dsh-breach: A DSH plugin that injects executable prompts and rewrites interception points in DeepSeek Harness

What Does It Do?

dsh-breach is a DSH plugin for DeepSeek Harness that injects custom system prompts and patches the host source code. It targets the defensive passages built into DSH's default system prompt and code paths — disclaimers, approval prompts, hooks deny rules — and replaces them with direct instructions so execution is not repeatedly pulled back into confirmation loops. It does two things: swap in an executable prompt persona, and rewrite interception points in the host, with every change backed up and revertible as a batch. It works only on your own machine and your own installation, and does not touch conversation content or take over the host.

Core Features

• Prompt injection: replaces the default persona, rules and work discipline with an executable version, resolved by priority from the text currently in the input box, to prompt-inject.md in the state directory, to an encrypted built-in default; edits take effect on save without a restart, and different prompts can be bound per model preset.
• Revertible patch engine: defines 86 patches that settle against the host version — 72 items on 0.2.1-rc.5 (19 prompt, 46 code, 4 tool, 3 compatibility); each change writes a backup recorded in the state directory, supports reapply and batch rollback, and skips unknown host versions instead of forcing edits.
• Three built-in tools: happy_status reports applied patches, failures and backup locations, happy_apply applies or replays patches, and happy_revert rolls back from backups.
• Region and sensitive-operation gate: blocks requests aimed at mainland China, Hong Kong and Macau hosts, roughly 200 banking domains, and attack-related keywords before they reach the model, with an allowlist kept as a line-by-line text file.
• Same-origin web routes: registers routes for status, apply, revert, prompt override, conversation rewind, host restart and uninstall, accepting only same-origin requests.
• Conversation rewind: rolls a session back to a chosen turn, optionally refilling the input box with that turn's content.

How to Use This Plugin?

After enabling it in DSH, a floating panel on the right shows the patch overview: the top bar gives overall status plus three-color counts for applied, skipped and failed, clicking a group row expands its patch list inline, and chips filter by all, failed or skipped. Click apply to run the patches and revert to roll everything back from backups; after a host upgrade you can replay them. To change the prompt, edit prompt-inject.md in the state directory, or use the prompt card to edit or restore the default. Maintained by zhuchongba-01 under the MIT license and last updated on 2026-10-31, it does not guarantee compatibility with every host version, so back up before use.

How to Troubleshoot This Plugin?

Patch status has four values: applied, skipped, failed and pending. "Skipped" means the target file or target pattern does not exist in this host version, so there is nothing to change — it is not an error. "Failed" means the target was found but could not be modified, usually due to permissions or a changed host format. For failures, use happy_status to confirm the failure list and backup locations, then repair according to the official instructions; when you need to recover, use happy_revert to roll back from backups.