Skip to content

Releases: zhangmiao03/dsh-cloak

Release list

v0.1.0 — context firewall, first release

v0.1.0 — context firewall, first release Latest
Latest

Choose a tag to compare

View all tags
@zhangmiao03 zhangmiao03 released this 04 Sep 10:02
v0.1.0
5058c40

Initial release of dsh-cloak — a context firewall for DeepSeek Harness.

Credentials in successful plain-text tool results are replaced with stable placeholders ⟦cloak:<category>:<n>⟧ before they reach model context. Originals live only in an agent-scoped, in-memory vault — never in session logs, audit events, or model requests.

Highlights

  • 24 built-in high-precision signature families (AWS / Aliyun / GCP, DeepSeek / OpenAI / Anthropic / OpenRouter, GitHub / GitLab / npm, Slack / Discord / Feishu / WeCom webhooks, Stripe / Shopify / Linear, JWT, PEM private keys, credentialed DB URLs, Authorization: Bearer), plus sensitive-key-name rules for .env / JSON / YAML shapes, plus custom regex rules.
  • Model-facing guidance via system-prompt injection and per-result notes: placeholders are opaque — don't guess, don't reconstruct, ask the user when a real value is needed.
  • /cloak command and /cloak/api/* HTTP surface (stats / recent / test).
  • dryRun audit-only rollout mode; optional JSONL audit trail; pagination cursors and placeholder values deliberately excluded.
  • 51 unit tests, zero runtime dependencies.

Install

dsh plugin --profile web add "github:zhangmiao03/dsh-cloak#v0.1.0"

Verified against DeepSeek Harness 0.1.2-rc.1. See README.md for configuration and the honest v0.1 exclusion list.

Assets 2
Loading