DSH-Vault: Encrypted Credential Repository Plugin for DeepSeek Harness

dsh-vault is an encrypted credential repository plugin for DeepSeek Harness (DSH), designed to securely store and manage sensitive information such as usernames, email addresses, passwords, SSH/API keys, OAuth tokens, and TOTP secrets. It leverages Node.js's built-in node:crypto module, employing AES-256-GCM encryption and scrypt key derivation to ensure data is encrypted at rest on disk, with keys never persisted. The plugin exposes tools such as vault_search, vault_get, and vault_add to the model. Its core security mechanism separates "search" from "read": vault_search returns only summaries without ciphertext, preventing sensitive information from leaking into the model context; only after confirming the target does it proceed to...