dsh-auto-approval DSH plugin

dsh-auto-approval is a Cordis-based DeepSeek Harness plugin that adds the `trusted-auto` permission preset between Workspace Write and Full Access. It automatically grants one-shot approvals for selected harmless commands and trusted-area operations, while deferring all other requests to the normal human approval flow.

ui-productivity terminal developer-tools security-policy remote-execution

How to install the dsh-auto-approval DSH plugin

The snapshot has no install command. Check the repository README for current instructions.

Data source

Snapshot date: Aug 15, 2026

manifest-valid

What the dsh-auto-approval DSH plugin can do

Adds a `trusted-auto` permission preset to DSH permission settings and the `/permission` picker.
Evaluates approval requests using recorded tool-call arguments rather than model-written justifications.
Auto-approves configured harmless shell commands without shell metacharacters.
Auto-approves qualifying filesystem write/edit targets within configured trusted areas.
Resolves path containment through real paths to account for symlinks and junctions.
Records auto-approval audit events and can log the matched decision rule.
Defers unmatched, dangerous, malformed, oversized, or unavailable requests to the human approval handler.

Where the dsh-auto-approval DSH plugin fits

Reduce repeated approval prompts for read-only inspection commands.
Allow controlled work in approved directories outside the current workspace.
Use a middle permission mode where Full Access would be too broad.
Apply auditable one-shot approval automation in trusted local development sessions.

Who the dsh-auto-approval DSH plugin is for

DeepSeek Harness users managing local development workflows.
Teams or individuals who need configurable approval automation for trusted paths.
Users who want a permission tier between Workspace Write and Full Access.

dsh-auto-approval DSH plugin limitations

Trusted areas are empty by default, so trusted-area automation is inert until configured.
The plugin is explicitly scope control rather than a security boundary.
Auto-approved operations run with the wider mode for that one call, equivalent to a human one-shot grant.
It never denies requests; requests outside its rules defer to the deployment's normal human answerer.
Shell metacharacters, write/fetch/merge Git operations, certain Git display commands, dangerous-pattern matches, and unsupported tools are not auto-approved.
Its bundle patch must be kept synchronized with the DSH base permission preset table when DSH is upgraded.

Objective checks

These signals come from public metadata scans. They are not a security certification.

dependency counts
package.json declares 0 runtime, 3 development, 3 peer, and 0 optional dependencies.
info
dsh bundle declared
package.json declares DSH bundle metadata.
info
package manifest available
A root package.json was captured and can be inspected by the registry.
info
license declared
GitHub reports the repository license as MIT.
info
source available
Public GitHub source metadata is available for this registry snapshot.
info

dsh-auto-approval DSH plugin alternatives

dsh-automation

Schedule standalone coding tasks in fresh DeepSeek Harness Agent sessions, with workspace-scoped controls and durable run history.

dsh-undo-plugin

DSH snapshot and rollback plugin for configuration changes, with WebUI controls, chat actions, and offline PowerShell recovery tools.

dsh-chat-import

Import, resume, export, and incrementally sync agent chat histories in DeepSeek Harness.

dsh-web-billing

A DSH web plugin that records per-message token costs, displays billing summaries, and fetches DeepSeek account balances in CNY or USD.

dsh-auto-approval DSH plugin questions

What is the dsh-auto-approval DSH plugin?

dsh-auto-approval is a project included in the current DSH plugin snapshot. This page organizes repository metadata and reviewed notes, but you should still inspect the upstream repository before running it.

How do I install the dsh-auto-approval DSH plugin?

The current snapshot does not contain a reliable install command. Use the dsh-auto-approval repository README instead of guessing a command from the plugin name.

Which DSH profile does dsh-auto-approval use?

The current snapshot does not confirm a profile for dsh-auto-approval. Check its manifest and README so the plugin is not added to the wrong DSH profile.

Is dsh-auto-approval compatible with the current DSH release?

The source data does not include a verified compatibility matrix. Check recent commits, releases, and DSH breaking changes, then test in a profile you can roll back.

What should I do if dsh-auto-approval fails to load?

Check the install command, selected profile, dependency logs, and Cordis startup output first. Keep the exact error string, then compare it with this site's fix pages and upstream issues.

What are the closest alternatives to dsh-auto-approval?

Related plugins on this page come from the current snapshot and are only candidates. Compare capabilities, maintenance activity, installation method, and limitations before choosing one.