Sandbox & Runtimedsh-plugin

dsh-approve-for-me

Unofficial DeepSeek Harness plugin for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk checks and literal command-prefix rules, optionally uses a tool-free LLM reviewer, grants only one allowed-once per decision, and returns uncertain requests to native human approval.

Stars
15
Forks
1
Open issues
0
Last push
Sep 12, 2026
Latest release
—
24h Growth
+0
7d Growth
+0

Installation

dsh plugin --profile web add dsh-approve-for-me@latest

Overview

Unofficial DeepSeek Harness plugin for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk checks and literal command-prefix rules, optionally uses a tool-free LLM reviewer, grants only one allowed-once per decision, and returns uncertain requests to native human approval.

  • Rule-gated automatic approval for Shell and PowerShell sandbox escalations.
  • Optional tool-free LLM reviewer can only allow a matching candidate or return it to the user.
  • Every successful decision grants one allowed-once; it never grants permanent access.
  • Fixed high-risk checks run before user rules and the reviewer; a high-risk result returns to native human approval.
  • Literal command-prefix rules for shell or pwsh; every segment of a compound command must match independently.
  • Web settings card is optional; configuration can also be edited in settings.yaml.
  • YAML mode can be rules-only or rules-and-llm; reviewer provider/model can be pinned or inherited from the session.
  • Failure, timeout, invalid output, ambiguity, or mismatch returns to human approval.

Related plugins

dsh-server-deployment

Server-side deployment for DeepSeek Harness: a zero-dependency Node gateway adds a multi-user login portal, per-user independent DSH instances with OS-level isolation, per-user API keys, and a delivery file drawer. File access runs through sudo helper scripts using runuser to drop privileges to dsh-<name> (fixes issue #1 TOCTOU). Not a local/desktop tool.

Sandbox & Runtimedsh-plugin
81JavaScriptAug 18, 2026
QAQ

QAQ is a launch resilience guard for DeepSeek Harness (DSH) by WTStarMark. It supervises the `dsh web` process, reads the browser's real DOM through headless Chrome + CDP, detects host crashes, Web UI red screens and plugin degradation, then restores the configuration snapshot from the last successful boot and restarts, preserving the broken config for manual recovery. It is described as non-invasive, shipped as a one-command script with structured logs, and includes a plugin hot-update guard (c

Sandbox & Runtimedsh-plugin
41TypeScriptAug 17, 2026
DSHBox

DSHBox is an Android application that lets users run the complete DeepSeek Harness locally on Android 10+ ARM64 devices by bundling Debian, Node.js, DSH, PRoot, and an embedded WebView into one APK without root or Termux.

Sandbox & Runtimedsh-plugin
30KotlinSep 9, 2026
dsh-container

Docker packaging of the npm-released DeepSeek Harness (DSH), published for linux/amd64 and linux/arm64. It preinstalls DSH and its runtime dependencies so the host needs no Node.js or npm packages, supports LAN WebUI access, offers an optional shared admin key, runs as a non-root user with recommended read-only root filesystem and dropped Linux capabilities, and keeps configuration and workspace data persistent. The README warns against exposing the service directly to the public internet.

Sandbox & Runtimedsh-plugin
10JavaScriptAug 20, 2026