Highlights
- Guards both PowerShell (
pwsh) and the official structured editor (str_replace_editor). - Workspace escapes and unverifiable mutation paths are non-overridable hard blocks.
- Unknown configured tool schemas fail closed instead of claiming coverage.
- Doctor v2 reports verified adapter coverage.
- Release assets include SHA-256 checksums and a CycloneDX 1.5 SBOM.
Validated with 57 tests and a clean @deepseek-ai/dsh@0.1.1-rc.2 web profile on Windows.
See the bilingual README for install, upgrade, scope, and limitations.