dsh-redact

v0.1.0 · 3 天前发布

Fail-closed canonical tool-output tokenization for DeepSeek Harness

deepseek-harnessdsh-pluginredactionsecretsllm-security

README

dsh-redact

Fail-closed canonical tool-output tokenization for DeepSeek Harness.

dsh-redact replaces common credentials with opaque, Agent-scoped tokens before the final tool result reaches model context or durable Session history. It replaces the successful canonical value through tools/post-execute, so Harness validates the replacement against the tool's declared output schema and renders model content from the accepted value again.

text password=FAKE_PASSWORD

→ password=⟦dsh:redact:550e8400-e29b-41d4-a716-446655440000⟧

The token mapping exists only in process memory. Agent disposal clears it, and a restart makes old tokens intentionally unrestorable.

Install

From a Harness environment:

```sh
dsh plugin --profile w

查看完整 README →

版本兼容矩阵

DSH 版本	状态	说明
`dsh@0.1.0-rc.6`	✅ 兼容	cordis patch ✅
`dsh@0.1.0`	✅ 兼容	标准 patch ✅
`dsh@0.2.0`	⚠️ 待验证	待实测（API 可能在变）
`dsh@0.3.0+`	❓ 未知	尚未发布

💡 兼容矩阵每周末自动跑实测，欢迎 PR 修正

元数据

License: MIT
npm: dsh-redact
Repo: git+https://github.com/kestiny18/dsh-plugins.git
Engines: {"node":">=22.18.0","pnpm":">=11 <12"}
Weekly DL: 0
Monthly DL: 0
dsh.bundle: {"bundle":{"patch":"./cordis.patch.yml"}}