dsh-shield

Letting an agent free-run bash commands is terrifying because a single rm -rf is irreversible. dsh-shield fixes this without approval gates, popups, or slowdowns: it silently renames directory targets into a trash bin before the command executes, lets the command finish normally, and the agent feels nothing. Deleted something by mistake? Open the trash and restore it in one click.

Three core scenarios are covered. First, directory deletion: rm -r, rmdir, del /s, and fs-tool directory removals are all redirected to the trash via an instant same-volume rename before execution. Second, glob rescue: patterns like rm -rf dir/* trigger per-subitem salvage, resolving symbolic links to their real targets so actual content is preserved. Third, symlink protection: rm -rf link/ is rewritten to delete the link itself, never following it to the real content. The trash supports browsing, restoring, permanent deletion, and clearing, with automatic cleanup after 14 days or 5 GB. An optional system-trash mode is also available.

This plugin is built for developers who let agents execute shell commands autonomously in DSH. Instead of layering a human-in-the-loop approval step or staring at a terminal waiting for a dialog, you keep the agent at full speed while dsh-shield silently backstops every destructive path. Zero friction, full recoverability.