dsh-edit-guardian
DSH plugin: file-change diff bar with keep/undo summary, and a dangerous-command approval gate with red highlighting for bash/pwsh
61 results
DSH plugin: file-change diff bar with keep/undo summary, and a dangerous-command approval gate with red highlighting for bash/pwsh
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
Add and manage Windows and WSL workspaces from the sidebar; WSL workspaces run Linux commands by default (wsl_bash tool).
Shell command cards (bash / pwsh) for the DSH web UI: fully custom React-rendered tool cards replacing the official terminal tool rows — status dot, cwd, error pill, copy command/output, numbered command + scrollable output.
DSH plugin that applies an explicit, RTK-based command-output filter to bash tools at boot.
修复 sandbox_permissions 和 justification 字段在 pwsh/bash/fs/dsh-sandbox 中的 no-op 升级报错。当会话已是 danger-full-access 模式时,模型携带空 justification 或重申同一模式被拒的问题。
Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批(write/edit + bash),设置页可视化调整。
DSH 危险命令守卫:通过 tools/pre-execute 门禁拦截 bash/pwsh 高危命令(rm -rf /、mkfs、dd 写设备、管道执行脚本、git push --force 等),支持分级策略(极高危始终拒绝 / 中危跟随全局 deny/ask/log)、用户自定义规则与白名单。
对话流实时任务进度:后台任务(pwsh/bash/subagent 等 run_in_background)显示状态、耗时、进度条、预计剩余时间与停止按钮;非消费式 jobs.get 跟踪,模型 job_output 不受影响。
DSH 权限预设 workspace-write++:工作区内写文件,可在设置里配置放行 Git Bash / PowerShell 等进程沙箱(修复 Windows ACL 下 MSYS 内存映射错误)。
DeepSeek Harness web 插件:给 bash/pwsh 命令与 read 的代码输出做分层语法染色(认得出来才染,表格/日志保持原样),自带 VS Code Dark+ 风格配色,跟随主题;read / bash / pwsh 卡片支持可开关的默认折叠。
DSH bundle: re-inject KEY/PASSWORD/SECRET/TOKEN variables from the launching environment into dsh bash subprocesses under their original names
Docker-container (WSL2 backend) shell executor for the DeepSeek Harness bash capability seam on Windows: every bash tool call runs in a disposable Linux container with the workspace bind-mounted.