dsh-permgate

The native permission model in DeepSeek Harness (DSH) offers only three coarse-grained settings, making it difficult for users to strike a fine balance between unlocking AI agent capabilities and maintaining system security. The dsh-permgate plugin solves this by introducing a "Custom Review" permission gateway, which dissects tool calls into six distinct permission categories. Each category can be independently set to "Ask, Allow, or Deny," enabling stricter controls for sensitive operations while allowing flexibility for routine tasks—effectively defining customized boundaries for AI behavior.

The plugin’s core strength lies in its multi-layered control mechanisms. Users can manage rules via global and project-level configurations, with exception lists (allow/deny) to quickly pass or block specific paths and commands. Custom rules support arbitrary combinations of tool names, file paths, and parameters, taking precedence over defaults to cover a wide range of scenarios with minimal setup. The approval popup presents operation details, parameters, and file diffs at a glance, allowing one-click addition of exceptions; rejections include customizable feedback to guide AI toward immediate adjustments rather than blind retries. Even for permitted actions, an underlying sandbox escalation flow intercepts high-risk operations, providing an extra safety net.

This plugin is ideal for developers, team administrators, and power users who demand strict oversight of AI agent operations. It reduces risks of data leakage or accidental damage while minimizing workflow disruptions from frequent prompts, balancing efficiency with security. With bilingual support and persistent configuration, dsh-permgate is ready to use out-of-the-box and integrates seamlessly into existing DSH environments. If you seek a zero-intrusion, extensible solution for highly customized permission governance, dsh-permgate delivers the perfect blend of control and convenience.