dsh-tool-policy

Declarative, fail-closed governance for model-requested tools in DeepSeek Harness.

Community plugin. Not affiliated with or maintained by DeepSeek AI.

Repository: Drifter-yh/dsh-tool-policy

dsh-tool-policy is a small Cordis plugin that evaluates ordered rules at the public tools/pre-execute extension point. It can deny a tool call, route it to Harness's existing human approval seam, or delegate it unchanged. It does not replace the Harness approval, sandbox, timeout, retry, telemetry, or session systems.

Why this is needed

DeepSeek Harness already has strong primitives for tool execution: sandbox policy, one-shot approval, cooperative timeouts, provider retries, repeat-call reminders, and session telemetry. What is missing is a deployment-owned policy layer that applies the same rule vocabulary to every tool, including third-party and MCP tools.

Typical uses include:

• require approval for an entire MCP tool namespace such as mcp__*;
• deny a destructive command pattern before the tool body starts;
• run a deny-by-default allowlist for unattended jobs;
• keep sensitive argument values out of policy feedback messages.

The plugin is intentionally not an audit logger or approval implementation. The Harness already owns those seams.

Installation

The public Harness package line is currently 0.1.0-rc.6:

pnpm add dsh-tool-policy @deepseek-ai/cordis @deepseek-ai/dsh-tools

The Harness packages are peer dependencies so the host controls the runtime version. @deepseek-ai/schemastery is installed as the plugin's normal runtime dependency. The upstream source repository currently reports 0.1.0-rc.5 in master; this package is tested against the public 0.1.0-rc.6 registry artifacts.

GitHub installation

The upstream profile-plugin documentation supports installing a TypeScript bundle directly from GitHub:

dsh plugin --profile my-profile add github:Drifter-yh/dsh-tool-policy#028e2ce4167a88ad32b0c6eec89ee22072189e71

Git installs fetch source, so this package's prepare script runs only the standalone tsdown build needed to create dist/. With pnpm 10 or newer, add the package to the profile's pnpm-workspace.yaml build allowlist if pnpm reports that the prepare script is blocked, then retry: