Permission Presets
Domain: Security & Permissions
Motivation
dsh-permission-presets offers named permission modes that set sandbox mode and approval policy together while each enforcement service keeps its own value. The shipped defaults are workspace-write (sandbox + ask) and danger-full-access (sandbox + never); an explicitly loaded Auto review integration adds a current-session-only Auto option. Users switch through the /permission command; a bare invocation reports the current preset and every available entry. The custom label is derived-only and never a selectable target.
Concrete Example
- name: '@deepseek-ai/dsh-permission-presets'
config:
presets:
workspace-write: { sandbox: workspace-write, approval: ask }
danger-full-access: { sandbox: danger-full-access, approval: never }
defaultPreset: workspace-writeAnalogy
It is a thermostat preset: you pick “Eco” or “Boost” and both the heating and the fan speed change together, but each dial still shows its own value.