Plugin directory / Security / dsh-plan-preset
dsh-plan-preset
Verified · install-tested on dsh 23aisfvb
What it does
DSH plugin: read-only permission shown as Plan + permission escalation forbidden (approval never). Web search keeps working. 把只读权限显示为 Plan,并禁止申请权限升级。
Works — verified, early-stage project
DSH plugin: read-only permission shown as Plan + permission escalation forbidden (approval never). Web search keeps working. 把只读权限显示为 Plan,并禁止申请权限升级。 It installs cleanly and boots without issues in our testing. It's early-stage but functional.
“Verified” means our automated CI actually ran dsh plugin add in a clean profile and it booted — nothing more. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
README
dsh-plan-preset
把 DSH Web UI 的 read-only 权限预设映射为 opencode 风格的 Plan 模式。
效果
| 项 | 值 |
|---|---|
| 显示名 | 访问模式控件显示 "Plan"(原 "Read Only";图标仍为盾牌) |
| 文件 | 只读 — 读取全盘放行,写/删/改全部拒绝 |
| 网络搜索 | 可用 — web_search 与文件沙箱解耦,不受模式影响 |
| 权限申请 | 禁止 — 审批策略 never,任何权限升级请求自动拒绝(denial is final) |
| 工作流 | 只能问答调研 → 产出计划(exit_plan_mode 呈现)→ 用户批准后手动切换权限模式再开工 |
实现
纯组合补丁,零运行时代码:
cordis.patch.ymltargetpermission行(dsh-base),覆盖read-only预设:sandbox: read-only+approval: never+name: Plan- 其余预设(workspace-write / danger-full-access)原样重述,不受影响
安装 / 生效
profiles/web/package.json:dependencies加"dsh-plan-preset": "file:E:/agent/deepseek_harness/Plugins/dsh-plan-preset",dsh.profile.bundles加"dsh-plan-preset"cd profiles/web && pnpm install- 重启
dsh web
⚠️ 升级核对
Cordis patch 整行覆盖 config。若 dsh 升级后 permission 行的默认预设
发生变化(新增预设、字段调整),本文件会遮蔽新配置——升级后请运行dsh --profile web --dump-config 核对 permission 行。
验证
dsh --profile web --dump-config # permission 行应含 read-only.name=Plan / approval=never
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install dsh-plan-preset for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:23aisfvb/dsh-plan-presetHeadless (CLI) profile:
dsh plugin --profile headless add github:23aisfvb/dsh-plan-presetTest report
Verified: L1 install + L2 load + L3 runtime from GitHub source on dsh 0.1.0-rc.6.
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-plan-preset/)<a href="https://dshbase.com/plugins/dsh-plan-preset/"><img src="https://dshbase.com/badges/dsh-plan-preset.svg" alt="dshbase install-tested"></a>