zjuhbh/dsh-full-with-approval ↗★ 0

dsh-full-with-approval

DSH profile plugin: unconfined (GPU-capable) session sandbox plus per-operation user approval for writes outside the workspace or to protected files.

包名: dsh-full-with-approval
版本: 0.1.0
许可证: MIT
最近更新: 2026年8月22日

安装

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:zjuhbh/dsh-full-with-approval

说明文档

阅读完整 README ↗

Usage

In the web UI open the permission selector and pick Full With Approval (4th option), or run:
```
/permission full-with-approval
```
While the preset is active, protected writes raise the approval prompt; approve to let that one write through.
Switch back to workspace-write / danger-full-access / read-only at any time; the gate follows the preset.

Configuration

The plugin entry config (patch cordis.patch.yml in the profile or override via cordis.patch.yml of your profile):

- id: full-with-approval
  config:
    # Globs matched against the POSIX path relative to the session workspace.
    # An absolute pattern matches the absolute target path.
    protectedPaths:
      - ".git/**"
      - ".env*"
      - ".env/**"
    # Absolute scratch roots that never prompt (besides the platform temp dir).
    extraWritableRoots: []

Changing protectedPaths takes effect on reload/restart.