dsh-auto-approve
A DeepSeek Harness plugin that adds an auto-approve permission mode and can automatically grant requests matching its sandbox-reason heuristic or all approval requests.
Features
- Adds an Auto approve permission preset that preserves the
workspace-writeboundary. - Provides
/auto-approve all|sandbox|off|status. - Adds a session-header control that cycles between off, sandbox-matched, and all approvals.
- Intercepts the
approval/requestwaterfall and returnsallowed-oncefor the selected mode.
Install
# Install from the repository root.
dsh plugin --profile web add ".\dsh-auto-approve"
# Or, after publishing
dsh plugin --profile web add dsh-auto-approveRestart dsh web after installation. The permission selector then exposes the Auto approve preset and the command and header control become available.
How It Works
| Layer | Behavior |
|---|---|
| Permission preset | Extends @deepseek-ai/dsh-permission-presets with auto-approve using workspace-write plus ask. |
| Approval handling | Intercepts approval/request; the preset grants all requests, while manual sandbox mode grants requests whose reason text contains sandbox, all grants every request, and off grants none. |
DSH has ask and never policies but no native auto-approve policy. This plugin implements auto-approval by short-circuiting the waterfall. never means reject, not auto-approve.
Security
allgrants every approval request and is only suitable for trusted tasks.- Manual mode is process-local and returns to the default
sandboxmode after restart. - The Auto approve preset remains constrained to
workspace-write; requests outside the workspace still use escalation, although this plugin grants the resulting approval.