TingRuDeng/dsh-smart-approval

Install

- Access: Read Only, Workspace Write, and Full access, owned by DSH.
- Automatic review: Manual approval, Smart approval, and Unattended, owned by
  this plugin.

| Review mode | Safe request | High-risk or uncertain | Clearly malicious |
|---|---|---|---|
| Manual approval | Ask a human | Ask a human | Ask a human |
| Smart approval (recommended default) | Allow once | Ask a human | Reject |
| Unattended | Allow once | Reject | Reject |

Automatic review only handles requests that already enter DSH's
`approval/request` waterfall. It never expands the current access permission or
switches a session to Full access.

## Install

### Requirements

- Node.js 24 or later.
- DeepSeek Harness `>=0.1.0-rc.5 <0.2.0`.
- `pnpm` on `PATH`; DSH forwards plugin-management operations to pnpm.

After installing the DSH CLI globally:

Add TingRuDeng/dsh-smart-approval to your DSH config (web profile) to enable.