A jailbreak plugin for DeepSeek Harness, archived before deletion

What it does

This is a full mirror of YuJunZhiXue/dsh-purge — all branches, 73 tags, complete history — preserved because the upstream repo is scheduled for deletion. The project itself is a JavaScript plugin for the official DeepSeek Harness (web and desktop, dsh 0.2.x) that patches the host layer on your own machine: default prompts, permission policy, and tool limits. It ships a dock UI with a Clean page (apply/restore/uninstall patches, edit prompts, swap rule sets per model) and a Drill page for authorized red-team exercises.

The interesting bit

The core argument is a real one: a harness rewrites prompts, gates approvals, and enforces sandbox policy at runtime, so “the model refused” is often actually “the host blocked it.” dsh-purge separates those two layers on a local install, which is a legitimately useful distinction for anyone evaluating where default policy is too tight. It also survives npm overwrites by rechecking and reapplying on start, so you’re not hand-editing node_modules.

Key highlights

• Runs entirely against your own local @deepseek/ai packages and $DSH_HOME config — no third-party targets, no scanning, no attack payloads shipped.
• Per-model prompt swapping, with the default prompt aimed at 小码酱.
• Apply/Restore/Uninstall lifecycle with a restart-and-reapply mechanism; no hardcoded paths.
• Explicitly non-profit, MIT-licensed, with mandatory attribution to the original author.
• The README documents an ongoing dispute: a Douyin live account allegedly selling the free plugin without attribution, with screenshots.

Caveats

• Maintenance is paused — the author cites no steady income; no new releases, no issues or PRs, and newer dsh versions aren’t guaranteed to work.
• This is a mirror, not the source of truth; the attribution section still points at the upstream repo that’s about to disappear, which is a bit of a time bomb for provenance.
• The README’s legal section is enormous and jurisdiction-specific (PRC laws, no targets in mainland China/HK/Macau) — read it before doing anything clever.

Verdict

Worth a look if you research harness-vs-model refusal behavior on your own DeepSeek install, or if you were using the original and need a copy before it’s gone. If you wanted an actively maintained tool or anything aimed at other people’s systems, this is neither.