Guarded Full Access / 受守护的全权限

DSH (DeepSeek Harness) plugin that adds a destructive command guard on top of danger-full-access.

DSH (DeepSeek Harness) 插件：在 danger-full-access 基础上加一层“破坏性命令护栏”。

• More open than workspace-write: filesystem / shell still keep Full Access. 比 workspace-write 更开放：文件系统 / shell 仍保持 Full Access。
• Safer than danger-full-access: batch delete, format, disk wipe, forced git operations, mass permission changes are blocked or require approval by default. 比 danger-full-access 更安全：批量删除、格式化、抹盘、强制 Git 操作、批量权限变更等默认拦截或要求批准。

⚠️ This is a “guardrail / last reminder”, not an OS-level security boundary. Command-line text matching can be bypassed by variables, encoding, or indirect execution. Use a real sandbox or a dedicated permission account when you need strong isolation. ⚠️ 这是“减震器 / 最后一道提醒”，不是 OS 级安全边界。命令行文本匹配可能被变量、编码、间接执行绕过；真正需要强隔离时请使用系统沙箱或专用权限账号。

Features / 特性

• Full Access remains available for normal operations / 普通操作仍保持 Full Access。
• Destructive commands are intercepted before execution via the official tools/pre-execute seam / 通过官方 tools/pre-execute 扩展点在执行前拦截破坏性命令。
• Built-in audit log / 内置审计日志。
• Slash commands for runtime control / 提供运行时控制命令。

Modes / 模式

Mode / 模式	Behavior / 行为
block	Reject dangerous commands directly / 命中危险命令直接拒绝
ask	Return “requires user approval” and guide the user to confirm or allowlist (default) / 命中危险命令返回“需要用户批准”，引导用户确认或加入允许列表（默认）
off	Disable the guard / 关闭守卫，完全放行

Installation / 安装（本地插件）

1. Put this repo at D:\AI\Guarded-Full-Access (or your preferred path). / 把本仓库放到 D:\AI\Guarded-Full-Access（或你喜欢的路径）。
2. Register it in the DSH Web profile / 在 DSH Web profile 注册：
   • Add to C:\Users\Administrator\.dsh\profiles\web\package.json dependencies:

     "dsh-guarded-full-access": "file:D:/AI/Guarded-Full-Access"
     

   • Add to C:\Users\Administrator\.dsh\profiles\web\cordis.patch.yml:

     - insert:
         - id: dsh-guarded-full-access
           name: dsh-guarded-full-access
           config:
             mode: ask