songyang0603/dsh-codex--packages-execpolicy ↗★ 0
@songyang0603/dsh-codex-execpolicy
Pinned Codex execpolicy semantic service for DeepSeek Harness with tracked upstream conformance
AI Analysis
提供本地主机发现、规则路径排序等显式执行策略加载与更新服务，无需在线云引导。适合需要对本地代码执行策略进行精细化、离线化控制的安全合规场景。
Install
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:songyang0603/dsh-codex#03222eed20dd41e81760e9ffae9d1526e348ae65&path:packages/execpolicyREADME
Read the full README ↗Configuration modes
Only one initial input mode may be selected:
hostConfigStack: real host discovery; this is the bundle default;configStack: already materialized layers and raw requirements layers;rulePaths/ruleSources: a lower-level explicit ordered policy.
Online cloud authentication and fetching are not performed here. A caller may
provide a previously acquired cloud: { mode: "snapshot", bundle }; producing
that snapshot belongs to a future cloud/auth component.
The native engine is resolved without consulting PATH, in this order:
- explicit
enginePath; DSH_CODEX_EXECPOLICY_ENGINE;native/ -/...inside this package;- repository-local debug/release targets for development.
Every process must return protocol version 3 plus the exact pinned commit and
source-object identities before any policy result is accepted.