DeepSeek Harness Plugin: dsh-full-with-approval
The DeepSeek Harness (DSH) plugin `dsh-full-with-approval` introduces a hybrid “full compute access + write approval” mode, filling a gap for scenarios that require GPU inference while strictly restricting file writes. The plugin activates the `full-with-approval` preset through the mount layer, retaining `danger-full-access` (including support for CUDA, networking, etc.) while adding an interactive approval mechanism for shell command execution and writes to files outside the workspace or to protected files, helping prevent accidental modification of sensitive files. After installation, users can activate it via the command line or Web UI and adjust protected paths and rules through configuration files. The plugin uses a non-invasive design, but its shell-checking heuristic mechanism may be subject to potential bypasses.
Read Moredsh-workspace-scope-selection: The Fourth Permission Option for DeepSeek Harness Sessions
The DeepSeek Harness plugin `dsh-workspace-scope-selection` provides a “Selected Workspace Write” option for session permissions, allowing users to precisely specify writable directories via a directory tree editor and balancing security with flexibility. The plugin enforces this restriction in filesystem and Shell tools and supports session persistence. Note that on Windows, only writes to the workspace and temporary areas are supported; out-of-scope write operations require approval escalation.
Read More