片: Video placeholder — hero demo]

OpenCues is platform, model, and provider agnostic, engineered from the ground up to enable native inline AI.

| You type | You get |
|---|---|
| let's ship it Thursday the 19th | ↳ the 19th is a Friday |
| we should probably go ahead and refactor this | ↳ we should refactor this |
| hey can u send me that report when u get a sec make this formal _ | Could you please send me that report at your earliest convenience? |
| 4 + 4 = _ | 4 + 4 = 8 |
| hello world translate to japanese _ | こんにちは世界 |
| draft an email to my landlord asking for a rent reduction _ | (the email, written) |
| ffmpeg command to convert a video to web-ready mp4 _ | ffmpeg -i input.mov -c:v libx264 -preset slow -crf 23 -c:a aac -b:a 128k -movflags +faststart output.mp4 |

Rows with `_` are **blanks**: you ask, the model fills in. Rows without are **cues**: the model speaks up on what you wrote, no prompt.

#

[图片: Apache-2.0 License]
[图片: Open Standard]
[图片: Blanks.md]
[图片: Cues.md]

# Quickstart

```bash
npm install -g opencues              # needs Node 22+ and git
opencues set-key cerebras csk-...    # cerebras.ai — free tier, lowest latency
opencues install claude-code         # or: opencode | gemini-cli | chrome | shell | dsh
claude-cues                          # launch — native `claude` is untouched
```

Full walkthrough, prerequisites, and per-host detail: [`docs/install.md`](docs/install.md). `opencues doctor` diagnoses anything that looks wrong.

[图片: Video placeholder — quickstart walkthrough]

#

[图片: OpenCues CLI]
[图片: Features]

# Integrations

| Host | Status | Install |
|---|---|---|
| Claude Code | Available | `opencues install claude-code` |
| OpenCode | Available | `opencues install opencode` |
| Gemini CLI | Beta | `opencues install gemini-cli` |
| Chrome | Beta | `opencues install chrome` |
| Shell | Beta | `opencues install shell` |
| DeepSeek Harness | Beta | `dsh plugin --profile web add @opencues/dsh` |

Each pins its own upstream fork and never touches your native host install.
DeepSeek Harness is the exception: it has a real plugin system, so there is no
fork to pin and no OpenCues CLI step — see
[`integrations/dsh/README.md`](integrations/dsh/README.md).

> ⚠️ **Windows**: not supported natively, run inside WSL2 (see [`docs/install.md`](docs/install.md)).

#

[图片: Supports:]
[图片: OpenCode]
[图片: Claude Code]
[图片: Gemini CLI]
[图片: Chrome]
[图片: Shell]

# What you get

| Feature | What it does |
|---|---|
| **Blanks** | Type `_` for free-form generation, translation, formatting, full rewrites, or keyword-bound system actions (`volume _`, `weather _`). |
| **Sentence rewrites** | Cycle a whole sentence to a different register (formal, concise, ...) seamlessly, no `_` needed. |
| **Word cues** | Navigate to a single word and cycle a smaller LLM-suggested alternative. |
| **Live actuators** | `volume _` reads the real level and leaves a knob you can turn: `Ctrl+Alt+↑/↓` or a bare `_` moves it, and the device follows. |
| **Dismissing a cue** | A cue that only tells you something can be silenced from its own note: `_` once quiets it for a while, `_` again forgets it for good. `opencues dismissals` lists what you forgot and turns any of it back on. |
| **Session-contradiction cues** (opt-in) | Flags a draft that goes against a decision made earlier in the same coding session, on any host with a transcript. |
| **Ask-cues** (opt-in) | Turns a vague sentence into an inline question with cyclable answers, using the assistant's own clarifying prompt. |
| **Personal + ambient context** (opt-in) | `my email _` substitutes your real address; fluid lookups can read the page you're on. |
| **Hot-reload** | Every `.md` config picks up edits in ~2s, no restart. |

Full feature catalogue (44 concepts): [`docs/features/README.md`](docs/features/README.md).
Running a lot of these at once? `opencues usage` prices every LLM call your
hosts have made, across features, so the total isn't a guess.

[图片: Video placeholder — feature tour]

# Configuration & LLM providers

  [图片: OpenCues]

Config lives at `~/.cues/` — one `OPENCUES.md` for runtime settings, plus per-surface source folders. Seven providers supported; set an env key or `opencues set-key` and you're done.

Full reference: [`docs/configuration.md`](docs/configuration.md) · [`docs/guides/llm-providers.md`](docs/guides/llm-providers.md) (switching provider/model, free mode, failover).

#

[图片: Providers:]
[图片: Cerebras Systems]
[图片: Groq]
[图片: Gemini]
[图片: Anthropic]
[图片: OpenAI]

# Security

OpenCues has no tool handlers or exec layer for LLM output — no MCP-tool execution, no agentic actions, no side-effect channel. Worst-case, an LLM response lands as user-visible text in the buffer you review before submitting. That single invariant is what keeps prompt injection a UX failure instead of a data-exfiltration channel, across every surface below.

23 of 27 tracked attack classes closed, 3 closed-with-caveat, 1 tracked for the future pack registry ([full audit table](docs/architecture/security-audit.md)).

| Defense | What it covers |
|---|---|
| Sandbox isolation | Third-party blank JS runs in a real V8 isolate (`isolated-vm`) — its own realm, own intrinsics, no sandbox-escape via constructor-chain pivots |
| Capability gates | A blank only gets `network`/`llm`/`storage`/`secrets` access if declared; secrets without a matching host binding are refused at load time |
| Resource quotas | Sliding-window caps on fetches, LLM calls, and storage writes — no polling hammer, no runaway LLM burn |
| Output sanitization | Blank output is stripped of HTML/script tags, zero-width chars, and bidi overrides before it reaches the buffer |

Check a pack before trusting it:

```bash
opencues review ./untrusted-pack/
```

Full threat model: [`docs/architecture/security-audit.md`](docs/architecture/security-audit.md). Reporting a vulnerability: [`SECURITY.md`](SECURITY.md).

# Contributing

  [图片: OpenCues]

| What | Where |
|---|---|
| New host integration | [`docs/guides/adding-an-integration.md`](docs/guides/adding-an-integration.md) |
| New cue/blank | [`docs/guides/adding-a-cue-blank.md`](docs/guides/adding-a-cue-blank.md) |
| Working on the reference runtime | [`CONTRIBUTING.md`](CONTRIBUTING.md) |
| New to the terms | [`docs/glossary.md`](docs/glossary.md) |

Join the community — questions, feedback, and the people building alongside you. We're also part of [OpenSourceIRL](https://luma.com/OpenSourceIRL), a community for people building in the open.

#

[图片: Community:]
[图片: Contributors]
[图片: X / Twitter]
[图片: Reddit]
[图片: Instagram]

# License

[Apache License 2.0](LICENSE).

#

[图片: Design]
[图片: Author]