dsh-agent-gate: Permission Gate · Tool Interception by Tiered Permissions

dsh-agent-gate is a permission gate plugin for DeepSeek Harness, designed to provide fine-grained control over Agent tool invocations and resource access through layered interception and approval mechanisms. Built on the `tools.pre-execute` and `tools.guard` hooks, it supports skill/MCP filtering, policy reuse, and audit logging. Once uninstalled, the interception mechanism stops, but the official file sandbox permissions continue to be independently maintained by the permissions plugin. It can be installed via the `dsh plugin` command. Note that it only intercepts Claw sessions, and it is recommended to use it alongside `dsh-session-permissions`.