@suagr_xl/dsh-safety
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:sugarxl/dsh-safety说明文档
阅读完整 README ↗Configuration
Configure via the bundle row in a patch layer (e.g. the profile's
cordis.patch.yml):
- id: dsh-safety
config:
blockWriteRoots: ["C:\\extra\\protected"]
confirmDeleteRoots: ["D:\\data"]
snapshotExclude: ["settings.yaml", ".credentials.yaml"]
blockWrites: true
blockShellDestructive: true
audit: true
keepTrash: 200
keepSnapshots: 10
| Field | Default | Meaning |
|---|---|---|
blockWriteRoots | profile manifests/patches/lockfiles/node_modules, install dir, home patch/settings | no write/edit/delete |
confirmDeleteRoots | $HOME, profiles/*, .agent-presets | no delete without force (still trash-only) |
snapshotExclude | ["settings.yaml", ".credentials.yaml"] | files never copied into snapshots |
blockWrites | true | enable the write/edit guard |
blockShellDestructive | true | enable the shell-delete guard |
audit | true | journal destructive tool calls |
keepTrash / keepSnapshots | 200 / 10 | retention limits |