Claude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.
- GitHub stars
- 25
- Version
- v0.6.1
- License
- Apache-2.0
- Added
- 2026-08-15
GitHub info
- GitHub stars
- 25
- License
- Apache-2.0
- Primary language
- TypeScript
- Last push
- Aug 21, 2026, 5:53 AM
- Maintainer
- PerryLink
- Added
- 2026-08-15
Install
dsh plugin --profile web add dsh-permission-rulesTags
README badge
Add this Markdown to your plugin README to link back to its listing.
[](https://dshget.com/plugins/PerryLink/dsh-permission-rules)Related plugins
Security & Permissionsdsh-auto-review
★ 120Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
dsh-defend
★ 5Detects prompt-injection, jailbreak, and secret-leak patterns on the agent/pre-step, tools/pre-execute, and tools/post-execute seams with allow/ask/block tiers, sanitized defend/detection audit events, a defend_report tool, and a destructive-delete command guard.
dsh-mask
PII masking for DeepSeek Harness — anonymizes names, phones, emails, ids, and keys before requests and restores them at the display layer, keeping plaintext out of session logs.