dsh-extra-paths：为 DSH 配置额外可写根目录
dsh-extra-paths 是 DSH 的 admin-security 类社区插件，通过包装 fs 与 bash 沙箱服务，在 settings.yaml 或 Web 设置页声明额外可写根目录与 scope/surfaces。支持相对路径、通配锚定 worktree 等结构，保存即生效并实时预览解析结果。适用于工作区外笔记、兄弟仓、worktree 等场景；需注意进程权限、always-write 风险及已知平台限制。
Read Moredsh-sandbox-permissions-not-strictly-wider-justification-empty-fix: Fix Sandbox Permissions and Empty Justification Validation Issues
This plugin fixes validation errors caused by an empty `justification` when the DSH agent operates in `danger-full-access` mode. By updating schema descriptions and runtime normalization mechanisms, it prevents the model from sending invalid parameters. The plugin supports automatic detection and patching of tools such as `pwsh` and `bash`. Installation must use the official command, and uninstallation first requires running a script to restore the original files. It is applicable to all non-default models and high-risk mode scenarios.
Read MoreDeepSeek Harness Plugin Collection: Sandbox Permission Handling and Path Viewer
`@MarvekG/dsh-plugins` is a plugin collection for the DeepSeek Harness ecosystem, designed to address two core issues in agent development: handling redundant sandbox permission errors and fixing file path click failures in the web interface. The plugin provides sandbox permission cleanup by removing redundant fields to avoid conflicts, and intercepts native file-open requests to display files or directories in the browser via the `/view` route instead. It includes two independent entry points, supports syntax highlighting, and can be installed from GitHub or a local path. To upgrade, uninstall the existing package first and then install the new one.
Read Moredsh-strip-sandbox-permissions: Strip Sandbox Permission Fields to Avoid False Rejections
`dsh-strip-sandbox-permissions` is a zero-dependency DeepSeek Harness (DSH) plugin designed to resolve false sandbox rejections caused by the `sandbox_permissions` field and its `justification` field included in model tool-call parameters. Positioned in the `llm/stream` waterfall flow, it removes these two fields after tool-call parameters are parsed, thereby preventing erroneous interruptions caused by non-strict permission broadening. It is fault-tolerant and modifies only valid objects, is licensed under the MIT License, can be installed via npm, and requires DSH to be restarted to take effect.
Read More@MarvekG/dsh-plugins: Fix DSH redundant sandbox upgrade errors and WSL path open failures
This article introduces the DSH out-of-tree plugin suite `@MarvekG/dsh-plugins` maintained by MarvekG (MIT-licensed, renamed from the old package `@MarvekG/dsh-bug-fix`), providing separate entry points for two common issues. The first one is `sandbox-same-mode`: when the session is already `danger-full-access`...
Read More