dsh-permissions
A Claude Code-style granular permission and security rules engine for DeepSeek Harness.
Install
No clear install command was found in the current repository evidence.
Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Four-tier strict permission hierarchy: hard > deny > ask > allow
- Overrides full-access sessions with unskippable hard rules
- Supports global and per-workspace rule scoping with conflict resolution favoring deny
- Wildcard and path matching for file tools (read, write, edit, glob, grep, read_image)
- Prefix argument matching for CLI execution tools like PowerShell (pwsh)
- Visual web UI editor in DSH Settings with staged draft editing and instant presets
- Rule injection into active system prompts for model transparency
- Persistent rule storage within settings.yaml via custom settings endpoints
Useful For
- Preventing models from accessing or modifying sensitive files such as SSH keys, AWS credentials, and .env files
- Blocking destructive shell commands like rm -rf even when running in autonomous full-access mode
- Enforcing strict project-specific directory boundaries across different workspaces
- Auditing and testing permission rule evaluations using a live visual preview and calculator
Who It Fits
- DeepSeek Harness developers seeking granular execution safeguards
- System administrators enforcing security policies across workspaces
- Users running autonomous agents who require hard security boundaries
Documented Limitations
- Only narrows existing sandbox/approval postures; allow rules cannot bypass lower-level DSH sandbox or tools.guard restrictions
- Non-file tools match parameters strictly by raw argument prefixes
- Requires proper Cordis patch integration or dsh plugin add support to install
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- 940842546/dsh-permissions
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- ad84f1d · 2026-10-18
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 3GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-22
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Local cross-agent memory and session history recall integration for DeepSeek Harness.
View plugin →Import and resume conversation histories from 25+ AI coding agents directly into DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →