dsh-full-with-approval
Fourth permission preset for dsh: unconfined, GPU-capable sessions (danger-full-access) with per-operation user approval for writes outside the workspace or to protected paths (.git/**, .env*); implemented purely as a bundle over the official tools/pre-execute ask hook, no core edits.
dsh 第四个权限预设:进程全权限(GPU 可用),同时工作区外与受保护文件(.git/**、.env*)的写入逐次向用户审批;纯插件实现,零核心改动。
How to install
dsh plugin add github:zjuhbh/dsh-full-with-approval About
dsh-full-with-approval A DeepSeek Harness (DSH) profile plugin that adds a fourth permission preset, **full-with-approval**: **Full compute access** — the session sandbox mode is danger-full-access, so processes run *unconfined*: CUDA/GPU, devices, network and any binary your machine can run. **Approval-gated file edits** — while this preset is active, every write/edit that would modify a file **outside the session workspace** (except the platform temp areas and configured scratch roots), or a **protected file** inside the workspace (default: .git/**, .env*), asks the user for one-shot approva…
Recommendation signals
Meta
- License
- MIT
- Language
- JavaScript
- GitHub stars
- 0
- mo. downloads
- –
- Last push
- 2026-08-24
- Created
- 2026-08-22
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- deepseek, deepseek-harness, deepseek-harness-plugin, dsh, dsh-plugin, dsh-plugins
Related plugins
dsh-auth-gateway
xbzbing/dsh-auth-gateway
Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.
dsh-approval-llm
Letter2025/dsh-approval-llm
Model-based permission approval: an approval-request answerer backed by a separate reviewer model.
dsh-auto-review
PerryLink/dsh-auto-review
Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
dsh-yolo-mode
SeverusZh/dsh-yolo-mode
LLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.