v0.1.1

[0.1.1] - 2026-08-17

Fixed

• The bundle patch now composes the storage stack (@deepseek-ai/dsh-storage + dsh-storage-json + dsh-storage-domain) and declares all three packages, so a bare profile gets the storageDomain service the plugin injects instead of hanging with pending (waiting for service: storageDomain).

v0.1.0

[0.1.0] - 2026-08-17

Added

• PII masking middleware for DeepSeek Harness: request-time anonymization at the agent/pre-step boundary (phones, emails, ID cards, bank cards, keys, and opt-in IPs become <TYPE_N> placeholders), a placeholder ? original restore table kept only in memory and the controlled dsh_mask storage domain, and a mask/applied audit session event that records counts + type distribution only.
• The /mask command (status/on/off/restore <text>/help) and the mask_test model tool (mask a snippet, never reveal the original).
• The regex PII detector ported from Pii-Stripper-Middleware (lib/strip.mjs), plus a key detector for the spec's secret-type PII.
• Pure display/log sanitizers (lib/sanitize.mjs) with extreme-case coverage: PII plaintext and the mapping table never leak into logs or results.
• Schemastery configuration with fail-loud bounds; every tunable documented in cordis.patch.yml and the five-language READMEs.
• Session-event adaptive gate (mask/applied appends only when the host records the type or supports the ignorable envelope).