dsh-privacy-gateway

Local privacy gateway for DeepSeek Harness: replaces personal data in conversation messages with placeholders before they reach the model, shows the originals only in the local UI, and creates redacted copies of CSV/XLSX files. 适合对数据隐私敏感，需在发送给模型前过滤敏感信息的场景。

Interface extensionsProductivity

Package: dsh-privacy-gateway
Compatibility: Unverified
Harness peer range: >=0.1.5-alpha.1 <0.1.6-0 || >=0.1.6-0 <0.1.7-0 || >=0.1.7-0 <0.1.8-0 || >=0.1.8-0 <0.1.9-0 || >=0.1.9-0 <0.1.10-0 || >=0.2.0-0 <0.2.1-0 || >=0.1.5 <0.3.0-0
Cordis peer range: ^4.0.1
Version: 0.3.0
License: MIT
Last updated: Sep 30, 2026

Install

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ethanrise/dsh-privacy-gateway

README

Read the full README ↗

Configuration

In the plugin's cordis.patch.yml row:

Key	Default	Meaning
`maskMessages`	`true`	mask conversation messages before the model sees them (also switchable in the sidebar)
`maskToolResults`	`false`	also mask tool results
`entities`	`[PERSON, PHONE, EMAIL, ID_CARD, BANK_CARD]`	rule types to detect; add `IP` to enable it
`persistVault`	`true`	keep `vault.json` on disk
`maxVaultEntries`	`20000`	oldest entries are dropped past this