---

description: "Add a separate private chat to a DSH Web profile, with reversible context selection and retained local audit records." kind: "package-bundle"

DSH Private Browsing

中文 | English

Summary

This installable DSH bundle adds a dedicated private-chat page to the Web profile. A new page starts without loading any prior private or ordinary DSH conversation. You can exclude selected messages from future model requests, restore them later, and inspect or export the append-only audit record.

The first standalone release does not alter ordinary DSH conversations and does not expose tools to the model.

Use this plugin

Prerequisite: DSH 0.1.5-rc.1 or a compatible later prerelease, with the Web profile and a configured model provider.

dsh plugin --profile web add github:Doub1eS/dsh-Private-Browsing
dsh --profile web

Open Private chat from the fixed button on the DSH page. Remove it with dsh plugin --profile web remove dsh-private-browsing. The repository topic and package keyword use the dsh-plugin discovery tag described by the official DSH community guidance.

Privacy behavior

• The model request contains only visible messages from the selected private conversation.
• The plugin does not read DSH Sessions, workspace instructions, memory services, or other private-conversation journals when generating a reply.
• The model receives no tools. The audit stores every exact request with an empty tools array.
• Exclusion changes future requests without deleting original text. Restoration includes selected records again.
• A new browser page does not select an old conversation. Recovery requires its UUID.
• Append-only JSONL journals remain under $DSH_HOME/private-browsing by default. One conversation is capped at 16 MiB unless the bundle config changes it.
• API routes reuse DSH Web authentication and host checks and reject oversized or malformed requests.

Verification

Release v0.1.0 was installed from its tarball into a fresh DSH 0.1.5-rc.1 Web profile on Windows. The released page completed real DeepSeek model rounds, excluded one complete exchange, showed that the next audited request contained only the new message and no tools, restored all messages, restarted the server, opened a blank new window, and recovered the conversation only after its UUID was entered.

Run npm install, npm test, and npm pack --dry-run for the automated checks and package inventory.

Development sources

src/store.js owns private journals and request projection. src/index.js mounts authenticated DSH routes and calls the configured LLM service. public/ is the bilingual browser UI. cordis.patch.yml activates the plugin as a bundle.

The patches/ and packages/ directories retain an experimental core-integration design for future ordinary-window context management. They are not included in the installable package.

Known limitations

This is context exclusion, not secure deletion. Records are plaintext and inherit host filesystem protection. Hiding content cannot retract requests already sent to the model provider; later replies may repeat earlier content and must be excluded separately.

The isolation promise covers data selected by this plugin for model requests. It is not a process sandbox against the machine administrator, the configured provider, DSH itself, or another trusted in-process plugin. This release does not manage stock DSH chats or execute tools.

MIT; see LICENSE.