read-only 9

Source-aware native DSH Topics with manual drafts, permissions, visual boards and learning cards

DSH sandbox extension: keep declared workspace subpaths (e.g. .git) read-only, honor a read-only rules file at the workspace root, grant extra writable roots under workspace-write, and let the model request session-scoped write access; enforced for sandbo

DeepSeek Harness plugin: read-only GitHub access for agents (github_probe / github_pr / github_issue / github_file / github_api). Routes every request inside the tool — api.github.com (direct or proxy), gh CLI, git protocol (plugin-owned fetch cache plus

DSH 侧枝会话：从主会话派生一条只读分支，每轮追问都用主会话最新的已结算内容重建上下文以继续命中前缀缓存，答案不进入主会话的模型上下文。

Read-only Excel analysis toolkit for dsh (DeepSeek Harness). Streaming xlsx reader (yauzl + sax), describe / filter / pivot tools, big-file safe.

Read-only git provenance tools for DeepSeek Harness agents

dsh 数据库浏览插件:会话顶部「数据库」视图 Tab,多连接管理、点表分页浏览,只读多层防护,驱动注册表架构目标支持尽可能多的数据库,dsh plugin add 一条命令安装

[支持 DSH 0.1.7–0.2.x / DSH 0.1.7–0.2.x compatible] Local file recall for DeepSeek Harness: it watches the folders you choose and keeps a SQLite index of what appeared — name, type, size, appeared-at, location and origin — so "where did I put that file?" be

DSH plugin: same-workspace cross-session read-only browsing for models — list_sessions / read_session / search_sessions tools with strict cwd scoping, UNTRUSTED snapshot marking, and bounded budgets (optional SQLite FTS full-text search).