dsh-one-gateway
Private, zero-trust gateway for DeepSeek Harness Web: loopback-only proxy, exact principal allowlists, and provider-agnostic onboarding
20 results
Private, zero-trust gateway for DeepSeek Harness Web: loopback-only proxy, exact principal allowlists, and provider-agnostic onboarding
Thin routing policy for DeepSeek Harness: keyword routing, allowlisted model switching, and isolated image generation. / DeepSeek Harness 薄路由策略:关键词路由、白名单模型切换和隔离生图。
Allowlisted Telegram bot plugin for remote DeepSeek Harness conversations and monitoring
Better DSH: archived-session management, task-stop desktop notifications, an update checker, model routing (keyword rules + allowlist-gated model_route), multi-task scheduled triggers (interval heartbeats & fixed-time tasks), and a DeepSeek-style message scroll nav for the dsh web GUI
Native DSH provider hub with named API keys, per-key model allowlists, OAuth accounts, failover, and redacted logs
DeepSeek Harness mobile pairing remote plugin: E2EE companion over a dual-plane allowlisted RPC (LAN / Tailscale / optional Cloudflare Quick Tunnel or self-hosted rendezvous).
Configurable non-public address allowlists for DeepSeek Harness web_fetch
DSH sandbox extension: configurable trusted writable roots outside the workspace, for both sandboxed CLI commands and the write/edit tools. 为 DSH 默认沙箱增加可配置的「沙箱授权目录」,允许工作区外的受信修改。
DeepSeek Harness tool: launch allowlisted Windows apps from WSL.
DSH bundle: thin Telegram bridge (long-poll Bot API, allowlist, per-chat agent sessions).
Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log
【实验性】只读安全审计模式插件(自动只读、工具级白名单、强制交付选择)· EXPERIMENTAL plugin for the read-only security audit mode (auto read-only, tool allowlist gate, mandatory delivery choice);日常使用推荐 dsh-presets 仓库的原生纯预设版。
Static and runtime security guard for the DeepSeek Harness: scans plugins and workspaces for malicious code, context injection and token waste (block/warn/clean), intercepts dangerous runtime tool calls and prompt steps, and exposes /scan, plugin_scan, the scan web panel and a user-managed allowlist. Fully static analysis — never executes scanned code.
Read allowlisted remote logs over SSH from DeepSeek Harness conversations
A host-allowlisted CDP browser-reading tool for DeepSeek Harness.
Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批(write/edit + bash),设置页可视化调整。
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
Telegram channel for DeepSeek Harness — chat with your agent from Telegram, with a deny-by-default allowlist and in-chat tool approval.
Visual web settings panel for the official @tencent-connect/dsh-qqbot plugin: manage the QQ Bot AppID/AppSecret, c2c & group access modes/allowlists, cwd and requireMention directly in the DSH web settings page (reads/writes the qqbot profile's cordis.patch.yml).
Configurable auto-approval for DeepSeek Harness: intercepts approval/request and answers allowed-once/rejected by policy (allow-all / allowlist / deny-always), with a full audit log — so the human is only asked when the policy says so.