Elinpf/dsh-ops-plugins--packages-ops-access-gate ↗★ 1

@elinpf/dsh-ops-access-gate

会话级运维凭据授权与审计网关 适合需要对敏感运维操作进行会话级动态授权、限时审批和审计的团队。

包名
@elinpf/dsh-ops-access-gate
兼容性
待验证
Harness 依赖范围
^0.1.0-rc.8
Cordis 依赖范围
^4.0.1
版本
0.4.1
最近更新
2026年9月18日

安装

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:Elinpf/dsh-ops-plugins#64b1d76649bf24155173c74254d0fb61d12815d5&path:packages/ops-access/gate

Configuration

KeyDefaultMeaning
approvalRequiredKinds['ssh']Kinds with no ro tier — any use requires a grant
defaultTtlMinutes30Grant lifetime when request_access omits ttlMinutes
maxTtlMinutes480Upper bound for a requested grant lifetime
auditFile~/.dsh-ops/audit.logJSONL audit log path (~ expands)
grantTtlOptions[10, 30, 60, 120]TTL choices the access panel offers
pendingRequestTimeoutMinutes5How long a parked request awaits a human before auto-rejecting
deniedFile~/.dsh-ops/denied.jsonPersisted lockdown state (survives restarts)