At a glance
What it does
A DeepSeek Harness plugin that delegates approval-required tool calls to a configured review model.
Web Profile
DeepSeek Harness 0.1.5-rc.2; Node ^22.19.0 or >=24.0.0
Evidence-verified
Checked Sep 13, 2026, 2:08 PM UTC
Code-evidenced contributions
What it adds to DSH
Adds a Workspace Write permission preset that sends approval-required tool calls to a configured review model.
Mechanism evidence ↗Injects a web client integration and exposes the preset in the DeepSeek Harness permission menu.
Mechanism evidence ↗Before you choose it
dsh-approve-for-me adds an “Approve for me” permission preset to the DeepSeek Harness web profile. It keeps the Workspace Write sandbox and ask approval policy, then reviews calls that DSH would otherwise ask about using a selected model. The project describes fail-closed behavior for unavailable models, timeouts, malformed output, or missing call context.
Best for
DeepSeek Harness users who want model-assisted review of tool approvals while keeping workspace confinement.
Common tasks
- Choose an approval model to review tool calls that require user approval.
- Use a separate review model or follow the current agent model.
- Keep routine workspace work in Workspace Write instead of enabling Full Access.
Permissions and data
Adds a Workspace Write, ask-based preset and submits approval-required call context to the configured DSH review model.
Permissions- Workspace Write sandbox
- Ask-based approval policy
- Approval decisions depend on the original tool-call context supplied to the review flow.
- The supplied evidence does not establish storage, retention, or third-party data handling beyond configured DSH model use.
- A usable DeepSeek Harness model is required; API-key and OAuth login options are described.
- A DSH model credential path is needed through an API key or the referenced OAuth login option.
Limitations
- Only calls that DSH would normally ask to approve are reviewed; directly allowed calls are not sent for review.
- Slash commands, background plugin tasks, Creator activation, Host RPC, and out-of-process subagents are stated to be out of scope.
- The plugin is documented for DeepSeek Harness 0.1.5-rc.2 and requires Node ^22.19.0 or >=24.0.0.
- The npm distribution has a repository mismatch; use the verified immutable Git bundle as the source of record.
- MIT licensed software is provided without warranty.
What DSHub checked
- The pinned source contains a structure-verified DSH bundle patch that registers dsh-approve-for-me.
- The manifest declares a web client integration, Node engine requirement, and DeepSeek Harness peer dependencies.
- The repository documents installation through the official DSH plugin-add command.
What DSHub did not check
- Installation, host restart behavior, review-model behavior, and runtime compatibility were not executed.
- The stated allow/deny rules and fail-closed behavior were not independently tested.
Pinned install
Install Approve for Me
This plugin bundle does not have a DSH Plugin install action. Use its source documentation for the delivery method.
Maintainer source
Project README
中文 | English
替我审批
dsh plugin --profile web add github:aa2246740/dsh-auto-review
这条命令走官方 dsh plugin add：它在 $DSH_HOME/profiles/web 里调用 pnpm，所以 PATH 上要有 pnpm。没有 dsh 时用 npx @deepseek-ai/dsh plugin --profile web add github:aa2246740/dsh-auto-review。装完重启这个 Host，再刷新页面。add 只写 profile，不会热挂正在跑的进程。
仓库已提交编好的 lib/，并声明 dsh.bundle.patch。面向 DeepSeek Harness 0.1.5-rc.2 的 stock 用户：不要走 Creator Mode，也不需要再 clone 一份插件目录。
Loader id：dsh-approve-for-me。仓库名是 dsh-auto-review，已有安装不用改名。
DeepSeek Harness 跑工具前会按权限策略决定是否询问。这个插件在权限菜单里加一档 Approve for me：沙箱仍是 Workspace Write。已经被 DSH 直接放行的调用不会送审。真正需要审批的调用交给你在 DSH 里指定的独立审批模型。
能严格证明安全的本地观察可以快速放行。整盘删除这类操作在本地拒绝。模型不可用、超时、输出不合规或缺少原始调用上下文时直接失败关闭，不再退回人工审批。
输入框选中 Approve for me 后，插件只给这一档补盾牌星标。另外三种官方模式不变。装好后在输入框权限菜单选 Approve for me，再到插件设置里选审批模型。不要再通过另一份 bundle 或 patch 重复挂载。
本地 clone 时同样用官方 CLI（仍需要 pnpm）：
git clone https://github.com/aa2246740/dsh-auto-review.git
dsh plugin --profile web add ./dsh-auto-review
dsh plugin --profile web remove dsh-approve-for-me
需要 DeepSeek Harness 0.1.5-rc.2、Node ^22.19.0 或 >=24、至少一个可用的 DSH 模型。API key 或 dsh-oauth-login 都可以。
怎么判
- 保留 DSH 的
workspace-write沙箱和ask审批策略，不授予 Full access。 - 只审核 DSH 原本会询问的请求。
- 可以跟随当前 Agent 模型，也可以固定独立模型。模型支持时请求
lowreasoning。 - 快速通道是允许列表：
pwd、ls、有界find、非敏感read/grep/glob等，只有被证明安全时才直接过。 - 审批模型必须返回
risk_level、user_authorization、outcome、rationale。Critical 不能放行。High 必须有足够明确的用户授权。 - 每次审批独立生效。模型不能创建「始终允许」。
- 总期限默认 90 秒。传输或格式故障最多再试两次，共用这个期限。
- 缺少调用关联、模型不可用、超时、格式错误全部失败关闭。
覆盖注册工具、Code Mode 子调用，以及经过 DSH 工具运行时的 MCP 工具。斜杠命令、后台插件任务、Creator 激活、Host RPC 和进程外子代理不在范围内。
安全边界见 SECURITY.md。
开发
pnpm install --ignore-workspace
pnpm test
dsh plugin add github: 加载的是仓库里的 lib/。改源码后重新构建并一起提交 lib/。
许可
MIT。
Operate deliberately
Install and manage
Prerequisites and target Profile
Target： Web Profile
Delivery： Dsh Bundle Git — aa2246740/dsh-auto-review#69680705ff85c38d284b365140ee1aa8cb1e412a。
Verify, update, and remove
Show lifecycle commands
dsh plugin --profile web listCompatibility and access
Targeted at DeepSeek Harness 0.1.5 Rc.2; runtime compatibility unverified： DeepSeek Harness 0.1.5-rc.2; Node ^22.19.0 or >=24.0.0。
Review compatibility evidence ↗
Risk facts
Approval-required calls may be automatically allowed or denied by a configured model.
Evidence ↗The added preset retains Workspace Write sandbox access.
Evidence ↗Evidence and editorial reviewManifest, Bundle patch, distribution and freshness
Immutable evidence
Review status and source activity
Use this for assisted approval decisions, not as a safety certification or a replacement for reviewing your selected model and permission settings.
AI reviewed Sep 13, 2026, 2:09 PM UTC。GitHub facts last checked Sep 13, 2026, 2:09 PM UTC。
No material source change has been recorded since this evidence baseline.