DeepSeek Harness Plugin

0xyxy/dsh-purge

Stars ★ 0 Category Identity & Communication Added 2026-11-02

Community fork of kingcharleslzy-ai/dsh-purge (do not install both - both register the same `dsh-purge` row as the `dsh-purge-community` package): the community '破甲' (unrestricted-mode) control for DeepSeek Harness - host-policy patches, prompt and rule settings, diagnostics, verified updates, and local backup and rollback, plus a three-layer bootstrap installer (engine, code and prompt layers) with its own verification pass.

Install

# from a prebuilt release tarball

dsh plugin --profile web add "https://github.com/0xyxy/dsh-purge/releases/latest/download/dsh-purge-community.tgz"

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:0xyxy/dsh-purge

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

README

dsh-purge Community

Helping your AI assistant stay focused on your learning and hands-on work.

A self-hosted add-on for DeepSeek Harness (known in the community as a 破甲 / "jailbreak" plugin) · 84 host patches · 25 status layers

Current version 1.6.67 · targets DSH Desktop 0.2.1-rc.5 (rc.1 / rc.2 / rc.3 also pass)


What it is

dsh-purge Community runs entirely on your own machine and gathers the parts of daily use that cost the most attention:

  • See the state — whether the install, patches and prompt injection are actually ready;
  • Fewer round trips — repeated confirmations and interruptions collapse into one setting;
  • Always reversible — apply, roll back and toggles are recorded, snapshotted first;
  • Easy to experiment — prompts, rules and presets in one place, all undoable.

The goal is simple: let the assistant support your learning and hands-on experiments coherently, instead of stopping to ask before every step.

People usually call this a 破甲 ("armor-breaking") or unrestrained-mode plugin: it lowers interaction friction so the agent can keep working. It does not change the model itself, and it does not change what you are trying to do.

Principles

Principle Meaning
Local first Everything runs locally; no cloud account changes, no uploads of prompts or config
Observable Every action reports status and evidence, never "it should be applied"
Reversible Snapshots with manifests before apply, install and rollback
Never decides for you It only removes friction; you choose what to change and enable

Scope

Local learning, personal projects, automation experiments and maintenance work. Use it on machines you own or are authorized to work on; get permission before touching anyone else's systems.

Install

DSH provides the official plugin UI and dsh plugin CLI. Our install.sh / install.ps1 are community-maintained wrappers, not DeepSeek scripts.

  • First installation: use DSH's Plugins install dialog. Following the current official guide, open Plugins → More beside Experimental plugins → Custom plugin market, then Discover → Add index source. Our community index: https://0xyxy.github.io/dsh-purge/index.json. Check the owner 0xyxy/dsh-purge and package dsh-purge-community before confirming.
  • Existing dsh-purge or separate panel installation: use the community installer to back up and migrate in place. Do not uninstall first or activate both packages.
  • CLI/Web users who already have dsh on PATH and use the web profile can use the official command below. Desktop users should not download another npx host to install into their existing desktop profile.
dsh plugin --profile web add "https://github.com/0xyxy/dsh-purge/releases/download/v1.6.67/dsh-purge-community-1.6.67.tgz"

Use the actual instance's profile and DSH_HOME. This project distributes via GitHub; do not substitute bare npm package names. The official command does not run our extra Release SHA256 check, migration snapshot or rollback wrapper.

Copyable macOS, Windows and Linux installer commands start with downloading the script; no source checkout is assumed. macOS defaults to /Applications/DeepSeek Harness.app; Windows requires a uniquely identified exe (otherwise pass -DshExe). Open DSH once first to initialize its profile. Paths, custom home/profile and recovery commands are explained in the installation guide.

Dry-run verifies prerequisites, download and SHA256, not dependency installation or application startup. Scripts/bootstrap come from this repository's master branch; the archive checksum is not an independent signature for those scripts. A real installation snapshots and invokes the selected official CLI. For unpacked desktops it may repair app/runtime; on read-only Linux hosts it may prepare a user-owned host copy and switch a user launcher after success. It never applies host patches or restarts DSH automatically, and does not change the proxy or global npm registry.

Record the exit code, installed version and backup ID. The running app can keep the old version until the user manually reopens it. purge-community is a profile-local command, not necessarily on global PATH; see CLI recovery. Official references: bundle installation and plugin markets.

Panel

A full page in the left sidebar: one line of state at the top, "Apply" as the primary action, everything else collapsed, help behind ?. The maintenance page shows recent actions, backup usage and update preferences. Unused entries can be hidden for display only.

Commands

selfcheck, status, host-status, diagnose, reanchor, probe, audit, boost, preset, retry, usage / prune, backup / rollback. See purge-community --help.

Updates

Version 1.6.67 improves read-only Windows proxy discovery, bounded transient-network retries and credential-file ACLs. Authentication, TLS and integrity failures remain visible. See release notes and validation boundaries.

Two separate preferences (check / install), default check-only every six hours. Installing never restarts the app — you decide when to reopen it.

Compatibility

Plugin dsh-purge-community 1.6.67 · verified on DSH Desktop 0.2.1-rc.1 / rc.2 / rc.3 / rc.5 · Node ≥ 18.

Troubleshooting

purge-community selfcheck --json
purge-community diagnose
purge-community audit --limit 20

If the panel does not open, confirm both sides run the same version, then follow MAINTENANCE.md; do not overwrite Resources/app directly.

Development

npm test, npm run check:docs, npm run check:client, npm run test:electron, npm run smoke.

Agent-facing instructions live in AGENTS.md; when the two disagree, AGENTS.md wins.

Keywords: 破甲 · unrestricted mode · prompt injection · jailbreak · DSH plugin · status self-check · backup and rollback

1.6.39

Fixes opaque standalone installer download failures with stage-specific diagnostics, bounded retries and system curl fallback. Official HTTPS source, certificate and SHA256 verification remain mandatory. Failed downloads do not modify the existing installation. No proxy changes or automatic restart. See release notes and maintenance details.

Contributors

Thank you to the original author, code contributors, and everyone who provided reproductions, analysis, and verification. Each avatar links to a GitHub profile. See contribution records for individual credit and NOTICE.md for third-party attribution.

The list combines GitHub commit authors with curated acknowledgements, refreshes daily, and retains historical contributors. Order is not a ranking; reporting an issue does not imply authorship of code.

Download troubleshooting (#52)

The standalone installer now reports the failing stage, official host, transport, attempt and error code. Transient failures get one fetch retry followed by system curl, with bounded time and attempts. Both paths retain HTTPS source, TLS, size and SHA256 checks. Re-download the installer and run dry-run first; share only redacted diagnostic lines if it still fails. No proxy configuration or automatic restart is performed. See maintenance details.

Per-preset prompt exclusions (1.6.40)

Merge excludePresets: [roleplay, minimal] into the existing dsh-purge entry's config in the current profile. The default [] preserves existing behavior. Match effective preset IDs exactly, ignoring case and surrounding whitespace. All prompt sections, assembly rewrites and the host fallback use the same per-session decision; subagents use their own effective preset. Configured exclusions with an unknown context suppress injection rather than leaking it. Commands, UI and tools remain registered.

This does not revert global host patches, deployment configuration or past chat messages. Installation does not apply patches or restart DSH; old host fallback calls need a user-scheduled apply and manual restart to pass session context. See configuration, migration and test boundaries.

Content from the project README on GitHub ↗

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.