
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
openharness-reply-in-cn
Advanced tools
DSH plugin that shows a '中文回复' label in the web sidebar and forces the model to reply in simplified Chinese.
一个 DeepSeek Harness(dsh)插件:往系统提示词注入「必须用简体中文回复」的高优先级指令, 并在 dsh 设置页侧边栏显示「中文回复」一项。
ctx.systemPrompt.section({ name, order: 45, text }) 注入指令(真实逻辑);settings.section 槽,显示侧边栏项(与 openharness-rule-for-dsh-plugin / adhdgofly-dsh-ext 完全同构)。src/host/index.ts)export const inject = ['systemPrompt'] // 申报依赖,否则 boot 崩
export const name = 'openharness-reply-in-cn'
export function apply(ctx, config) {
if (config?.enabled === false) return // 可通过 patch 关闭
const disposer = ctx.systemPrompt.section({
name: 'openharness:reply-in-cn',
order: 45, // persona(0) 之后、工具引导(100+)之前
text: (context) => (context.agent === undefined ? '' : <中文回复要求>),
})
return () => disposer?.() // apply 返回 disposer,卸载时清理
}
order:45,指令文本含「【回复语言 · 最高优先级】…必须用简体中文回复…代码/命令/标识符保持原文」。context.agent 存在)才渲染。遵循程度:软约束。注入一定发生,但「模型是否严格遵守」无法 100% 保证——靠 order 靠前 + 「最高优先级」措辞稳住。 验证:对话里问「系统提示里有没有『必须用简体中文回复』这条」;或发「请用英文回复」看它是否仍用中文。
排查记录与同作者插件 openharness-rule-for-dsh-plugin 一致(改 client 后 rev 已变但 webview 不拉新的问题)。
一句话:Tauri 壳的「重启DSH」只杀后端 node 进程、不重建前端 webview;dsh 的 client bundle 按 rev 缓存在 webview 内存里,rev 变了 webview 也不拉新的。所以改 client 或加新 client 插件后,要彻底退出 OpenHarness(⌘Q)再重开,才确定看到新 bundle / 新侧边栏项。
# 当前依赖目录(开发):
dsh plugin --profile web add ./openharness-reply-in-cn
# 或发布后按名装:
dsh plugin --profile web add openharness-reply-in-cn
装完彻底退出 app 重开(见缓存坑)。
pnpm install # 生成 node_modules(含 esbuild / typescript)
pnpm build # 产出 lib/index.js(host)+ lib/client.js(client)
package.json:dsh.bundle.patch、dsh.client.platform: "web"、exports["./client"]、main → lib/index.js。
openharness-reply-in-cn/
├── src/host/index.ts # 注入「中文回复」system-prompt section(order 45)
├── src/client/index.ts # 注册 settings.section 侧边栏项「中文回复」
├── build.mjs / package.json / cordis.patch.yml / tsconfig.json
└── lib/ # 已构建 bundle
我(zuoguyoupan2023)开发维护的一系列 DeepSeek Harness(dsh)插件,均可按需通过 dsh plugin --profile web add <name> 安装:
| 插件 | 作用 | 安装 |
|---|---|---|
| adhdgofly-dsh-ext | DSH Web 界面词性高亮(名绿/动红/形紫/其他灰) | dsh plugin --profile web add adhdgofly-dsh-ext |
| openharness-reader | 工作区文件浏览/编辑 + Markdown 预览 | dsh plugin --profile web add openharness-reader |
| openharness-reply-in-cn | 强制模型用简体中文回复,侧边栏「中文回复」项 | dsh plugin --profile web add openharness-reply-in-cn |
| openharness-rule-for-dsh-plugin | 注入 DSH 插件开发的 CAN/SHOULD/MUST NOT 规范,侧边栏「插件开发规范」项 | dsh plugin --profile web add openharness-rule-for-dsh-plugin |
FAQs
DSH plugin that shows a '中文回复' label in the web sidebar and forces the model to reply in simplified Chinese.
We found that openharness-reply-in-cn demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.