@yyfather/dsh-token-vault
DeepSeek Harness 的安全凭据保管库：存储 GitHub/npm/API 令牌（机密信息不会离开主机），在环境中注入令牌后运行 gh/npm/npx/node/git，并从设置页面管理令牌。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:YYfather/dsh-token-vault#f9fa1dfa397657d0c65ebe4be9efc0980177f039Token Vault 以 @yyfather/dsh-token-vault 发布，当前版本为 1.0.3。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Secure credential vault for DeepSeek Harness · 凭证库插件
Store your GitHub / npm / API tokens in DSH's own credential store (ctx.credentials → ~/.credentials.yaml). Secrets never leave the host — no plaintext file, no model context, no browser round-trip. The agent uses tokens through vault_run which injects them into a child-process environment only; vault_show (the single disclosure path) requires an explicit confirm: true.
设置 → 凭证库 录入一次，之后所有 GitHub/npm 操作由 Host 侧代持。
| Tool | Purpose |
|---|---|
vault_list | List stored token names only (never values) |
vault_has | Check one token's presence |
vault_set | Store/update a token (value never echoed) |
vault_remove | Delete a token |
vault_import | Import from gh auth token (source: gh) or ~/.npmrc (source: npm) |
vault_run | Run gh/npm/npx/node/git with the token injected via env (github/gh → GH_TOKEN, npm/node → NPM_TOKEN, env_name overrides); output contains no secrets |
vault_show | Reveal one token (requires confirm: true, only on explicit user request) |
dsh plugin --profile desktop add @yyfather/dsh-token-vault
The package declares dsh.bundle.patch so it mounts automatically; restart DSH Desktop to activate. Then manage it from 设置 → 市场 → 已安装 (enable / update / uninstall), or paste tokens in 设置 → 凭证库.
dsh-token-vault/<name>, atomic modifyRecord) — no new plaintext files.vault_run places the token in the child environment only; stdout/stderr/logs never contain it.vault_show is the only leak path and demands confirm: true; usage rules advise rotating after use.token-vault-usage injected automatically: the agent must never print or persist tokens.lib/index.js — host: ctx.tools.register for 7 vault tools; webServer routes /vault/status|set|remove|import; systemPrompt.section usage ruleslib/client.js — browser __ModuleLoader__ bundle: Settings → 凭证库 (add / import / delete, values never displayed)cordis.patch.yml — bundle mount patchpackage.json — market-format compliant (strict inject, full exports incl. ./client and ./cordis.patch.yml)MIT © YYfather