dsh-session-allow
DSH Web GUI 插件：批准对话框中的会话范围“允许本次会话使用”选项（按模式设置的持续授权，localStorage）
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:AnakinCao/dsh-session-allow#4722f68c9a2551a8c651c8d43dcac3b5ddbaef5dSession Allow 以 dsh-session-allow 发布，当前版本为 0.3.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →简体中文: README.zh.md
A DSH (DeepSeek Harness) Web GUI plugin that adds an "Allow for this session" option to the approval dialog.
When you pick it, a session-scoped, per-mode standing grant is recorded (persisted in localStorage, isolated by session id). Later escalation requests of the same mode in this session are auto-approved without a dialog; other modes keep prompting as usual.
| Scenario | Behavior |
|---|---|
A tool asks to escalate to danger-full-access | Dialog shows: Reject / Allow once / Allow danger-full-access for this session |
| You click "Allow for this session" | The current request is allowed and the mode is granted for this session |
| Same mode is requested again in this session | Silently auto-approved, no dialog |
| A different mode is requested (not yet granted) | Still prompts normally |
| Bottom of the dialog | Shows this session's granted modes as revocable chips (click × to revoke) |
| Page refresh / new session | Grants persist per session id / stay isolated per session |
The core approval panel is registered on the conversation.composer chain slot at priority 1. This plugin registers the same slot at priority 0 with an identical selector — the chain slot elects the lowest-priority entry whose select returns non-null, so this panel fully replaces the core one. Grants live in localStorage["dsh.sessionAllow.v1"]; a matching request is auto-answered allowed-once on the wire (the host audit still records approval/asked + approval/decided as usual).
Grant keys: mode:<mode> (parsed from the reason escalate sandbox to <mode>: ...); non-escalation reasons fall back to tool:<tool>:<reason>.
Method 1 — recommended, one command (restart dsh web afterwards):
dsh plugin --profile web add https://github.com/AnakinCao/dsh-session-allow.git
Method 2 — manual: append to ~/.dsh/profiles/web/cordis.patch.yml:
- insert:
- id: dsh-session-allow
name: 'dsh-session-allow'
and place the repository content under ~/.dsh/profiles/web/node_modules/dsh-session-allow/ (or pnpm add), then restart dsh.
Pick ONE method — never mount twice.
dsh plugin --profile web remove dsh-session-allow
or delete the - insert entry from the profile's cordis.patch.yml and remove node_modules/dsh-session-allow. Grant data lives in the browser's localStorage["dsh.sessionAllow.v1"] and can be cleared manually.
dsh-session-allow/
├── package.json # dsh.client / dsh.bundle declaration
├── cordis.patch.yml # loader entry registration
├── lib/
│ ├── index.js # host-side placeholder plugin
│ └── client.js # client bundle (panel takeover + session grants)
├── test/
│ └── behavior.test.mjs # grant / auto-allow / revoke regression tests
└── README.md
MIT