SipengXie2024/dsh-auto-approval

Name: SipengXie2024/dsh-auto-approval
Author: SipengXie2024

Plugin ⭐ 0 MIT security

English: A guardian-style auto-approval plugin for DeepSeek Harness (dsh), modelled after Codex's "Approve for me" reviewer. Every operation that would normally pop an approval prompt is first judged by an LLM subagent that reads the session transcript (framed as untrusted evidence), may verify local state through three read-only tools (readfile / listdir / statpath), and answers a four-field verdict (risklevel × userauthorization × outcome × rationale). Low-risk operations proceed silently; anything doubtful still asks. Fail-closed by design: judge errors, timeouts, step-cap hits, and unparseable replies always fall back to the human prompt. See 安装与使用 below (Chinese).

catalog description：LLM-gated auto approval for DeepSeek Harness: a model judges every approval ask first, low-risk operations pass without prompting (fail-closed)

↗ View on GitHub 📄 Read full README

Install

工具调用需要审批
      │
      ▼
ApprovalService.request()           ← 记 approval/asked 审计事件
      │
      ▼
approval/request 瀑布(本插件 prepend 在链首)
      │
      ├─ Auto 关 → next() → 内置 answerer 弹窗
      ▼
  guardian 裁判(有界 fork 循环,默认 ≤4 步)
  输入:安全策略 + 会话 transcript(不可信证据框定)
        + 工具名 + 完整参数 JSON + 申请理由 + 工作区路径
  可选:read_file / list_dir / stat_path 查证本地状态
      │
      ├─ verdict.outcome = "allow" → 返回 allowed-once,不弹窗,直接执行
      └─ 其他一切 → next() → 照常弹窗
         (deny / 解析失败 / 流错误 / 步数打满 / 90s 超时)

Add SipengXie2024/dsh-auto-approval to your DSH config (web profile) to enable.

README

8.0 KB · Cached 2026-08-18 17:12:48 · 8.0 KB

Expand full README Collapse

README is empty.

Rendered from README.md of SipengXie2024/dsh-auto-approval. View original on GitHub →

Install

README

Related Plugins