Команды для терминала DSH
dsh plugin --profile web add github:DWJZ/dsh-allowЗапустите команду в терминале, где работает DeepSeek Harness. Перезапуск применит плагин автоматически.
Плагин «dsh-allow» для DeepSeek Harness: Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.
★ 1 звёзд GitHub21 сентября 2026 г. добавлен
Что делает dsh-allow
Плагин «dsh-allow» для DeepSeek Harness: Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.
Показать оригинальное описание (EN/ZH)
Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.
Как удалить при необходимости
dsh plugin --profile web remove dsh-allowБезопасность и аудит
Плагины выполняются в окружении пользователя DSH. Рекомендуется проверять исходный код, зависимости и запрашиваемые разрешения в репозитории автора перед установкой.