devrites 7.2.2 → 7.2.3

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to DevRites are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and DevRites adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Releases are generated automatically by [semantic-release](https://semantic-release.gitbook.io/) from Conventional Commits on `main`.
 
+## [7.2.3](https://github.com/ViktorsBaikers/DevRites/compare/v7.2.2...v7.2.3) (2026-10-29)
+
+### Fixed
+
+* **agents:** honor DSH orchestrator permission selection ([#187](https://github.com/ViktorsBaikers/DevRites/issues/187)) ([1030093](https://github.com/ViktorsBaikers/DevRites/commit/10300933ac688c0e06217026c89c3ed657b58ec0))
+
 ## [7.2.2](https://github.com/ViktorsBaikers/DevRites/compare/v7.2.1...v7.2.2) (2026-10-29)
 
 ### Fixed

package/README.md

@@ -31,7 +31,7 @@ history can't lose it. After you clear the conversation, switch hosts, or hand
 the feature to another engineer, the next session reads the same plan,
 decisions, and evidence before it continues.
 
-**Status:** [`v7.2.2`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v7.2.2): see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
+**Status:** [`v7.2.3`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v7.2.3): see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
 
 This is the latest published release; `main` may contain unreleased work.
 

package/docs/dsh.md

@@ -32,10 +32,16 @@ settlement notice. A returned child id means dispatch was admitted; `inactive`
 activity alone does not prove successful completion. The orchestrator collects
 and reconciles every terminal result, including failures, before dependent work.
 
+The DevRites orchestrator honors DSH's selected permission mode, including
+**Full access**, without changing approval settings or enabling Full access
+automatically. After updating an older installation and restarting DSH, select
+your desired permission preset again if the session already shows **Custom**.
+
 Read-only roles retain only their mapped tools and run shell commands under the
 read-only sandbox. Shell-capable roles also receive native job tools to collect
-background command output and stop their jobs. Writers have a workspace-write ceiling. The guard narrows
-DSH's inherited parent override before each allowed call, preserves an existing
+background command output and stop their jobs. Specialist writers have a
+workspace-write ceiling. For specialists, the guard narrows DSH's inherited
+parent override before each allowed call, preserves an existing
 read-only parent boundary, and denies explicit sandbox escalation. Confining
 shell and filesystem providers are required; an unconfined composition fails
 closed. Tool access derives from canonical agent frontmatter; unsupported

package/pack/generated/dsh/runtime/cordis.patch.yml

@@ -55,7 +55,7 @@
                   "name": "devrites:role",
                   "config": {
                     "role": "devrites-orchestrator",
-                    "permission": "workspace-write",
+                    "permission": "inherit",
                     "allowedTools": [
                       "ask_user_question",
                       "bash",

package/pack/generated/dsh/runtime/specialist.mjs

@@ -22,7 +22,8 @@ export async function apply(ctx, config) {
   }
   const { role, permission, allowedTools, instructions } = config;
   if (typeof role !== 'string' || !role || typeof instructions !== 'string'
-    || !['read-only', 'workspace-write'].includes(permission)
+    || (!['read-only', 'workspace-write'].includes(permission)
+      && !(role === 'devrites-orchestrator' && permission === 'inherit'))
     || !Array.isArray(allowedTools) || allowedTools.some(tool => typeof tool !== 'string')) {
     throw new Error('DSH DevRites role requires identity, instructions, tools, and a supported permission ceiling');
   }
@@ -33,6 +34,7 @@ export async function apply(ctx, config) {
     if (!['read-only', 'workspace-write', 'danger-full-access'].includes(mode)) {
       throw new Error(`${role}: unknown sandbox permission`);
     }
+    if (permission === 'inherit') return;
     // Native spawn inherits the parent's override; preserve a narrower parent.
     if (mode === 'danger-full-access' || (mode === 'workspace-write' && permission === 'read-only')) {
       session.append('sandbox/mode', { mode: permission });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "7.2.2",
+  "version": "7.2.3",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code, Codex, omp, pi, and Devin CLI",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",

package/scripts/dsh-generate.py

@@ -144,7 +144,7 @@ def generate(source, target):
     presets.insert(0, {"id": "devrites-orchestrator", "name": "DevRites", "description": "DevRites workflow orchestrator with named fresh specialists.",
                        "plugins": tool_plugins(root_tools) + [
                            {"id": "devrites-role", "name": "devrites:role", "config": {
-                               "role": "devrites-orchestrator", "permission": "workspace-write",
+                               "role": "devrites-orchestrator", "permission": "inherit",
                                 "allowedTools": root_tools, "allowedAgentPresets": roles,
                                 "indexTool": MCP_INDEX_TOOL, "instructions": BRIDGE}},
                            {"id": "devrites-subagent", "name": "@deepseek-ai/dsh-tool-subagent", "config": {

package/scripts/dsh-specialist.mjs

@@ -22,7 +22,8 @@ export async function apply(ctx, config) {
   }
   const { role, permission, allowedTools, instructions } = config;
   if (typeof role !== 'string' || !role || typeof instructions !== 'string'
-    || !['read-only', 'workspace-write'].includes(permission)
+    || (!['read-only', 'workspace-write'].includes(permission)
+      && !(role === 'devrites-orchestrator' && permission === 'inherit'))
     || !Array.isArray(allowedTools) || allowedTools.some(tool => typeof tool !== 'string')) {
     throw new Error('DSH DevRites role requires identity, instructions, tools, and a supported permission ceiling');
   }
@@ -33,6 +34,7 @@ export async function apply(ctx, config) {
     if (!['read-only', 'workspace-write', 'danger-full-access'].includes(mode)) {
       throw new Error(`${role}: unknown sandbox permission`);
     }
+    if (permission === 'inherit') return;
     // Native spawn inherits the parent's override; preserve a narrower parent.
     if (mode === 'danger-full-access' || (mode === 'workspace-write' && permission === 'read-only')) {
       session.append('sandbox/mode', { mode: permission });