Andy8647/dsh-auto-approval
40Last commit Aug 13, 2026
dsh-auto-approval DSH plugin
dsh-auto-approval is a plugin that adds an autonomous approval tier to DeepSeek Harness. It uses a two-stage classifier (L0 rules + L1 LLM) to automatically allow or deny every tool call, with no human in the loop. An optional client UI component shows a status chip and a dialog with stats and controls.
How to install the dsh-auto-approval DSH plugin
dsh plugin --profile web add dsh-auto-approvalCopying does not run this command. Review the repository and version before installing the dsh-auto-approval DSH plugin.
dsh-auto-approval DSH plugin data source
dsh-auto-approval DSH plugin snapshot date: Aug 16, 2026
discovered
What the dsh-auto-approval DSH plugin can do
- Provides an auto approval tier that classifies tool calls as allow or deny
- Uses L0 rules (whitelist/deny) and an L1 LLM classifier for uncertain calls
- Offers a client UI chip that shows the AA run state (on/off) with cumulative stats on hover
- Clicking the chip opens a dialog with an on/off switch, config summary, and recent-decisions table
Where the dsh-auto-approval DSH plugin fits
- Fully autonomous DSH sessions where no human approval is needed for tool calls
- Automatically approving safe file read/write and ls commands while denying dangerous ones
- Enforcing a deny-all policy for uncertain or unrecognized tool calls
- Monitoring approval decisions and statistics via the client UI chip
Who the dsh-auto-approval DSH plugin is for
- Users who want to run DSH workflows without manual approval intervention
- Developers deploying DSH in automated pipelines or unattended environments
dsh-auto-approval DSH plugin limitations
- Only supports the web profile (installation command uses --profile web)
- Uncertain tool calls are automatically denied, which may block legitimate but ambiguous operations
- Requires both the host and client packages to be installed for full functionality
- Depends on the DSH environment and the Typed remote communication mechanism
dsh-auto-approval DSH plugin: from the repository README
Quoted from the Andy8647/dsh-auto-approval README, the upstream source of the dsh-auto-approval DSH plugin. Copyright remains with the original authors.
Automated tool-call approval for DeepSeek Harness: an `auto` tier for the approval policy that classifies every tool call as **allow / deny** (fully autonomous — no human in the loop, uncertain calls are denied). A monorepo of two packages: | Package | Role | |---|---| | [`packages/dsh-auto-approval`](./packages/dsh-auto-approval) | **host half**: pre-execute classifier (L0 rules + L1 LLM, two-state allow/deny) | | [`packages/dsh-client-ui-auto-approval`](./packages/dsh-client-ui-auto-approval) | **client half**: AA status chip beside the composer access-mode selector, fed by the host via a Typert remote | ## Demo  The **chip** next to the composer shows the run state (`AA on` / `AA off`); hover for cumulative stats, click for a dialog with the on/off switch, config summary and the recent-decisions table. The demo covers: file read/write and `ls` whitelisted and dispatched directly, a harmless command allowed by the L1 classifier, and dangerous commands rejected by deny rules / legacy-ask rules (now denying) / the self-kill guard. ## Install Install both p
Read the full READMEThe repository declares no license. Check with the authors before using it.
dsh-auto-approval DSH plugin questions
How do I install dsh-auto-approval?
Run the following commands in your terminal: 'dsh plugin --profile web add dsh-auto-approval' and optionally 'dsh plugin --profile web add dsh-client-ui-auto-approval'. Both packages are published to npm and include prebuilt artifacts, so no build environment is needed.
Does dsh-auto-approval require any API keys?
The plugin uses its own L0 rules and an L1 LLM classifier. The README does not specify whether you need to provide an API key for the LLM; it may rely on the DSH environment's existing LLM configuration. Check the host package README for more details.
Can I use dsh-auto-approval with other approval policies?
dsh-auto-approval is designed as an additional 'auto' tier for the approval policy. It is meant to replace or complement the existing manual approval process. You can likely switch between policies, but the plugin itself is standalone.
How does the auto approval work?
When a tool call is made, the plugin first applies L0 rules (whitelist/deny). If the call is uncertain, it invokes an L1 LLM classifier to decide whether to allow or deny. Every call is classified as either allow or deny, with no human in the loop. Denied calls are blocked.
What does the client UI chip show?
The chip appears next to the composer access-mode selector. It displays the current AA state (on/off). Hovering over it shows cumulative statistics (e.g., allow/deny counts). Clicking opens a dialog with an on/off switch, a config summary, and a recent-decisions table.