dsh-remote-local-plugin 0.8.7 → 0.8.8

package/README.md

@@ -7,7 +7,7 @@ Remote development that appears as ordinary local sessions.
 This plugin targets the official **DSH Desktop** application. Tested/supported versions:
 
 - [DSH Desktop](https://github.com/deepseek-ai/deepseek-harness) [`0.2.1-rc.2`](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-rc.2)
-- Plugin [`0.8.7`](https://www.npmjs.com/package/dsh-remote-local-plugin)
+- Plugin [`0.8.8`](https://www.npmjs.com/package/dsh-remote-local-plugin)
 - Remote DSH [`0.2.1-rc.2`](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-rc.2)
 - Remote [Node.js `22.19+`](https://nodejs.org/en/download) on Linux/macOS
 

package/lib/index.js

@@ -1,4 +1,4 @@
-/* dsh-remote-local-plugin@0.8.7 — bundled host entry */
+/* dsh-remote-local-plugin@0.8.8 — bundled host entry */
 
 // src/index.ts
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
@@ -1107,6 +1107,13 @@ var RemoteMirrorService = class {
     runtime.agent = agent;
     this.#runtimes.set(record.localSessionId, runtime);
     this.#registrations.set(record.localSessionId, this.#agents.enter(agent, void 0));
+    const localMode = this.#localSandboxMode(session);
+    const remoteMode = latestRemoteSandboxMode(snapshot.events);
+    if (localMode !== void 0 && remoteMode !== void 0 && localMode !== remoteMode) {
+      void this.#hosts.setSandboxMode(record.hostId, record.remoteSessionId, localMode).catch((error) => {
+        this.#ctx.logger.warn("dsh-remote-local: initial sandbox mode failed: %s", String(error));
+      });
+    }
     await this.#save();
     this.#schedule(runtime);
     if (live) {
@@ -1242,9 +1249,18 @@ var RemoteMirrorService = class {
   }
   #onLocalSessionEvent(session, event) {
     const candidate = event;
-    if (candidate.type !== "model/selection") return;
+    if (candidate.type !== "model/selection" && candidate.type !== "sandbox/mode") return;
     const runtime = [...this.#runtimes.values()].find((item) => item.session.id === session.id);
     if (runtime === void 0 || runtime.stopped || runtime.applyingRemote) return;
+    if (candidate.type === "sandbox/mode") {
+      const mode = candidate.data.mode;
+      if (mode !== "read-only" && mode !== "workspace-write" && mode !== "danger-full-access") return;
+      void this.#hosts.setSandboxMode(runtime.record.hostId, runtime.record.remoteSessionId, mode).catch((error) => {
+        runtime.lastError = error instanceof Error ? error.message : String(error);
+        this.#ctx.logger.warn("dsh-remote-local: remote sandbox mode failed: %s", runtime.lastError);
+      });
+      return;
+    }
     const record = candidate.data;
     if (typeof record.provider !== "string" || typeof record.model !== "string") return;
     const selection = {
@@ -1258,6 +1274,11 @@ var RemoteMirrorService = class {
       this.#ctx.logger.warn("dsh-remote-local: remote model selection failed: %s", runtime.lastError);
     });
   }
+  #localSandboxMode(session) {
+    const projections = this.#ctx.get("sessionProjections");
+    const mode = projections?.stateOf?.(session, "sandboxMode");
+    return mode === "read-only" || mode === "workspace-write" || mode === "danger-full-access" ? mode : void 0;
+  }
   #defaultSelection() {
     const defaults = this.#ctx.get("agentDefaultModel");
     const candidate = defaults?.currentSelection?.();
@@ -1514,6 +1535,15 @@ function latestSelection(session) {
   }
   return void 0;
 }
+function latestRemoteSandboxMode(events) {
+  for (let index = events.length - 1; index >= 0; index -= 1) {
+    const event = events[index];
+    if (event === void 0 || event.type !== "sandbox/mode") continue;
+    const mode = event.data.mode;
+    if (mode === "read-only" || mode === "workspace-write" || mode === "danger-full-access") return mode;
+  }
+  return void 0;
+}
 function contentText(message) {
   if (typeof message === "string") return message;
   if (typeof message !== "object" || message === null) return "";
@@ -2271,6 +2301,9 @@ function sessionPath(sessionId) {
 function sessionModelPath(sessionId) {
   return `${sessionPath(sessionId)}/model`;
 }
+function sessionSandboxModePath(sessionId) {
+  return `${sessionPath(sessionId)}/sandbox`;
+}
 function sessionPromptPath(sessionId) {
   return `${sessionPath(sessionId)}/prompt`;
 }
@@ -2533,6 +2566,13 @@ var RemoteAgentClient = class {
       body: request
     });
   }
+  /** Set the file-effect sandbox mode for one remote session. */
+  async setSandboxMode(sessionId, request) {
+    await this.#request(sessionSandboxModePath(sessionId), isAcceptedResult, {
+      method: "POST",
+      body: request
+    });
+  }
   /** Send a text prompt to a remote session. */
   async promptSession(sessionId, request) {
     await this.#request(sessionPromptPath(sessionId), isAcceptedResult, {
@@ -4493,6 +4533,15 @@ var RemoteHostsService = class {
       throw this.#remoteFailure(id, error);
     }
   }
+  /** Set the file-effect sandbox mode for one remote session. */
+  async setSandboxMode(id, sessionId, mode) {
+    const client = this.#requireClient(id);
+    try {
+      await client.setSandboxMode(sessionId, { mode });
+    } catch (error) {
+      throw this.#remoteFailure(id, error);
+    }
+  }
   /** Follow a live remote session from a cursor as an SSE-backed stream. */
   async *followSessionEvents(id, sessionId, cursor, signal) {
     const client = this.#requireClient(id);

package/lib/types/service.d.ts

@@ -61,6 +61,8 @@ export declare class RemoteHostsService {
     workspaces(id: string): Promise<readonly RemoteWorkspace[]>;
     /** List remote sessions, optionally within one workspace. */
     sessions(id: string, workspaceId?: string, includeSubagents?: boolean): Promise<ListSessionsResult>;
+    /** Set the file-effect sandbox mode for one remote session. */
+    setSandboxMode(id: string, sessionId: string, mode: 'read-only' | 'workspace-write' | 'danger-full-access'): Promise<void>;
     /** Follow a live remote session from a cursor as an SSE-backed stream. */
     followSessionEvents(id: string, sessionId: string, cursor: number, signal: AbortSignal): AsyncGenerator<SessionStreamFrame>;
     /** Read one session snapshot. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-local-plugin",
-  "version": "0.8.7",
+  "version": "0.8.8",
   "description": "DSH remote-development local plugin: host registry, SSH tunnels, remote workspace/session discovery, an authenticated Connection RPC surface, agent tools, and a Settings page.",
   "keywords": [
     "dsh",