dsh-keychain-credentials：把 DSH 凭证放进 macOS 钥匙串
dsh-keychain-credentials 是 nengong-ai 维护的 DSH 社区插件，在 macOS 上将 ctx.credentials 的 refs 与 records 写入登录钥匙串，替代默认的 .credentials.yaml 明文文件。文章说明相对 dsh-credentials-local 的改进与局限、0.2+ 包挂载要求、官方安装命令与 security CLI 写入示例，并提醒同用户进程仍可通过 /usr/bin/security 读取。适用于 macOS 上希望减少凭证落盘暴露面的 Harness 用户。
Read MoreKeyringSeam: macOS Keychain Credential Provider for DeepSeek Harness
`fieldnote-ops/keyringseam` is a macOS Keychain credential provider plugin for DeepSeek Harness (DSH), designed to address the weak permission boundaries of managed credentials within the `ctx.credentials` seam. This project is independently maintained, supports macOS 13+, is licensed under the MIT license, and the current public version is v0.2.0-rc.1. Its core mechanism involves using an Apple-notarized Developer ID-signed Broker application to store sensitive values in a private Data Protection Keychain access group, and explicitly requiring device owner authentication before each credential retrieval, setting, or cancellation. The plugin provides
Read More