dsh-strip-sandbox-permissions
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
41 results
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
Renders edit and write tool calls as always-expanded side-by-side diffs, with optional syntax coloring and word-level highlighting.
DSH Web plugin for Agent execution quality diagnosis reports.
Fold tool-call cards in the DSH conversation into a minimal expander — maximum collapse, click to expand
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Fail-closed runtime tool-call loop guard for DeepSeek Harness.
DeepSeek Harness web UI plugin: tool-call value graph over conversation trajectories — call cost/count/duration weights, bottleneck split, and next-turn optimization prompts.
Neutralize tool calls with invalid JSON arguments on the wire, so one malformed model generation cannot brick a session against strict OpenAI-compatible servers (vLLM et al).
DeepSeek Harness plugin that shows the actual provider/model used by each subagent inside native tool-call rows and the native subagent catalog.
Restyle pwsh tool-call cards in DSH session replies (CSS-injection + optional DOM decoration), modeled on dsh-file-mentions
Serena dashboard lens for DeepSeek Harness — m4/m5 tabs embedding Serena's tool-call stream inside the GUI
Auto-fold context/system messages in DSH conversation — hide the large system prompt / instructions by default, click to expand.
Per-process tool-call statistics for DeepSeek Harness (not token usage): adds a tool_stats tool reporting call counts, error counts, and average durations.
Daily activity brief for DSH: per-session turns/messages/tool-call stats across live sessions. Read-only.
Session reference plugin for DeepSeek Harness: one-click copy of the current session's @session-id reference in the header, an @ mention menu that lists sessions by title, and a session_read tool that reads any local session by @session-id / dsh-session:URI / @title and projects it to readable conversation text — no more download-transfer-unzip to share context between sessions.
DSH plugin: adapts DashScope/闂傚倸鍟锟犲闯闁垮顩查柟瀵稿У椤忋儵鏌?DeepSeek endpoints that lack native tool calling by converting tool definitions to prompt text and parsing model responses for tool calls.
Local tool-call failsafe and DWGR-8 personal governance proxy gate for DSH: blocks high-risk shell patterns, credential leaks, and enforces declarative param-level boundaries with hash-linked JSONL audit logs and optional Gateway.