dsh-permission-rules 0.7.19 → 0.7.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +18 -0
- package/README-es.md +142 -105
- package/README-hi.md +142 -105
- package/README-pt.md +142 -105
- package/README-zh.md +142 -105
- package/README.md +144 -110
- package/docs/assets/dsh-permission-rules-flow.svg +19 -0
- package/package.json +39 -37
package/README-pt.md
CHANGED
|
@@ -52,9 +52,10 @@ Regras de permissão declarativas estilo Claude Code para o DeepSeek Harness.
|
|
|
52
52
|
|
|
53
53
|
Regras decidem o conhecido. Um modelo revisor decide o que não é.
|
|
54
54
|
|
|
55
|
-

|
|
56
|
+
|
|
57
|
+
*Visão geral do fluxo: solicitação → política/revisão → veredito. Os exemplos abaixo usam a superfície real de comandos.*
|
|
56
58
|
|
|
57
|
-

|
|
58
59
|
|
|
59
60
|
*A mesma execução, animada.*
|
|
60
61
|
|
|
@@ -135,6 +136,46 @@ dsh plugin --profile web add dsh-permission-rules
|
|
|
135
136
|
dsh --profile web --dump-config | grep -A4 'id: permission-rules'
|
|
136
137
|
```
|
|
137
138
|
|
|
139
|
+
### Exemplos
|
|
140
|
+
|
|
141
|
+
São os pontos de entrada reais; instale e chame um.
|
|
142
|
+
|
|
143
|
+
#### Exemplo detalhado
|
|
144
|
+
|
|
145
|
+
**Comando**
|
|
146
|
+
|
|
147
|
+
~~~sh
|
|
148
|
+
/rules test bash {"command":"git push origin main","cwd":"src/secrets/app"}
|
|
149
|
+
~~~
|
|
150
|
+
|
|
151
|
+
**Saída**
|
|
152
|
+
|
|
153
|
+
~~~text
|
|
154
|
+
"bash" matches rule 1 (deny): 禁止 push 到受保护路径
|
|
155
|
+
~~~
|
|
156
|
+
|
|
157
|
+
*Observado em `test/command.spec.ts:204-219 (assertions at :209-213); src/prose.ts:121`*
|
|
158
|
+
|
|
159
|
+
#### Ramo de falha
|
|
160
|
+
|
|
161
|
+
**Entrada**
|
|
162
|
+
|
|
163
|
+
~~~text
|
|
164
|
+
/rules test bash {not json
|
|
165
|
+
~~~
|
|
166
|
+
|
|
167
|
+
**Saída**
|
|
168
|
+
|
|
169
|
+
~~~text
|
|
170
|
+
Invalid JSON arguments "{not json": the arguments must parse as JSON.
|
|
171
|
+
~~~
|
|
172
|
+
|
|
173
|
+
*Observado em `plugins/dsh-permission-rules/src/prose.ts:123; plugins/dsh-permission-rules/src/runtime.ts:1266-1272; plugins/dsh-permission-rules/test/command.spec.ts:221-228`*
|
|
174
|
+
|
|
175
|
+
#### Exemplos breves
|
|
176
|
+
|
|
177
|
+
- `tools/pre-execute`
|
|
178
|
+
|
|
138
179
|
## Configuration
|
|
139
180
|
|
|
140
181
|
Todos os parâmetros são campos Schemastery `Config` (alteráveis pelo cordis.yml). Uma sobrescrita direcionada por id substitui a linha inteira — reafirme cada chave de que precisa. Num host `0.1.7-alpha` cada campo é declarado `.volatile()`, então TAMBÉM é editável no local pela página de Plugins: a edição é confirmada nas referências em execução sem remontar o plugin, o runtime lê o novo valor no uso seguinte, e uma mudança em `network.proxyPort`, `proxyBind`, `injectEnv` ou `noProxy` revincula o proxy local imediatamente. Os limites numéricos ficam no schema, e o editor de configuração resolve a configuração mesclada contra esse schema antes de persistir, então um valor fora da faixa é recusado no momento da escrita. Num host cujo Schemastery seja anterior a `volatile()` estes campos só mudam por cordis.yml.
|
|
@@ -288,112 +329,108 @@ Evidência estática: `dsh-plugin-doctor` K10–K13 retornam `pass` em todas as
|
|
|
288
329
|
|
|
289
330
|
## PerryLink DSH Plugin Family
|
|
290
331
|
|
|
291
|
-
Este projeto
|
|
332
|
+
Este projeto faz parte da família de plugins do DeepSeek Harness da [PerryLink](https://github.com/PerryLink). O registro fica recolhido abaixo para que cada README mantenha uma primeira tela curta; expanda para ver cada linha e seu status.
|
|
292
333
|
|
|
293
334
|
<details>
|
|
294
|
-
<summary>Expandir os
|
|
335
|
+
<summary>Expandir todos os plugins</summary>
|
|
295
336
|
|
|
296
|
-
| Plugin |
|
|
297
|
-
|
|
298
|
-
| **[dsh-aqua-input-check](https://github.com/PerryLink/dsh-aqua-input-check)** |
|
|
299
|
-
| **[dsh-archive-check](https://github.com/PerryLink/dsh-archive-check)** |
|
|
300
|
-
| **[dsh-auto-review](https://github.com/PerryLink/dsh-auto-review)** |
|
|
301
|
-
| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** |
|
|
302
|
-
| **[dsh-
|
|
303
|
-
| **[dsh-bid-
|
|
304
|
-
| **[dsh-
|
|
305
|
-
| **[dsh-
|
|
306
|
-
| **[dsh-
|
|
307
|
-
| **[dsh-
|
|
308
|
-
| **[dsh-
|
|
309
|
-
| **[dsh-
|
|
310
|
-
| **[dsh-
|
|
311
|
-
| **[dsh-
|
|
312
|
-
| **[dsh-
|
|
313
|
-
| **[dsh-
|
|
314
|
-
| **[dsh-
|
|
315
|
-
| **[dsh-
|
|
316
|
-
| **[dsh-
|
|
317
|
-
| **[dsh-
|
|
318
|
-
| **[dsh-
|
|
319
|
-
| **[dsh-
|
|
320
|
-
| **[dsh-
|
|
321
|
-
| **[dsh-
|
|
322
|
-
| **[dsh-
|
|
323
|
-
| **[dsh-
|
|
324
|
-
| **[dsh-
|
|
325
|
-
| **[dsh-
|
|
326
|
-
| **[dsh-
|
|
327
|
-
| **[dsh-
|
|
328
|
-
| **[dsh-
|
|
329
|
-
| **[dsh-
|
|
330
|
-
| **[dsh-
|
|
331
|
-
| **[dsh-
|
|
332
|
-
| **[dsh-
|
|
333
|
-
| **[dsh-
|
|
334
|
-
| **[dsh-
|
|
335
|
-
| **[dsh-
|
|
336
|
-
| **[dsh-
|
|
337
|
-
| **[dsh-
|
|
338
|
-
| **[dsh-
|
|
339
|
-
| **[dsh-
|
|
340
|
-
| **[dsh-
|
|
341
|
-
| **[dsh-
|
|
342
|
-
| **[dsh-
|
|
343
|
-
| **[dsh-
|
|
344
|
-
| **[dsh-
|
|
345
|
-
| **[dsh-
|
|
346
|
-
| **[dsh-
|
|
347
|
-
| **[dsh-
|
|
348
|
-
| **[dsh-
|
|
349
|
-
| **[dsh-
|
|
350
|
-
| **[dsh-
|
|
351
|
-
| **[dsh-
|
|
352
|
-
| **[dsh-
|
|
353
|
-
| **[dsh-
|
|
354
|
-
| **[dsh-
|
|
355
|
-
| **[dsh-
|
|
356
|
-
| **[dsh-
|
|
357
|
-
| **[dsh-
|
|
358
|
-
| **[dsh-
|
|
359
|
-
| **[dsh-
|
|
360
|
-
| **[dsh-
|
|
361
|
-
| **[dsh-
|
|
362
|
-
| **[dsh-
|
|
363
|
-
| **[dsh-
|
|
364
|
-
| **[dsh-
|
|
365
|
-
| **[dsh-
|
|
366
|
-
| **[dsh-
|
|
367
|
-
| **[dsh-
|
|
368
|
-
| **[dsh-
|
|
369
|
-
| **[dsh-
|
|
370
|
-
| **[dsh-
|
|
371
|
-
| **[dsh-
|
|
372
|
-
| **[dsh-
|
|
373
|
-
| **[dsh-
|
|
374
|
-
| **[dsh-
|
|
375
|
-
| **[dsh-
|
|
376
|
-
| **[dsh-
|
|
377
|
-
| **[dsh-
|
|
378
|
-
| **[dsh-
|
|
379
|
-
| **[dsh-
|
|
380
|
-
| **[dsh-
|
|
381
|
-
| **[dsh-
|
|
382
|
-
| **[dsh-
|
|
383
|
-
| **[dsh-
|
|
384
|
-
| **[dsh-
|
|
385
|
-
| **[dsh-
|
|
386
|
-
| **[dsh-
|
|
387
|
-
| **[dsh-
|
|
388
|
-
| **[dsh-
|
|
389
|
-
| **[dsh-
|
|
390
|
-
| **[dsh-
|
|
391
|
-
| **[dsh-
|
|
392
|
-
| **[dsh-
|
|
393
|
-
|
|
394
|
-
</details>
|
|
395
|
-
|
|
396
|
-
</details>
|
|
337
|
+
| Plugin | Status |
|
|
338
|
+
|---|---|
|
|
339
|
+
| **[dsh-aqua-input-check](https://github.com/PerryLink/dsh-aqua-input-check)** | |
|
|
340
|
+
| **[dsh-archive-check](https://github.com/PerryLink/dsh-archive-check)** | |
|
|
341
|
+
| **[dsh-auto-review](https://github.com/PerryLink/dsh-auto-review)** | |
|
|
342
|
+
| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | |
|
|
343
|
+
| **[dsh-bid-ca-precheck](https://github.com/PerryLink/dsh-bid-ca-precheck)** | |
|
|
344
|
+
| **[dsh-bid-qual-check](https://github.com/PerryLink/dsh-bid-qual-check)** | |
|
|
345
|
+
| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | |
|
|
346
|
+
| **[dsh-checkpoint-rewind](https://github.com/PerryLink/dsh-checkpoint-rewind)** | |
|
|
347
|
+
| **[dsh-click](https://github.com/PerryLink/dsh-click)** | |
|
|
348
|
+
| **[dsh-composer-history](https://github.com/PerryLink/dsh-composer-history)** | |
|
|
349
|
+
| **[dsh-contract-stance](https://github.com/PerryLink/dsh-contract-stance)** | |
|
|
350
|
+
| **[dsh-customs-doc-check](https://github.com/PerryLink/dsh-customs-doc-check)** | |
|
|
351
|
+
| **[dsh-data-quality](https://github.com/PerryLink/dsh-data-quality)** | |
|
|
352
|
+
| **[dsh-demurrage-ledger](https://github.com/PerryLink/dsh-demurrage-ledger)** | |
|
|
353
|
+
| **[dsh-doublecheck](https://github.com/PerryLink/dsh-doublecheck)** | |
|
|
354
|
+
| **[dsh-drill-script-check](https://github.com/PerryLink/dsh-drill-script-check)** | |
|
|
355
|
+
| **[dsh-eia-guide-check](https://github.com/PerryLink/dsh-eia-guide-check)** | |
|
|
356
|
+
| **[dsh-emergency-plan](https://github.com/PerryLink/dsh-emergency-plan)** | |
|
|
357
|
+
| **[dsh-essay-rubric-check](https://github.com/PerryLink/dsh-essay-rubric-check)** | |
|
|
358
|
+
| **[dsh-evidence-check](https://github.com/PerryLink/dsh-evidence-check)** | |
|
|
359
|
+
| **[dsh-export-ctl-check](https://github.com/PerryLink/dsh-export-ctl-check)** | |
|
|
360
|
+
| **[dsh-fast](https://github.com/PerryLink/dsh-fast)** | |
|
|
361
|
+
| **[dsh-fmea-table-check](https://github.com/PerryLink/dsh-fmea-table-check)** | |
|
|
362
|
+
| **[dsh-forecast-penalty](https://github.com/PerryLink/dsh-forecast-penalty)** | |
|
|
363
|
+
| **[dsh-fund-research](https://github.com/PerryLink/dsh-fund-research)** | |
|
|
364
|
+
| **[dsh-github](https://github.com/PerryLink/dsh-github)** | |
|
|
365
|
+
| **[dsh-gongwen-flow-check](https://github.com/PerryLink/dsh-gongwen-flow-check)** | |
|
|
366
|
+
| **[dsh-gongwen-word-check](https://github.com/PerryLink/dsh-gongwen-word-check)** | |
|
|
367
|
+
| **[dsh-guard-plan-qc](https://github.com/PerryLink/dsh-guard-plan-qc)** | |
|
|
368
|
+
| **[dsh-hazchem-check](https://github.com/PerryLink/dsh-hazchem-check)** | |
|
|
369
|
+
| **[dsh-hazplan-check](https://github.com/PerryLink/dsh-hazplan-check)** | |
|
|
370
|
+
| **[dsh-hidden-risk-map](https://github.com/PerryLink/dsh-hidden-risk-map)** | |
|
|
371
|
+
| **[dsh-hs-classify](https://github.com/PerryLink/dsh-hs-classify)** | |
|
|
372
|
+
| **[dsh-icd-rule-check](https://github.com/PerryLink/dsh-icd-rule-check)** | |
|
|
373
|
+
| **[dsh-industry-research](https://github.com/PerryLink/dsh-industry-research)** | |
|
|
374
|
+
| **[dsh-lawcite-adapter](https://github.com/PerryLink/dsh-lawcite-adapter)** | |
|
|
375
|
+
| **[dsh-laya](https://github.com/PerryLink/dsh-laya)** | |
|
|
376
|
+
| **[dsh-lc-doc-check](https://github.com/PerryLink/dsh-lc-doc-check)** | |
|
|
377
|
+
| **[dsh-learning-gap-check](https://github.com/PerryLink/dsh-learning-gap-check)** | |
|
|
378
|
+
| **[dsh-library](https://github.com/PerryLink/dsh-library)** | |
|
|
379
|
+
| **[dsh-local-ai](https://github.com/PerryLink/dsh-local-ai)** | |
|
|
380
|
+
| **[dsh-lsp-actions](https://github.com/PerryLink/dsh-lsp-actions)** | |
|
|
381
|
+
| **[dsh-mask](https://github.com/PerryLink/dsh-mask)** | |
|
|
382
|
+
| **[dsh-mcp-panel](https://github.com/PerryLink/dsh-mcp-panel)** | |
|
|
383
|
+
| **[dsh-medrec-qc](https://github.com/PerryLink/dsh-medrec-qc)** | |
|
|
384
|
+
| **[dsh-memento](https://github.com/PerryLink/dsh-memento)** | |
|
|
385
|
+
| **[dsh-nsfc-form-check](https://github.com/PerryLink/dsh-nsfc-form-check)** | |
|
|
386
|
+
| **[dsh-nurse-record-check](https://github.com/PerryLink/dsh-nurse-record-check)** | |
|
|
387
|
+
| **[dsh-observe](https://github.com/PerryLink/dsh-observe)** | |
|
|
388
|
+
| **[dsh-origin-rvc-check](https://github.com/PerryLink/dsh-origin-rvc-check)** | |
|
|
389
|
+
| **[dsh-ota-review-check](https://github.com/PerryLink/dsh-ota-review-check)** | |
|
|
390
|
+
| **[dsh-output-styles](https://github.com/PerryLink/dsh-output-styles)** | |
|
|
391
|
+
| **[dsh-paper-doc-adapter](https://github.com/PerryLink/dsh-paper-doc-adapter)** | |
|
|
392
|
+
| **[dsh-permission-rules](https://github.com/PerryLink/dsh-permission-rules)** | |
|
|
393
|
+
| **[dsh-permit-report-check](https://github.com/PerryLink/dsh-permit-report-check)** | |
|
|
394
|
+
| **[dsh-pipeline-check](https://github.com/PerryLink/dsh-pipeline-check)** | |
|
|
395
|
+
| **[dsh-pleading-draft](https://github.com/PerryLink/dsh-pleading-draft)** | |
|
|
396
|
+
| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | |
|
|
397
|
+
| **[dsh-plugin-guide](https://github.com/PerryLink/dsh-plugin-guide)** | |
|
|
398
|
+
| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | |
|
|
399
|
+
| **[dsh-plugin-upgrade](https://github.com/PerryLink/dsh-plugin-upgrade)** | |
|
|
400
|
+
| **[dsh-policy-brief-draft](https://github.com/PerryLink/dsh-policy-brief-draft)** | |
|
|
401
|
+
| **[dsh-power-loss-split](https://github.com/PerryLink/dsh-power-loss-split)** | |
|
|
402
|
+
| **[dsh-power-ticket-check](https://github.com/PerryLink/dsh-power-ticket-check)** | |
|
|
403
|
+
| **[dsh-ppap-check](https://github.com/PerryLink/dsh-ppap-check)** | |
|
|
404
|
+
| **[dsh-protest-deadline](https://github.com/PerryLink/dsh-protest-deadline)** | |
|
|
405
|
+
| **[dsh-railway-window](https://github.com/PerryLink/dsh-railway-window)** | |
|
|
406
|
+
| **[dsh-repair-order-qc](https://github.com/PerryLink/dsh-repair-order-qc)** | |
|
|
407
|
+
| **[dsh-research-report](https://github.com/PerryLink/dsh-research-report)** | |
|
|
408
|
+
| **[dsh-review-reply-check](https://github.com/PerryLink/dsh-review-reply-check)** | |
|
|
409
|
+
| **[dsh-rulefile-check](https://github.com/PerryLink/dsh-rulefile-check)** | |
|
|
410
|
+
| **[dsh-safety-brief-check](https://github.com/PerryLink/dsh-safety-brief-check)** | |
|
|
411
|
+
| **[dsh-score](https://github.com/PerryLink/dsh-score)** | |
|
|
412
|
+
| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | |
|
|
413
|
+
| **[dsh-site-log-check](https://github.com/PerryLink/dsh-site-log-check)** | |
|
|
414
|
+
| **[dsh-skill-pack-security](https://github.com/PerryLink/dsh-skill-pack-security)** | |
|
|
415
|
+
| **[dsh-soe-decision-check](https://github.com/PerryLink/dsh-soe-decision-check)** | |
|
|
416
|
+
| **[dsh-soilwater-check](https://github.com/PerryLink/dsh-soilwater-check)** | |
|
|
417
|
+
| **[dsh-sop-sync-check](https://github.com/PerryLink/dsh-sop-sync-check)** | |
|
|
418
|
+
| **[dsh-spc-gbt-adapter](https://github.com/PerryLink/dsh-spc-gbt-adapter)** | |
|
|
419
|
+
| **[dsh-talk](https://github.com/PerryLink/dsh-talk)** | |
|
|
420
|
+
| **[dsh-tender-extract](https://github.com/PerryLink/dsh-tender-extract)** | |
|
|
421
|
+
| **[dsh-tender-matrix](https://github.com/PerryLink/dsh-tender-matrix)** | |
|
|
422
|
+
| **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | |
|
|
423
|
+
| **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | |
|
|
424
|
+
| **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | |
|
|
425
|
+
| **[dsh-warranty-calc](https://github.com/PerryLink/dsh-warranty-calc)** | |
|
|
426
|
+
| **[dsh-budget](https://github.com/PerryLink/dsh-budget)** | 🧊 CONGELADO — ver o README do repositório |
|
|
427
|
+
| **[dsh-claude-move](https://github.com/PerryLink/dsh-claude-move)** | 🧊 CONGELADO — ver o README do repositório |
|
|
428
|
+
| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | 🧊 CONGELADO — ver o README do repositório |
|
|
429
|
+
| **[dsh-draw](https://github.com/PerryLink/dsh-draw)** | 🧊 CONGELADO — ver o README do repositório |
|
|
430
|
+
| **[dsh-reach](https://github.com/PerryLink/dsh-reach)** | 🧊 CONGELADO — ver o README do repositório |
|
|
431
|
+
| **[dsh-background-agents](https://github.com/PerryLink/dsh-background-agents)** | 🚫 RETIRADO — ver o README do repositório |
|
|
432
|
+
| **[dsh-session-pin](https://github.com/PerryLink/dsh-session-pin)** | 🚫 RETIRADO — ver o README do repositório |
|
|
433
|
+
| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | 🚫 RETIRADO — ver o README do repositório |
|
|
397
434
|
|
|
398
435
|
</details>
|
|
399
436
|
|