dsh-permission-rules
Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.
What it is
Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the…
How to install
Run this in the DSH web profile, then refresh the page.
$ dsh plugin --profile web add dsh-permission-rules@0.7.21
DSH versions accepted
>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0
Author and traction
PerryLink · ★ 136 · Updated 2026-11-09
About this plugin
dsh-permission-rules
把工具调用的裁决权拿回自己手里——每一条 allow / deny / ask 都写在 YAML 里，确定、即时、可审计。
面向 DeepSeek Harness 的 Claude Code 风格声明式权限中间件：规则裁决已知的，评审模型裁决未知的；另带一套 Codex 风格的进程级网络策略与本地代理，管住 shell 子进程的出站流量。
安装 · 配置 · FAQ · 简体中文 · English · Español · Português · हिन्दी
社区插件，与 DeepSeek 官方无关。唯一仓库： （Gitee 为镜像）。 它是什么
dsh-permission-rules 在 tools/pre-execute waterfall 上为每次工具调用前置一份有序的 allow / deny / ask 规则列表——确定、即时、可审计，由你用纯 YAML 编写。规则裁决已知的调用；没把握的交给官方审批接缝，由评审模型或人裁决。它另外带一层 Codex 风格的进程级网络策略：shell 子进程的出站流量经内置本地 HTTP/CONNECT 代理，由网络规则或映射到官方沙箱预设的三档模式裁决。
*结构：两条通道（工具调用 / shell 出站）汇入同一条有序规则链，首个匹配胜出；随后分流为工具调用与网络出口两组裁决，收束于两个仅日志审计事件。* 三步上手
1. 安装（三选一）：
Similar plugins
Mole
🐹 Open-source Mac and PC cleaner. Keep your machine clean, light, and running like new…
DeepSeek-Reasonix
A reliable coding agent for complex software engineering tasks.
dsh-desktop
DSH Desktop product workspace