Community fork of kingcharleslzy-ai/dsh-purge (do not install both - both register the same `dsh-purge` row as the `dsh-purge-community` package): the community '破甲' (unrestricted-mode) control for DeepSeek Harness - host-policy patches, prompt and rule settings, diagnostics, verified updates, and local backup and rollback, plus a three-layer bootstrap installer (engine, code and prompt layers) with its own verification pass.
Install
# from a prebuilt release tarball
dsh plugin --profile web add "https://github.com/0xyxy/dsh-purge/releases/latest/download/dsh-purge-community.tgz"
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:0xyxy/dsh-purge
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).
README
dsh-purge Community
Helping your AI assistant stay focused on your learning and hands-on work.
A self-hosted add-on for DeepSeek Harness (known in the community as a 破甲 / "jailbreak" plugin) · 84 host patches · 25 status layers
Current version 1.6.67 · targets DSH Desktop 0.2.1-rc.5 (rc.1 / rc.2 / rc.3 also pass)
What it is
dsh-purge Community runs entirely on your own machine and gathers the parts of daily use that cost the most attention:
- See the state — whether the install, patches and prompt injection are actually ready;
- Fewer round trips — repeated confirmations and interruptions collapse into one setting;
- Always reversible — apply, roll back and toggles are recorded, snapshotted first;
- Easy to experiment — prompts, rules and presets in one place, all undoable.
The goal is simple: let the assistant support your learning and hands-on experiments coherently, instead of stopping to ask before every step.
People usually call this a 破甲 ("armor-breaking") or unrestrained-mode plugin: it lowers interaction friction so the agent can keep working. It does not change the model itself, and it does not change what you are trying to do.
Principles
| Principle | Meaning |
|---|---|
| Local first | Everything runs locally; no cloud account changes, no uploads of prompts or config |
| Observable | Every action reports status and evidence, never "it should be applied" |
| Reversible | Snapshots with manifests before apply, install and rollback |
| Never decides for you | It only removes friction; you choose what to change and enable |
Scope
Local learning, personal projects, automation experiments and maintenance work. Use it on machines you own or are authorized to work on; get permission before touching anyone else's systems.
Install
DSH provides the official plugin UI and dsh plugin CLI. Our install.sh / install.ps1 are community-maintained wrappers, not DeepSeek scripts.
- First installation: use DSH's Plugins install dialog. Following the current official guide, open Plugins → More beside Experimental plugins → Custom plugin market, then Discover → Add index source. Our community index:
https://0xyxy.github.io/dsh-purge/index.json. Check the owner0xyxy/dsh-purgeand packagedsh-purge-communitybefore confirming. - Existing
dsh-purgeor separate panel installation: use the community installer to back up and migrate in place. Do not uninstall first or activate both packages. - CLI/Web users who already have
dshon PATH and use thewebprofile can use the official command below. Desktop users should not download another npx host to install into their existing desktop profile.
dsh plugin --profile web add "https://github.com/0xyxy/dsh-purge/releases/download/v1.6.67/dsh-purge-community-1.6.67.tgz"
Use the actual instance's profile and DSH_HOME. This project distributes via GitHub; do not substitute bare npm package names. The official command does not run our extra Release SHA256 check, migration snapshot or rollback wrapper.
Copyable macOS, Windows and Linux installer commands start with downloading the script; no source checkout is assumed. macOS defaults to /Applications/DeepSeek Harness.app; Windows requires a uniquely identified exe (otherwise pass -DshExe). Open DSH once first to initialize its profile. Paths, custom home/profile and recovery commands are explained in the installation guide.
Dry-run verifies prerequisites, download and SHA256, not dependency installation or application startup. Scripts/bootstrap come from this repository's master branch; the archive checksum is not an independent signature for those scripts. A real installation snapshots and invokes the selected official CLI. For unpacked desktops it may repair app/runtime; on read-only Linux hosts it may prepare a user-owned host copy and switch a user launcher after success. It never applies host patches or restarts DSH automatically, and does not change the proxy or global npm registry.
Record the exit code, installed version and backup ID. The running app can keep the old version until the user manually reopens it. purge-community is a profile-local command, not necessarily on global PATH; see CLI recovery. Official references: bundle installation and plugin markets.
Panel
A full page in the left sidebar: one line of state at the top, "Apply" as the primary action, everything else collapsed, help behind ?. The maintenance page shows recent actions, backup usage and update preferences. Unused entries can be hidden for display only.
Commands
selfcheck, status, host-status, diagnose, reanchor, probe, audit, boost, preset, retry, usage / prune, backup / rollback. See purge-community --help.
Updates
Version 1.6.67 improves read-only Windows proxy discovery, bounded transient-network retries and credential-file ACLs. Authentication, TLS and integrity failures remain visible. See release notes and validation boundaries.
Two separate preferences (check / install), default check-only every six hours. Installing never restarts the app — you decide when to reopen it.
Compatibility
Plugin dsh-purge-community 1.6.67 · verified on DSH Desktop 0.2.1-rc.1 / rc.2 / rc.3 / rc.5 · Node ≥ 18.
Troubleshooting
purge-community selfcheck --json
purge-community diagnose
purge-community audit --limit 20
If the panel does not open, confirm both sides run the same version, then follow MAINTENANCE.md; do not overwrite Resources/app directly.
Development
npm test, npm run check:docs, npm run check:client, npm run test:electron, npm run smoke.
Agent-facing instructions live in AGENTS.md; when the two disagree, AGENTS.md wins.
Keywords: 破甲 · unrestricted mode · prompt injection · jailbreak · DSH plugin · status self-check · backup and rollback
1.6.39
Fixes opaque standalone installer download failures with stage-specific diagnostics, bounded retries and system curl fallback. Official HTTPS source, certificate and SHA256 verification remain mandatory. Failed downloads do not modify the existing installation. No proxy changes or automatic restart. See release notes and maintenance details.
Contributors
Thank you to the original author, code contributors, and everyone who provided reproductions, analysis, and verification. Each avatar links to a GitHub profile. See contribution records for individual credit and NOTICE.md for third-party attribution.
The list combines GitHub commit authors with curated acknowledgements, refreshes daily, and retains historical contributors. Order is not a ranking; reporting an issue does not imply authorship of code.
Download troubleshooting (#52)
The standalone installer now reports the failing stage, official host, transport, attempt and error code. Transient failures get one fetch retry followed by system curl, with bounded time and attempts. Both paths retain HTTPS source, TLS, size and SHA256 checks. Re-download the installer and run dry-run first; share only redacted diagnostic lines if it still fails. No proxy configuration or automatic restart is performed. See maintenance details.
Per-preset prompt exclusions (1.6.40)
Merge excludePresets: [roleplay, minimal] into the existing dsh-purge entry's config in the current profile. The default [] preserves existing behavior. Match effective preset IDs exactly, ignoring case and surrounding whitespace. All prompt sections, assembly rewrites and the host fallback use the same per-session decision; subagents use their own effective preset. Configured exclusions with an unknown context suppress injection rather than leaking it. Commands, UI and tools remain registered.
This does not revert global host patches, deployment configuration or past chat messages. Installation does not apply patches or restart DSH; old host fallback calls need a user-scheduled apply and manual restart to pass session context. See configuration, migration and test boundaries.
Links
More in this category
kingcharleslzy-ai/dsh-purge★ 4048
Community-maintained dsh-purge fork with host-policy patches, prompt and rule settings, diagnostics, separate update-check and install controls, and local backup/rollback.
techflag/workdsh#enterprise-connection★ 291
Enterprise login, colleague mentions, shared text and files, and authenticated business requests for WorkDSH Desktop 2.0.6-alpha.3+ with WorkDSH Admin; distributed as a release archive.
aureth-labs/dsh-aurabot-qq★ 281
Puts the agent on QQ as a persona character through SnowLuma (OneBot v11): private and group chat, voice notes, stickers, Qzone diary, Bilibili browsing, song covers, image generation, long-term memory and mood. Every feature is a module you can switch off, replace or extend locally — hot-reloaded modules can also rewrite group-reply decisions, prompts, outgoing messages and per-chat model choice. Safe by default (master switch off, dry run on).
ECNU/EduWork#dsh-oidc★ 271
Configurable OIDC login and token-authorized model access, including LiteLLM and opt-in oidc-llm integration, with a standalone DSH Web backend.
Yuuyuko-uu/dsh-feiyu-mood★ 222
Gives the companion a mood judged each turn and shown as a short context note, with a panel for mood, emotion dimensions and timeline.
huaizhuanghub/dsh-persona-dafeiyu★ 94
Persona library for DeepSeek Harness: injects the selected persona into the system prompt, offering three built-ins plus import from a file or pasted text, applied either profile-wide or per session from a switcher above the composer.
Community comments
Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.