@j0ss077/dsh-always-require-tools-approval
Require a one-shot user approval before configured tools execute
75 results
Require a one-shot user approval before configured tools execute
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
Transport-level authentication gate for the DeepSeek Harness Web GUI
NeevSandbox execution providers for DeepSeek Harness
DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction
One-click control that closes a session's persistent bash terminal (dual-face: /exit-bash command + session-header button) so the sandbox mode can be switched
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
DSH web plugin: play a notification chime when the agent asks the user a question (ask_user_question / plan review) or requests approval (sandbox escalation, tool approval).
Native Auto Review for DeepSeek Harness with automatic host compatibility selection
LLM pre-review for sandbox-escalation approvals: an independent-context LLM gate answers sandbox escalation requests before they reach the user, falling back to the user on any failure.
Maestro Guard — pre-execute safety gate: native DSH approval prompts, parsed command-surface rules, decision journal
DeepSeek Harness plugin: installs the 'wsl' agent preset — the Windows WSL variant of the standard preset that routes the bash tool through Windows Subsystem for Linux (WSL), with automatic shell discovery and sandbox-aware gating.
Stent MXC sandbox sidecar for the DeepSeek Harness
Portable DSH WebUI skill security inspection with local rules and optional model review
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required
Retirement planner for DeepSeek Harness: China's statutory retirement age under the 2025 phased-delay reform, a live countdown, and a projected monthly pension — as a tool, a sidebar panel, and an embedded skill
DeepSeek Harness 自动审批门控 + 设置页
dsh 插件 · 用户管理:给 dsh web 加登录门禁——未登录访问弹登录/注册页,首个注册者自动成为管理员;支持 TOTP 两步验证(验证器 App 扫码/手输密钥绑定);管理员可管理所有用户(删除、重置密码、角色调整、重置两步验证)并查看登录记录与访问记录,普通用户只能查看和修改自己的信息。
DSH plugin: a codex-style apply_patch tool (*** Begin Patch / *** Update File / *** Add File / *** Delete File) injected into the model toolset through DSH's built-in sandbox, with a settings card to choose injection scope (off / GPT models only / all models).
Offline-first static admission scanner for DeepSeek Harness plugins.
Session management for DeepSeek Harness (DSH): list all historical sessions in a settings page and physically delete a session's log directory (with a type-to-confirm dialog and an audit trail).
Forgetting engine for AI agents — memory TTL, decay, eviction, audit. The opposite of memory programming.
Governed platform access for DeepSeek Harness — no credential on the machine