dsh-model-redactor

Model-visible redaction plugin for DeepSeek Harness (dsh). It redacts
sensitive material (API keys, tokens, credentials) from what the model sees:

• Input (agent/pre-step): user messages are rewritten to redacted copies
  before they enter the session log and the model request. Already-logged tool
  results are redacted through session surface replacement, preserving the
  original append-origin events in the durable log.
• Output (llm/stream): text, reasoning, and tool-call argument deltas are
  redacted before the agent loop logs them, so the log and future model context
  stay consistent. block-end payloads are also redacted so the assembled
  assistant message cannot reintroduce a secret.

Install / compose

Add the row to a Cordis patch:

- insert:
    - id: dsh-model-redactor
      name: dsh-model-redactor
      config:
        enabled: true

The package ships cordis.patch.yml and declares dsh.bundle.patch for bundle
profiles.

Configuration

Built-in rules are fixed and cannot be disabled. They cover OpenAI-style sk-,
Bearer, Basic, GitHub tokens, Slack tokens, JWTs, assignment patterns,
PEM private-key blocks, and AWS AKIA access key IDs.

Build and test

pnpm build
pnpm test

tsc emits lib/. Unit and integration tests use Vitest.