DeepSeek HarnessHub
提交插件

zjuhbh/dsh-full-with-approval ↗★ 0

dsh-full-with-approval

DSH 配置文件插件：提供无限制（支持 GPU）的会话沙箱，并在对工作区外或受保护文件进行写入时触发逐笔用户审批。

AI 分析

核心用途是在保障安全的前提下提供高权限执行环境。适合需要运行 GPU 任务或修改敏感文件，同时要求严格写保护的用户。

效率
包名
dsh-full-with-approval
版本
0.1.0
许可证
MIT
最近更新
2026年8月22日

安装

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:zjuhbh/dsh-full-with-approval

说明文档

阅读完整 README ↗

Usage

  • In the web UI open the permission selector and pick Full With Approval (4th option), or run: 
    /permission full-with-approval
  • While the preset is active, protected writes raise the approval prompt; approve to let that one write through.
  • Switch back to workspace-write / danger-full-access / read-only at any time; the gate follows the preset.

Configuration

The plugin entry config (patch cordis.patch.yml in the profile or override via cordis.patch.yml of your profile):

- id: full-with-approval
  config:
    # Globs matched against the POSIX path relative to the session workspace.
    # An absolute pattern matches the absolute target path.
    protectedPaths:
      - ".git/**"
      - ".env*"
      - ".env/**"
    # Absolute scratch roots that never prompt (besides the platform temp dir).
    extraWritableRoots: []

Changing protectedPaths takes effect on reload/restart.