DeepSeek Harness plugin

dsh-agent-policy

Shared Claw/session policy schema, preset bases, MCP init defaults. Does not deny tools. 策略契约:schema / 预设基类 / MCP 初始化默认,不执行拦截。

Jump to install

Source facts

Repository
xingyingyuzhui/dsh-agent-policy
Latest update
Aug 19, 2026
Category
Workflow & Automation
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/xingyingyuzhui/dsh-agent-policy
Plugin: dsh-agent-policy
Author: xingyingyuzhui

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-agent-policy · 策略契约

治理套件 Phase 1–2 的共享契约:policy schema、预设基类、MCP 初始化默认、策略版本。不拦截工具。

其它插件只消费这份 schema,不要再复制一份方言。卸掉本插件不会放宽权限——闸还在 dsh-agent-gate,缺省回落到 DSH 原有 permission-presets。

MCP 工具名是 mcp__<服务>__<工具>none 全关;explicit 只放行 servers.allowinit-defaults 在名单为空时放行。真正拒绝和隐藏在闸里。

安装

dsh plugin --profile web add github:xingyingyuzhui/dsh-agent-policy

建议装在 dsh-agent-registry / dsh-session-permissions / dsh-agent-gate 前面。装完重启 dsh web

本地开发:

dsh plugin --profile web add link:/abs/path/to/dsh-agent-policy

数据

写在 ~/.dsh/agent-policy/defaults.json

  • preset:新建 Claw Agent 的常驻模板(research / developer / …)。设置里叫 Claw Agent模板
  • mcpnone | explicit | init-defaults(新 Agent 的 MCP 面默认值)
  • servers.allow / servers.deny:初始化可见的 MCP 服务名

BOOTSTRAP.md 还在时,闸额外放行问名字和写本工作区人设文件;不在这份默认里放宽终端。

卸载

dsh plugin --profile web remove dsh-agent-policy

已写出的 defaults.json 会留在磁盘上。

License

MIT