Fine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions, quick-tool defaults, custom rules, a bilingual approval modal with inline diff details, custom rejection reasons and a sandbox-upgrade flow.
- GitHub stars
- 4
- Version
- v1.3.5
- License
- MIT
- Added
- 2026-08-16
GitHub info
- GitHub stars
- 4
- License
- MIT
- Primary language
- JavaScript
- Last push
- Aug 21, 2026, 6:00 AM
- Maintainer
- MrWeiCodes
- Added
- 2026-08-16
Preview from README
Screenshots and GIFs extracted from the repository README (badges and avatars filtered out).

命令执行审批(Pwsh)
https://raw.githubusercontent.com/MrWeiCodes/dsh-permgate/main/assets/pwsh-approval.png

审批弹窗
https://raw.githubusercontent.com/MrWeiCodes/dsh-permgate/main/assets/approval-modal.png

默认权限设置
https://raw.githubusercontent.com/MrWeiCodes/dsh-permgate/main/assets/default-permission.jpg

会话权限选择器
https://raw.githubusercontent.com/MrWeiCodes/dsh-permgate/main/assets/permission-picker.jpg

拒绝意见
https://raw.githubusercontent.com/MrWeiCodes/dsh-permgate/main/assets/reject-reason.png

权限网关设置页
https://raw.githubusercontent.com/MrWeiCodes/dsh-permgate/main/assets/settings-page.jpg
Install
dsh plugin --profile web add github:MrWeiCodes/dsh-permgateTags
README badge
Add this Markdown to your plugin README to link back to its listing.
[](https://dshget.com/plugins/MrWeiCodes/dsh-permgate)Related plugins
Security & Permissionsdsh-pentest
★ 324Authorized pentest mode for DeepSeek Harness — exploration chain, assets and findings with a Web view.
dsh-automode
★ 3CC-style auto-approval for DeepSeek Harness: deterministic deny/allow rules plus a two-stage allow/reject classifier with a circuit breaker and denial guidance.
api-relay-audit
★ 819Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.