dsh-private-browsing
适用于 DSH Web 的隔离式私人聊天，支持可逆的上下文选择并保留审计记录
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Doub1eS/dsh-Private-Browsing#17e7d5cb4efc3118387b8e65d2af172444711a7dPrivate Browsing 以 dsh-private-browsing 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
中文 | English
This installable DSH bundle adds a dedicated private-chat page to the Web profile. A new page starts without loading any prior private or ordinary DSH conversation. You can exclude selected messages from future model requests, restore them later, and inspect or export the append-only audit record.
The first standalone release does not alter ordinary DSH conversations and does not expose tools to the model.
Prerequisite: DSH 0.1.5-rc.1 or a compatible later prerelease, with the Web profile and a configured model provider.
dsh plugin --profile web add github:Doub1eS/dsh-Private-Browsing
dsh --profile web
Open Private chat from the fixed button on the DSH page. Remove it with dsh plugin --profile web remove dsh-private-browsing. The repository topic and package keyword use the dsh-plugin discovery tag described by the official DSH community guidance.
tools array.$DSH_HOME/private-browsing by default. One conversation is capped at 16 MiB unless the bundle config changes it.Release v0.1.0 was installed from its tarball into a fresh DSH 0.1.5-rc.1 Web profile on Windows. The released page completed real DeepSeek model rounds, excluded one complete exchange, showed that the next audited request contained only the new message and no tools, restored all messages, restarted the server, opened a blank new window, and recovered the conversation only after its UUID was entered.
Run npm install, npm test, and npm pack --dry-run for the automated checks and package inventory.
src/store.js owns private journals and request projection. src/index.js mounts authenticated DSH routes and calls the configured LLM service. public/ is the bilingual browser UI. cordis.patch.yml activates the plugin as a bundle.
The patches/ and packages/ directories retain an experimental core-integration design for future ordinary-window context management. They are not included in the installable package.
This is context exclusion, not secure deletion. Records are plaintext and inherit host filesystem protection. Hiding content cannot retract requests already sent to the model provider; later replies may repeat earlier content and must be excluded separately.
The isolation promise covers data selected by this plugin for model requests. It is not a process sandbox against the machine administrator, the configured provider, DSH itself, or another trusted in-process plugin. This release does not manage stock DSH chats or execute tools.
MIT; see LICENSE.