Install

Inside DeepSeek Harness, with dsh-market

dsh plugin --profile web add dshmarket

Or from the command line

dsh plugin --profile web add github:DamonKoy/dsh-plugins#path:/packages/dsh-approve-for-me

Installing runs third-party code with your own permissions — it can read your files, use your credentials and reach the network. Review the source first, and pin a commit (github:owner/repo#sha) when you can.

README

Automated approval review for DeepSeek Harness. Inspired by Codex 0.147's --approve-for-me (Guardian auto-review).

English | 中文

What it does

approval/request hook: in review mode, read-only tools (read, grep, glob, ssh_list, inspection tools, ...) are auto-approved; in auto mode every request is approved — except dangerous commands, which are always denied (fail-closed security floor).
tools/pre-execute hook: dangerous shell commands (rm -rf /, mkfs, dd of=/dev/sdX, fork bombs, chmod -R 777 /, curl|sh, shutdown, ...) are hard-blocked before dispatch, so they never reach the approval prompt.
approval_policy_status tool: report the current mode and activity.
RPC (approve-for-me/status, approve-for-me/set-mode) for client halves and other plugins.

Modes

Mode	Read-only tools	Other tools	Dangerous commands
`off`	ask human	ask human	ask human
`review` (default)	auto-approve	ask human	auto-deny
`auto`	auto-approve	auto-approve	auto-deny

Install

dsh plugin --profile web add github:DamonKoy/dsh-plugins#path:/packages/dsh-approve-for-me

Restart dsh web. Default mode is review.

Config

~/.dsh/dsh-approve-for-me.json:

{ "mode": "auto" }

Valid modes: off | review | auto. You can also switch at runtime via the approve-for-me/set-mode RPC (memory-only, resets on restart).

Security notes

Auto-approval never bypasses the dangerous-command denylist.
Denials are fail-closed: a throwing listener falls through to the human answerer, never to silent approval.
The policy engine (lib/policy.js) is unit-tested; run node --test test/ to verify.