dsh-plugin-recycle-bin

When an AI agent runs local file operations on Windows, one of the biggest risks is that the model may emit a del, Remove-Item, shred, or sdelete command that wipes files straight from disk. There is no Recycle Bin to fall back on, and a single instruction to empty it makes the loss permanent and unrecoverable. dsh-plugin-recycle-bin exists to close exactly that gap.

The plugin works at three levels. First, it wraps every shell invocation (PowerShell, bash, foreground and background) and matches destructive tokens by command position—so $rm, form, and other look-alikes never trigger a false positive—blocking del, rm, Remove-Item, erase, sdelete, shred, cipher /w, unlink, and similar commands before they ever spawn. Second, it offers the file_trash tool, which routes each deletion through SendToRecycleBin into the system Recycle Bin, making permanent erasure mechanically impossible within the agent's tool path. Third, it measures free disk space via fs.statfsSync (with a Get-PSDrive fallback) and, when the remaining space drops below a configurable threshold, pauses the operation and asks the user to free up space and retry, force-recycle anyway, or cancel. It also forbids Clear-RecycleBin and any deletion targeting the Recycle Bin folder itself. A trash_status tool lets the agent report Recycle Bin support, remaining versus total space, and the safety threshold at any time.

The plugin is ideal for developers and teams who run DSH agents on Windows to tidy project folders, clean up build artefacts, or perform bulk file operations while still wanting every deletion to be recoverable. If your agent needs the ability to delete files but every single one of those deletions must remain reachable from the Recycle Bin, this plugin is the guardrail you want in front of the shell.