dsh-permission-rules DSH plugin

dsh-permission-rules is an installable DeepSeek Harness plugin that evaluates ordered YAML rules before tool execution. It matches tool names, arguments, workspace-relative paths, and host conditions; records decisions in session logs; and can route uncertain calls through the Harness approval flow.

ui-productivity terminal developer-tools security-policy skills-workflows remote-executionweb

How to install the dsh-permission-rules DSH plugin

dsh plugin --profile web add "github:PerryLink/dsh-permission-rules#main"

Copying does not run this command. Review the repository and version before use.

Data source

Snapshot date: Aug 15, 2026

manifest-valid

What the dsh-permission-rules DSH plugin can do

Evaluates first-match ordered allow, deny, and ask rules on the tools/pre-execute waterfall.
Matches tool-name globs, argument glob or regex patterns, selected workspace-relative path arguments, and environment or platform conditions.
Supports per-workspace rule files, optional parent-directory rule discovery, and hot reload watching.
Logs rule hits and passthrough decisions as permissionRules/decision session events.
Provides /rules commands to inspect rules, reload files, replay decisions, and dry-run a hypothetical tool call.
Routes ask decisions through ctx.approval and can work alongside dsh-auto-review or human approval.

Where the dsh-permission-rules DSH plugin fits

Block defined shell, editing, or other tool actions before they execute.
Require approval for sensitive file-write or command operations.
Maintain repository-specific YAML permission policy with optional hierarchical overrides.
Audit tool permission decisions within a DeepSeek Harness session.
Test proposed permission rules without running a tool call.

Who the dsh-permission-rules DSH plugin is for

DeepSeek Harness users managing tool-execution policy.
Teams that need declarative project-level approval and denial rules.
Plugin users combining deterministic rules with Harness approval workflows.

dsh-permission-rules DSH plugin limitations

This is policy enforcement rather than an OS-level sandbox and does not change sandbox policy.
Path matching is heuristic: it considers only documented argument keys and workspace-relative paths.
Globs are a conservative subset and do not support brace expansion.
The regex backtracking guard is structural rather than exhaustive; the README recommends glob mode for untrusted files.
Some older session logs may require the included repair script before loading on hosts with required-on-read semantics.
Requires Node.js ^22.19.0 or >=24.0.0.

Objective checks

These signals come from public metadata scans. They are not a security certification.

dependency counts
package.json declares 4 runtime, 17 development, 7 peer, and 0 optional dependencies.
info
dsh bundle declared
package.json declares DSH bundle metadata.
info
license declared
GitHub reports the repository license as Apache-2.0.
info
package manifest available
A root package.json was captured and can be inspected by the registry.
info
prepare script detected
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
info
source available
Public GitHub source metadata is available for this registry snapshot.
info

dsh-permission-rules DSH plugin alternatives

dsh-automation

Schedule standalone coding tasks in fresh DeepSeek Harness Agent sessions, with workspace-scoped controls and durable run history.

dsh-agent-messaging

Cross-session agent-to-agent messaging for DeepSeek Harness — address another session by name and deliver a message into its inbox.

awesome-deepseek-harness

A curated list of plugins, skills, MCP servers, patch/profile layers, orchestrators & UIs for DeepSeek Harness (DSH). Visualization · PPT · Coding · Agents · Loops (auto-research) and more. #dsh

dsh-mnemon

Cross-agent, local-first persistent memory plugin for DeepSeek Harness (DSH), powered by Mnemon. It shares long-term memory across Mnemon-enabled agents and adds runtime memory, searchable project documents, semantic recall, knowledge graph, and a Sidebar UI.

dsh-permission-rules DSH plugin questions

What is the dsh-permission-rules DSH plugin?

dsh-permission-rules is a project included in the current DSH plugin snapshot. This page organizes repository metadata and reviewed notes, but you should still inspect the upstream repository before running it.

How do I install the dsh-permission-rules DSH plugin?

The page shows the install command captured from the source record. Copying does not run it, so confirm the package, profile, and version against upstream documentation first.

Which DSH profile does dsh-permission-rules use?

The snapshot records web as the dsh-permission-rules profile. DSH conventions can change quickly, so verify the manifest and README before installation.

Is dsh-permission-rules compatible with the current DSH release?

The source data does not include a verified compatibility matrix. Check recent commits, releases, and DSH breaking changes, then test in a profile you can roll back.

What should I do if dsh-permission-rules fails to load?

Check the install command, selected profile, dependency logs, and Cordis startup output first. Keep the exact error string, then compare it with this site's fix pages and upstream issues.

What are the closest alternatives to dsh-permission-rules?

Related plugins on this page come from the current snapshot and are only candidates. Compare capabilities, maintenance activity, installation method, and limitations before choosing one.