dsh-permissions
A DeepSeek Harness permission-rule engine with host-side tool interception and a browser-based rules editor.
Install
No clear install command was found in the current repository evidence.
Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Intercepts tool execution through the host-side tools/pre-execute hook.
- Applies four rule levels with stated precedence: hard, deny, ask, then allow.
- Supports global rules and workspace-specific rules that are merged with deny winning conflicts.
- Matches file-tool paths with wildcard patterns and normalizes slash styles for matching.
- Persists rules in the dsh-permissions settings namespace in settings.yaml.
- Injects active rules into the system prompt.
- Provides a staged browser editor, presets, rule previewing, and a decision log.
- Includes default hard rules for listed sensitive paths/file patterns and a deny rule for pwsh(rm -rf *).
Useful For
- Preventing tool operations involving sensitive directories, keys, environment files, or credential material.
- Adding workspace-specific approval or denial rules for agent tool use.
- Creating explicit approval rules for shell commands and file operations.
- Managing permission rules visually without manually editing settings files.
Who It Fits
- DeepSeek Harness users who want configurable controls over tool execution.
- Teams or developers working with sensitive files and workspace-specific policies.
- Users who prefer a visual permission-rule editor.
Documented Limitations
- Wildcard path matching is documented for read, write, edit, glob, grep, and read_image tools.
- For non-file tools, matching uses a prefix match against the original first argument; grep additionally matches its path argument.
- Changes made in the editor do not take effect until Save and Apply is selected.
- The plugin's rules API uses custom GET/POST /api/dperm/rules endpoints because the DSH api-proxy settings allowlist does not expose third-party namespaces.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 1 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- 940842546/dsh-permissions
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- ce06f1b · 2026-09-11
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-31
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
DeepSeek Harness research bundle for industry maps, public-source tracking, company cards, and traceable reports.
View plugin →DSH undo and crash-recovery plugin with snapshots, rollback, Safe Mode, and offline Windows tools.
View plugin →Vision routing and pixel-level visual tool suite for DeepSeek Harness agents with built-in free fallbacks.
View plugin →Sandbox-first automatic permission policy and intelligent risk classification for DeepSeek Harness.
View plugin →