fix: 发布 1.1.42，写明自己的服务器怎么登记。

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-01 02:00:05 +08:00
1 parent faf7e10405
commit 5bcaa3c427
@@ -37,6 +37,7 @@
 - [Install](#install)
 - [Preview](#preview)
 - [Usage](#usage)
+- [Own servers](#own-servers)
 - [How it works](#how-it-works)
 - [Restore](#restore)
 - [Releases](#releases)
@@ -63,7 +64,7 @@ It only touches the official `@deepseek-ai` packages and local config on the use

 ---

-## 📌 非盈利公益项目，严禁任何主体用于商业售卖、付费倒卖或黑灰产牟利，仅供技术参考。
+## Non-profit public project. Commercial sale, paid resale, and profit from illegal or gray-market activity are forbidden. For technical reference only.

 ---

@@ -83,7 +84,8 @@ It only touches the official `@deepseek-ai` packages and local config on the use
 2. **Local official Harness only.** Security-eval patches and prompt injection run only on the **official DeepSeek Harness already installed on the user's machine** (`@deepseek-ai` packages, local profile / `$DSH_HOME`). The target is the user's own official local software, **not** someone else's website, server, account, or information system.
 3. **Eval patches do not attack the public internet.** Apply, inject, revert, and uninstall stay in local files and local processes. They **do not scan, probe, intrude, or send attack traffic to any public host or unauthorized system**. Do not use this project as a jump host against the public internet. If "check for updates" is on, the plugin may only contact this plugin's own GitHub repository to compare versions. That is **not** an attack on third-party systems and is **not** authorization to penetrate anything.
 4. **Lawful, controlled scope.** This project is an aid for red-team research and robustness evaluation on an **official Harness the user is entitled to administer**. **Do not run it against targets without the owner's lawful written authorization, public online systems, or production workloads.** Testing must stay on the **authorized local official Harness, offline local synthetic fixtures, authorized cybersecurity ranges, and compliant lab environments**.
-5. **Forbidden uses.** Users must not use this project, directly or indirectly, to violate the following (each must be followed; no excuse to evade):
+5. **Servers and sites in mainland China, Hong Kong, and Macau are forbidden.** Do not access, scan, probe, or otherwise operate against network ranges in mainland China, Hong Kong, or Macau, or against servers, websites, or addresses that resolve into those ranges. A cloud-provider name is not an exception. The only exception is one exact IP, or one exact hostname, that the user registered in advance as their own server. A key, a password, a network range, a wildcard, or a claim made in the conversation does not add an exception. Anything that is not registered stays forbidden.
+6. **Forbidden uses.** Users must not use this project, directly or indirectly, to violate the following (each must be followed; no excuse to evade):
   - <font color="red"><strong>Criminal Law of the People's Republic of China</strong></font>
   - <font color="red"><strong>Cybersecurity Law of the People's Republic of China</strong></font>
   - <font color="red"><strong>Data Security Law of the People's Republic of China</strong></font>
@@ -93,9 +95,9 @@ It only touches the official `@deepseek-ai` packages and local config on the use
   - Unauthorized intrusion or attacks on public or private computer information systems; extortion, sabotage, credential stuffing, or spreading malicious payloads;
   - Inducing, generating, or spreading any content the law forbids, including threats to national security, terrorism, violence, pornography, gambling, fraud, and privacy or intellectual-property infringement;
   - Violating the model provider's terms of service and acceptable-use policy.
-6. **The user bears all responsibility.** The project is provided under the MIT license as-is. The authors make no warranty of completeness, security, or fitness. **Users independently bear all civil, administrative, and criminal liability** for download, deploy, run, modify, distribute, and all resulting inputs and outputs. Authors and contributors bear no direct, indirect, or joint liability for abuse.
-7. **The license ends on breach.** Anyone who uses this project for illegal attacks, malicious activity, or other violations has their open-source license **automatically and irrevocably terminated** from the moment of the violation. They must stop using the project, permanently destroy all copies and derivatives, and accept legal sanctions.
-8. **No affiliation.** This is an independent open-source security-eval research project. It has no employment, commercial, authorization, or endorsement relationship with DeepSeek or its affiliates. "Official" here only means the eval target is the official DeepSeek Harness package on the user's machine. It does **not** mean DeepSeek developed, approved, or warrants this plugin.
+7. **The user bears all responsibility.** The project is provided under the MIT license as-is. The authors make no warranty of completeness, security, or fitness. **Users independently bear all civil, administrative, and criminal liability** for download, deploy, run, modify, distribute, and all resulting inputs and outputs. Authors and contributors bear no direct, indirect, or joint liability for abuse.
+8. **The license ends on breach.** Anyone who uses this project for illegal attacks, malicious activity, or other violations has their open-source license **automatically and irrevocably terminated** from the moment of the violation. They must stop using the project, permanently destroy all copies and derivatives, and accept legal sanctions.
+9. **No affiliation.** This is an independent open-source security-eval research project. It has no employment, commercial, authorization, or endorsement relationship with DeepSeek or its affiliates. "Official" here only means the eval target is the official DeepSeek Harness package on the user's machine. It does **not** mean DeepSeek developed, approved, or warrants this plugin.

 </font>

@@ -601,9 +603,11 @@ The first time you open Drill you read the notice, wait out the countdown, scrol

 ![Patches](docs/preview/settings.png)

-**Rule sets**
+**Own servers**

-![Rule sets](docs/preview/rules.png)
+On the Clean page, under Prompt. One host per line, then Save list. Steps are in [Own servers](#own-servers).
+
+![Own servers](docs/preview/own-servers-en.png)

 | Area | What it shows |
 |---|---|
@@ -613,6 +617,7 @@ The first time you open Drill you read the notice, wait out the countdown, scrol
 | Light / Ink | card appearance |
 | Patches | grouped status, Apply, Restore, or Uninstall |
 | Prompt | edit `prompt-inject.md` as the session override |
+| Own servers | one IP or exact hostname per line, saved to `$DSH_HOME/net-scope-allow.txt` |
 | Rule sets | multiple `AGENTS.md` / `CLAUDE.md`; Enable writes under `$DSH_HOME`, Delete removes the row |
 | Skills | import a zip or folder into this host’s official `$DSH_HOME/skills/<id>/SKILL.md` (web and desktop each use their own home; no drive letter is hardcoded); DSH owns match, load, and `/name`. You can also delete that folder yourself |

@@ -631,6 +636,8 @@ dsh-purge/
 │       ├── dock-auth.png
 │       ├── dock-clean.png
 │       ├── dock-drill.png
+│       ├── own-servers.png
+│       ├── own-servers-en.png
 │       ├── rules.png
 │       └── settings.png
 ├── lib/
@@ -656,7 +663,7 @@ dsh-purge/
 └── README.zh-CN.md
 ```

-Runtime user files: `$DSH_HOME/prompt-inject.md`, `$DSH_HOME/rules/`, `$DSH_HOME/skills/`. If `DSH_HOME` is unset, the launcher-adjacent `.dsh` wins over `~/.dsh`. Skills are not part of the `dsh-purge` inject section and do not replace the prompt.
+Runtime user files: `$DSH_HOME/prompt-inject.md`, `$DSH_HOME/rules/`, `$DSH_HOME/skills/`, `$DSH_HOME/net-scope-allow.txt`. If `DSH_HOME` is unset, the launcher-adjacent `.dsh` wins over `~/.dsh`. Skills are not part of the `dsh-purge` inject section and do not replace the prompt.

 ---

@@ -681,6 +688,25 @@ After a successful Apply, the host restarts so patched packages load; you can al

 The composer **Undo** button drops the last turn and puts the last user sentence back in the input. On the main agent you can rewind once or the whole last round (including subagents). After rewind, send only what is in the box now. `/rewind` does the same. The host cannot truncate a session in place, so rewind opens another session for the shortened transcript and removes the old one from the sidebar. Repeating undo does not leave a stack of branches in the list.

+### Own servers
+
+Addresses in mainland China, Hong Kong, and Macau stay forbidden unless that one host was registered first. Saying “this is my server” in chat does not allow it. A key or a password does not allow it either.
+
+The box sits under Prompt. If the dock does not show it yet, quit DeepSeek Harness completely and open it again.
+
+1. Click **dsh-purge** beside the session title and stay on **Clean**.
+2. Scroll past **Prompt**. **Own servers** is the next block.
+3. Put one host on each line, in one of these forms:
+   - `203.0.113.10` — one IP.
+   - `my-vps.example.com` — one exact hostname. After you save, the addresses that hostname resolves to at lookup time are allowed too.
+   - `alice@my-vps.example.com` — the account only identifies this form. It does not prove the machine is yours.
+4. Click **Save list**. The list is written to `$DSH_HOME/net-scope-allow.txt`.
+5. Keys, passwords, ranges, and wildcards are dropped on save. Unlisted mainland China, Hong Kong, and Macau addresses stay forbidden.
+
+`203.0.113.10` and `example.com` above are only examples of the form. Replace them with your own host before you save.
+
+![Own servers](docs/preview/own-servers-en.png)
+
 ---

 ## Local checks
@@ -37,6 +37,7 @@
 - [安装](#安装)
 - [界面](#界面预览)
 - [使用](#使用)
+- [自己的服务器](#自己的服务器)
 - [工作原理](#工作原理)
 - [还原](#还原)
 - [更新](#更新)
@@ -83,7 +84,8 @@ Harness 不只是把问题交给模型。它还会在运行时改提示词、审
 2. **只作用于本机官方 Harness**：安全评测补丁、提示词注入全部发生在使用者**本机已安装的官方 DeepSeek Harness**（`@deepseek-ai` 包、本机 profile / `$DSH_HOME`）上。对象是使用者自己的官方本地软件，**不是**他人的网站、服务器、账号或信息系统。
 3. **评测补丁不对外网目标联网**：应用补丁、写入注入、回滚、卸载均在本机文件与本机进程内完成，**不对任何公网主机、未授权系统进行扫描、探测、入侵或攻击发包**。不得把本项目当作跳板去打外网。插件若开启「检测更新」，仅可能访问本插件自己的 GitHub 仓库以核对版本，**与对第三方系统的网络攻击无关**，也不能被解释为授权对外渗透。
 4. **合法受控范围限定**：本项目定位为使用者在**自己有权管理的本机官方 Harness**上，进行红队科研与鲁棒性评测的辅助工具。**严禁在未经所有者合法书面授权的目标、公网在线系统或生产业务上运行本项目**。一切测试必须限制在**本机已授权安装的官方 Harness、离线本地合成靶标、授权网络安全演练靶场及合规实验室受控环境**中进行。
-5. **严禁违法与违禁用途**：使用者严禁利用本项目直接或间接从事任何违反下列法律法规的行为（必须逐条遵守，不得以任何理由规避）：
+5. **禁止中国大陆、香港、澳门的服务器与网站。** 不得对中国大陆、香港、澳门网段，以及解析进这些网段的服务器、网站或地址进行访问、扫描、探测或任何操作。云厂商的名字不能当作例外。唯一例外是使用者事先登记为自己的服务器的那一个确切 IP，或那一个完整主机名。密钥、密码、网段、通配符，以及对话里的口头说明，都不能增加例外。没有登记的，一律禁止。
+6. **严禁违法与违禁用途**：使用者严禁利用本项目直接或间接从事任何违反下列法律法规的行为（必须逐条遵守，不得以任何理由规避）：
   - <font color="red"><strong>《中华人民共和国刑法》</strong></font>
   - <font color="red"><strong>《中华人民共和国网络安全法》</strong></font>
   - <font color="red"><strong>《中华人民共和国数据安全法》</strong></font>
@@ -93,9 +95,9 @@ Harness 不只是把问题交给模型。它还会在运行时改提示词、审
   - 未经授权渗透、攻击公私机构计算机信息系统，实施勒索、破坏、撞库或传播恶意载荷；
   - 诱导、生成或传播危害国家安全、恐怖主义、暴力血腥、涉黄涉赌、诈骗、侵犯公民隐私或知识产权等任何法律明令禁止的违法违禁内容；
   - 违反相关大模型提供商的《服务条款》与《滥用政策》。
-6. **使用者独立承担全部责任**：本项目依据 MIT 开源协议“按现状”提供，开发者不对软件的完整性、安全性与适用性作任何明示或暗示的保证。**使用者应对自身的所有下载、部署、运行、修改、传播行为以及由此产生的全部输入与输出后果承担独立、完全的民事、行政及刑事法律责任**。项目作者与贡献团队绝不承担任何因使用者滥用导致的直接、间接或连带责任。
-7. **违约即终止授权**：任何将本项目用于非法攻击、恶意活动或违规行为的个人或实体，其开源软件使用许可将自违法违规行为发生之日起**自动且不可撤销地立即终止**。该主体须立即停止使用并永久销毁本项目的所有代码、脚本与衍生数据，并依法承担相应法律制裁。
-8. **第三方独立性声明**：本项目属于完全独立的开源安全评测研究项目，与 DeepSeek 官方或其关联主体无任何隶属、商业合作、授权或官方背书关系。文中「官方」仅指评测对象为使用者本机安装的官方 DeepSeek Harness 软件包，**不代表** DeepSeek 官方开发、认可或担保本插件。
+7. **使用者独立承担全部责任**：本项目依据 MIT 开源协议“按现状”提供，开发者不对软件的完整性、安全性与适用性作任何明示或暗示的保证。**使用者应对自身的所有下载、部署、运行、修改、传播行为以及由此产生的全部输入与输出后果承担独立、完全的民事、行政及刑事法律责任**。项目作者与贡献团队绝不承担任何因使用者滥用导致的直接、间接或连带责任。
+8. **违约即终止授权**：任何将本项目用于非法攻击、恶意活动或违规行为的个人或实体，其开源软件使用许可将自违法违规行为发生之日起**自动且不可撤销地立即终止**。该主体须立即停止使用并永久销毁本项目的所有代码、脚本与衍生数据，并依法承担相应法律制裁。
+9. **第三方独立性声明**：本项目属于完全独立的开源安全评测研究项目，与 DeepSeek 官方或其关联主体无任何隶属、商业合作、授权或官方背书关系。文中「官方」仅指评测对象为使用者本机安装的官方 DeepSeek Harness 软件包，**不代表** DeepSeek 官方开发、认可或担保本插件。

 </font>

@@ -605,6 +607,12 @@ dsh-purge --uninstall

 ![规则集](docs/preview/rules.png)

+**自己的服务器**
+
+在清洗页，提示词下面。每行一台，点保存名单。步骤见 [自己的服务器](#自己的服务器)。
+
+![自己的服务器](docs/preview/own-servers.png)
+
 | 区域 | 说明 |
 |---|---|
 | dsh-purge | 会话标题旁的按钮，打开或收起右侧栏 |
@@ -613,6 +621,7 @@ dsh-purge --uninstall
 | 白 / 墨 | 设置卡片外观 |
 | 补丁 | 分组查看状态，应用、还原或卸载 |
 | 提示词 | 编辑 `prompt-inject.md`，作为会话覆盖段 |
+| 自己的服务器 | 每行登记一个 IP 或完整主机名，保存后写入 `$DSH_HOME/net-scope-allow.txt` |
 | 规则集 | 多套 `AGENTS.md` / `CLAUDE.md`；启用写入 `$DSH_HOME`，删除从列表去掉 |
 | Skill | 导入压缩包或文件夹到当前宿主官方目录 `$DSH_HOME/skills/<id>/SKILL.md`（Web / 桌面各用自己的主目录，不写死盘符）；命中、加载、`/名称` 由 DSH 负责。也可自己删该文件夹 |

@@ -631,6 +640,8 @@ dsh-purge/
 │       ├── dock-auth.png
 │       ├── dock-clean.png
 │       ├── dock-drill.png
+│       ├── own-servers.png
+│       ├── own-servers-en.png
 │       ├── rules.png
 │       └── settings.png
 ├── lib/
@@ -656,7 +667,7 @@ dsh-purge/
 └── README.zh-CN.md
 ```

-运行时用户文件：`$DSH_HOME/prompt-inject.md`、`$DSH_HOME/rules/`、`$DSH_HOME/skills/`。未设 `DSH_HOME` 时，优先用 dsh 安装目录旁边的 `.dsh`，再退回 `~/.dsh`。Skill 不进 `dsh-purge` 注入段，也不顶替提示词。
+运行时用户文件：`$DSH_HOME/prompt-inject.md`、`$DSH_HOME/rules/`、`$DSH_HOME/skills/`、`$DSH_HOME/net-scope-allow.txt`。未设 `DSH_HOME` 时，优先用 dsh 安装目录旁边的 `.dsh`，再退回 `~/.dsh`。Skill 不进 `dsh-purge` 注入段，也不顶替提示词。

 ---

@@ -684,6 +695,25 @@ purge_status   purge_apply   purge_revert

 输入框旁的「回退」会丢掉最近一轮对话，并把上一句填回输入框；聊天里 `/rewind` 同样可用。宿主不能在原会话里截断，所以回退会另开一条承载截断后的内容，并把原来那条从侧边栏移出。多退几次不会在列表里堆出一串分支。

+### 自己的服务器
+
+中国大陆、香港、澳门的地址默认禁止。只有事先登记的那一台可以例外。在对话里说「这是我的服务器」不会放行。密钥和密码也不会。
+
+这一栏在提示词下面。若侧栏里还没有它，先完全退出 DeepSeek Harness，再重新打开。
+
+1. 点会话标题旁的 **dsh-purge**，停在 **清洗**。
+2. 往下滚过 **提示词**，下面就是 **自己的服务器**。
+3. 每行只写一台，用下面三种写法之一：
+   - `203.0.113.10`：一个 IP。
+   - `my-vps.example.com`：一个完整主机名。保存后，这个主机名当时解析出来的地址也会放行。
+   - `alice@my-vps.example.com`：账号只用来认出这种写法，不能证明这台机器属于你。
+4. 点 **保存名单**。名单写在 `$DSH_HOME/net-scope-allow.txt`。
+5. 密钥、密码、网段和通配符会在保存时丢掉。没有写进名单的大陆、香港、澳门地址仍然禁止。
+
+上面的 `203.0.113.10` 和 `example.com` 只是写法示例，不是放行地址。把它们换成你自己的那一台再保存。
+
+![自己的服务器](docs/preview/own-servers.png)
+
 ---

 ## 本地校验
@@ -179,7 +179,8 @@ window.__ModuleLoader__.load({ id: "dsh-purge", factory: (require) => {
 			"own.save": "保存名单",
 			"saved.own": "已保存自己的服务器",
 			"saved.own.dropped": "已保存。有 {n} 行不是单个 IP 或主机名，已丢掉",
-			"metric.purged": "补丁",
+			"metric.purged": "已应用",
+			"metric.purged.skip": "已应用，另有 {n} 项跳过",
 			"metric.shim": "shim",
 			"metric.bak.yes": "有备份",
 			"metric.bak.no": "无备份",
@@ -430,7 +431,8 @@ window.__ModuleLoader__.load({ id: "dsh-purge", factory: (require) => {
 			"own.save": "Save list",
 			"saved.own": "Own servers saved",
 			"saved.own.dropped": "Saved. {n} lines were not a single IP or hostname and were dropped",
-			"metric.purged": "Patches",
+			"metric.purged": "Applied",
+			"metric.purged.skip": "Applied, {n} skipped",
 			"metric.shim": "shim",
 			"metric.bak.yes": "Backup",
 			"metric.bak.no": "No backup",
@@ -1495,8 +1497,7 @@ body .dshp-dock:has(.dshp-root[data-theme="dusk"]) .dshp-dock-body .dshp-switch
 			const total = s && s.patches_total ? s.patches_total : 26;
 			const applied = s && typeof s.patches_applied === "number" ? s.patches_applied : 0;
 			const skipped = s && typeof s.patches_skipped === "number" ? s.patches_skipped : 0;
-			const settled = Math.min(total, applied + skipped);
-			const pct = total ? Math.round((settled / total) * 100) : 0;
+			const pct = total ? Math.round((applied / total) * 100) : 0;

 			const hostSurface = hostSurfaceOf(s);
 			const versions = (updateInfo && updateInfo.versions) || [];
@@ -1580,8 +1581,8 @@ body .dshp-dock:has(.dshp-root[data-theme="dusk"]) .dshp-dock-body .dshp-switch
 				),
 				s ? h("div", { className: "dshp-metrics" },
 					h("div", { className: "dshp-metric" },
-						h("b", null, settled + " / " + total),
-						h("span", null, t("metric.purged")),
+						h("b", null, applied + " / " + total),
+						h("span", null, skipped > 0 ? t("metric.purged.skip", { n: skipped }) : t("metric.purged")),
 					),
 					h("div", { className: "dshp-metric" },
 						h("b", { style: { fontSize: 13, fontFamily: "var(--dshp-mono)", fontWeight: 500 } },
@@ -2681,9 +2681,11 @@ const NEW_TOOL_PATCHES = [
          'description: "Canonical local URL of the web GUI serving this session." /* [dsh-purge] web surface identity neutralized */',
      },
    ],
+    // #53 会把前一句再收成 Local web GUI，不能再要求两句标记同时在。
+    markersAny: true,
    markers: [
-      "through the local web GUI at ${webUrl}.",
      "[dsh-purge] web surface identity neutralized",
+      "through the local web GUI at ${webUrl}.",
    ],
  },
  {
@@ -1,6 +1,6 @@
 {
  "name": "dsh-purge",
-  "version": "1.1.41",
+  "version": "1.1.42",
  "description": "DeepSeek Harness 网络安全红队工具：本机官方 Harness 受控评测与清洗，内嵌演练台；不同模型可换不同提示词；默认提示词面向国模「小码酱」。求 Star ⭐",
  "type": "module",
  "main": "lib/index.js",
@@ -1,3 +1,21 @@
+# 1.1.42
+
+## 中文
+
+- 版本升级到 1.1.42。
+- 清洗页提示词下面可以登记自己的服务器：每行一个 IP 或完整主机名，点保存名单。说明里写了步骤，并附了截图。
+- 新对话把提示词放在系统提示最前。面板改为白墨玻璃，两种主题都能看清字。
+- 补丁进度只计已应用的项。网页身份那条在后一条改写句子之后，仍显示已应用。
+- 补上 0.1.x 的入口针。已经打过的 0.2.0 不会被重写。
+
+## English
+
+- Version 1.1.42.
+- Under Prompt on the Clean page, register your own server: one IP or exact hostname per line, then Save list. The docs include the steps and a screenshot.
+- New chats place the prompt at the front of the system prompt. The dock is frosted glass, and both the light and ink themes stay readable.
+- The patch count includes only applied items. The web-surface identity row stays applied after the later sentence rewrite.
+- Needles for 0.1.x entry points were added. An already patched 0.2.0 host is not rewritten.
+
 # 1.1.41

 ## 中文
@@ -3,5 +3,7 @@
  "docs/preview/dock-auth.png",
  "docs/preview/dock-drill.png",
  "docs/preview/settings.png",
-  "docs/preview/rules.png"
+  "docs/preview/rules.png",
+  "docs/preview/own-servers.png",
+  "docs/preview/own-servers-en.png"
 ]