@suagr_xl/dsh-safety

A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.

AI Analysis

核心用途是为 DSH 运行环境提供文件系统写入保护和配置备份。适合担心 AI 误删重要文件、破坏系统配置，需要高安全防护和操作审计的生产环境用户。

Package

@suagr_xl/dsh-safety

Version

0.1.2

License

MIT

Last updated

Aug 18, 2026

Configuration

Configure via the bundle row in a patch layer (e.g. the profile's cordis.patch.yml):

- id: dsh-safety
  config:
    blockWriteRoots: ["C:\\extra\\protected"]
    confirmDeleteRoots: ["D:\\data"]
    snapshotExclude: ["settings.yaml", ".credentials.yaml"]
    blockWrites: true
    blockShellDestructive: true
    audit: true
    keepTrash: 200
    keepSnapshots: 10

Field	Default	Meaning
`blockWriteRoots`	profile manifests/patches/lockfiles/node_modules, install dir, home patch/settings	no write/edit/delete
`confirmDeleteRoots`	`$HOME`, `profiles/*`, `.agent-presets`	no delete without `force` (still trash-only)
`snapshotExclude`	`["settings.yaml", ".credentials.yaml"]`	files never copied into snapshots
`blockWrites`	`true`	enable the write/edit guard
`blockShellDestructive`	`true`	enable the shell-delete guard
`audit`	`true`	journal destructive tool calls
`keepTrash` / `keepSnapshots`	`200` / `10`	retention limits

@suagr_xl/dsh-safety

AI Analysis

Install

README

Configuration