permission 7
Sandbox-first automatic permission policy for DeepSeek Harness
dsh plugin add @nanmicoder/dsh-auto-modeDeclarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on
dsh plugin add dsh-permission-rulesModel-based permission approval (approve-for-me) for DeepSeek Harness: an approval/request answerer backed by a separate reviewer model
dsh plugin add dsh-approval-llmA middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.
dsh plugin add dsh-auto-approval-pluginAutonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance
dsh plugin add dsh-auto-classifierAuto-reject unanswered permission requests with a model-visible timeout notice
dsh plugin add @jiesou/dsh-timeout-auto-rejectNet Access permission preset for DeepSeek Harness (Windows): HTTPS works inside the sandbox while file writes stay confined like workspace-write.
dsh plugin add dsh-plugin-net-access