dsh-permissions
DeepSeek Harness 权限规则引擎:hard/deny/ask/allow 四级规则(hard 高于全访问)、全局与 workspace 作用域、通配符路径保护、可视化草稿式编辑器,规则持久化于 settings.yaml
362 results
DeepSeek Harness 权限规则引擎:hard/deny/ask/allow 四级规则(hard 高于全访问)、全局与 workspace 作用域、通配符路径保护、可视化草稿式编辑器,规则持久化于 settings.yaml
Security audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party plugins
Fully customizable keyboard shortcuts for the DeepSeek Harness WebUI — macOS-first defaults, 34 pre-registered features across session/view/clipboard/model/permission/system groups, one-click recording to add your own bindings, silent permission cycling with color feedback.
DeepSeek Harness 自动审批门控:Flash 模型预判写入/命令是否不可回补,安全自动批准、危险转人工(fail-safe),最小人工介入,含人工审查 UI
Model-reviewed Auto Approve permission preset for the DeepSeek Harness Web UI
DSH sandbox extension: configurable trusted writable roots outside the workspace, for both sandboxed CLI commands and the write/edit tools. 为 DSH 默认沙箱增加可配置的「沙箱授权目录」,允许工作区外的受信修改。
Fail-closed microsandbox microVM provider and model-facing guest tools
Allow, ask, or deny DeepSeek Harness tool calls before execution
Session execution analytics and audit reports for DeepSeek Harness. Understand how your agent actually worked: steps, tool calls, failures, repeated actions, token usage and verification signals.
Approval mode control for DeepSeek Harness: default approval (ask) or bypass approval (auto-approve every tool call), next to the permission selector. DSH 审批模式插件。
Observe-only hash-chained evidence receipts for DeepSeek Harness
DSH tool-call compatibility: strips sandbox_permissions/justification from tool-call arguments for third-party models (GPT etc.), and lets the user skip possibly-stuck tool calls with an LLM-facing notice.
Run the DeepSeek Harness agent's filesystem, bash and PTY terminals inside a Docker container, so execution state survives a harness restart.
DSH compatibility plugin that treats redundant non-escalating sandbox permission fields as a no-op
Discovery + management wrappers around the gh CLI for AI coding agents. Ships as a standard agent skill, an Agent Plugins 1.0 plugin (plugin.json + skills/), and a dsh plugin (dsh.bundle.patch registers the skill at runtime).
Export DeepSeek Harness sessions to Markdown for review, blogging and audit.
Content-addressed receipts for skills actually loaded by DeepSeek Harness
dsh-yolo-mode —— DeepSeek Harness 双面包插件:当会话处于可写沙箱模式且审批策略为 ask 时,用大模型自动裁决沙箱升权申请,支持内置预设与自定义权限层级,并提供宿主 settings + 自发布设置桥(/yolo-mode)与 Web 客户端 UI。
Security-first QQ Bot channel plugin for DeepSeek Harness, built on Tencent's official SDK
DeepSeek Harness desktop popup plugin: shows AI thinking status in a bottom-right always-on-top card, alerts on permission requests and completion, with a DeepSeek-style UI
DSH 测试沙盒插件:把开发/测试任务路由到进程级隔离的沙盒实例(独立进程 + 独立 DSH_HOME + 独立端口),提供创建/注入/运行/健康检查/停止/销毁/清理与门禁式合回等原生工具,全程零影响本体(3080)。
Audit the DeepSeek Harness plugin list by origin (official vs self-installed): a /plugin-audit command plus a Source tab in Web Settings
CC-style auto mode for DeepSeek Harness: deterministic deny/allow rules + pre-execute gate + model-agnostic two-stage classifier. Two-state (allow/reject) classifier since 0.8.0. TypeScript rewrite merging dsh-auto-mode v0.4.1 with Nuo-cl/dsh-auto-mode native integration.
DSH context-window relief: knowledge base (ctx_index/search), routing enforcement (deny flood tools), sandboxed execution (ctx_execute/batch Think-in-Code), and session continuity (post-compaction restore).