940842546/dsh-permissions

README 摘要

dsh-permissions English 中文 Claude Code-style permission rules engine for DeepSeek Harness (dsh). A dual-face Cordis plugin: a host engine on the tools/pre-execute waterfall plus a visual editor in Settings → 权限 (Permissions) . Highlights - Four rule tiers with strict precedence : hard deny ask allow . - hard outranks full access : hard rules keep blocking even when the session is on the full-access preset (approval policy never ); ask rules follow the session policy and auto-pass under full access. - Scopes : global rules apply everywhere; per- workspace rules merge on top (deny always wins on conflict). - Wildcard matching for file tools ( read / write / edit / glob / grep / read image ): - write( .pem) — path ends with .pem - write( secret ) — path contains secret - write(.ssh) — path segment .ssh anywhere (case-insensitive, \ / / normalized) - write(C:\users\ ) — absolute-path prefix - bare write — every invocation - Persistence : rules live in the dsh-permissions settings namespace and survive restarts ( /settings.yaml ). - Model transparency : active rules are injected into the system prompt ( [active-permission-rules] ). - Visual editor : staged (draft) editing — changes appl…

分类