dsh-session-permissions

In multi-session, multi-agent DSH workflows, tool permissions are scattered across four layers- official presets, Claw configuration, Agent policies, and per-session overrides- making it hard to tell at a glance what a given session can actually do. dsh-session-permissions computes the strictest intersection of those layers and surfaces the result in a dedicated Permissions tab inside every session, so allowed tools, file boundaries, and shell restrictions are visible without digging through scattered config files.

For Claw sessions the effective permission set is always the intersection of the official preset, the Claw hard cap, the Agent policy, and any session-level override. The rule is one-directional: the plugin only tightens, never loosens. File boundaries are enforced through the four-level workspaceAccess setting, and shell tools are gated as a whole class via allowlist rather than by parsing individual command paths. Workspace sessions completely bypass the Claw cap and follow official permissions alone, keeping the two tracks independent. Unsaved sessions inherit the ceiling automatically, and any option that would exceed it is greyed out in the UI at save time, preventing privilege escalation at the interaction level.

This plugin handles calculation, display, and pinning of the permission ceiling; runtime interception, one-time approval, and audit logging are the job of dsh-agent-gate. It is well suited to teams running multiple agents and workspaces who want a visible, enforced upper bound on tool access rather than relying on verbal conventions. Pairing it with dsh-agent-gate gives a complete, layered permission-governance pipeline.