dsh-write-protect
securitytested: passnpmlow
Keep declared workspace subpaths (e.g. .git) read-only, honor a read-only rules file at the workspace root, grant extra writable roots under workspace-write, and let the model request session-scoped write access; enforced for sandboxed CLI commands and the write/edit tools.
下载量 / Downloads
1,089
依赖体积 / node_modules
16.77 MB
测试时间 / Tested
2026-11-06
DSH 版本 / Version
0.2.2-rc.1
Install
dsh plugin --profile web add dsh-write-protect
Sandbox test results
| Stage | Result |
|---|---|
| 1 install | ✓ |
| 2 list | ✓ |
| 3 mount | ✓ |
| 4 boot | — |
Four stages run in an isolated sandbox: install (network on) → list → mount → boot (last three with no network).
Declared permissions
fs-read · network · env