deepseekplugins

DeepSeek Harness plugin

dsh-approve-for-me-hakunm

A fail-closed automatic approval mode with selectable reviewer models and visible decisions for DeepSeek Harness

Security & Permissions
Jump to install

Source facts

Repository
Hakunm/dsh-approve-for-me
Latest update
Aug 16, 2026
Category
Security & Permissions
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/Hakunm/dsh-approve-for-me
Plugin: dsh-approve-for-me-hakunm
Author: Hakunm

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer4 files
README.en.mdSource · read only
README language

<div align="center">

dsh-approve-for-me

Let an AI review sensitive DSH actions without handing over unrestricted access.

English · 简体中文

![Release](https://github.com/Hakunm/dsh-approve-for-me/releases/latest) ![CI](https://github.com/Hakunm/dsh-approve-for-me/actions/workflows/ci.yml) ![License](LICENSE) ![DSH Plugin](https://github.com/topics/dsh-plugin)

</div>

dsh-approve-for-me adds an Approve for me access mode to DeepSeek Harness. DSH stays inside its workspace-write sandbox. Whenever an action reaches the approval boundary, the plugin asks your chosen model to review the risk and decide whether that one request may proceed.

Every decision appears next to the action it reviewed. Expand it to see the rationale, actual reviewer model, risk judgment, and authorization evidence.

!Approve for me mode, reviewer selector, and running version

Why use it

Workspace Write pauses for a click whenever a sensitive action needs approval. Full access removes that friction by removing the approval and sandbox boundaries too. Approve for me sits between them: it keeps the workspace sandbox, reviews every sensitive request, and leaves the result in the conversation.

  • One action, one decision — an allow applies only to the current request.
  • Choose the reviewer — follow the conversation model or use another enabled DSH provider/model.
  • Visible outcomes — allows, denials, and review failures all appear in the UI.
  • Fail closed — timeouts, unavailable models, invalid output, and audit failures never allow the action.
  • No DSH source changes — install, update, and remove it through the official plugin/Profile workflow.

!Expanded automatic review result

Install

Requirements:

  • DeepSeek Harness >=0.1.0-rc.5 <0.2.0
  • Node.js ^22.19.0 or >=24.0.0

Download dsh-approve-for-me-1.0.0.tgz from the latest release, then install it with the official DSH plugin command. This example uses the web Profile:

dsh plugin --profile web add C:\path\to\dsh-approve-for-me-1.0.0.tgz

Restart the running DSH Web service and refresh the page. The plugin is ready when Approve for me appears in the access-mode menu and the compact control reads Automatic review · v1.0.0.

Linux and macOS use the same command with the appropriate path:

dsh plugin --profile web add /path/to/dsh-approve-for-me-1.0.0.tgz

To upgrade, download the new .tgz, run plugin add again, and restart that Profile.

Use

1. Open the access-mode menu in the composer and choose Approve for me. 2. Expand Automatic review · v1.0.0 and choose a reviewer. Follow conversation model is the simplest default; you can also select a different enabled model for independent review. 3. Continue using DSH normally. The plugin reviews sensitive actions as they arise and places each result near the affected action. 4. Expand a result to read the full rationale and actual reviewer model.

Switching to Read Only, Workspace Write, or Full access immediately stops new automatic reviews. Existing results remain where they were recorded.

The compatibility commands are also available:

/approve-for-me on
/approve-for-me off
/approve-for-me status
/approve-for-me model follow

How it protects you

The plugin only answers requests that DSH already marked as requiring approval; it does not bypass the sandbox. The reviewer has no tools. It receives bounded context for the current action and must return a strict structured decision. An allow is checked again by local risk rules and can grant only a one-time allowed-once result.

The action stays denied when:

  • its risk is outside the automatic allow boundary;
  • user intent or context is insufficient;
  • the reviewer times out, is unavailable, or returns invalid output;
  • the selected model is no longer enabled in DSH; or
  • the decision cannot be recorded reliably.

Using a third-party reviewer sends a bounded review payload to that provider and may incur additional cost. The UI shows the provider/model that was actually called. Audit records do not copy full conversations, tool output, credentials, tokens, or raw model responses.

Automatic review can still make mistakes. Keep important work under version control, maintain backups, use least privilege, and run DSH on a trusted network.

FAQ

<details> <summary><strong>How is this different from Full access?</strong></summary>

Approve for me keeps the workspace-write sandbox and continues reviewing sensitive actions. Full access grants broader permissions and skips approval. Use Approve for me when you want fewer interruptions without removing the safety boundary. </details>

<details> <summary><strong>What happens when the reviewer call fails?</strong></summary>

The action does not run. A visible failure result explains what happened. You can check the model configuration, return to Follow conversation model, or switch to Workspace Write and approve the action yourself. </details>

<details> <summary><strong>How do I uninstall it?</strong></summary>

dsh plugin --profile web remove dsh-approve-for-me

Restart the affected DSH Profile afterward. Removing the plugin does not delete DSH sessions. Its approval metadata can be handled under your own data-retention policy. </details>

Feedback and license

Please use GitHub Issues for bugs and feature requests. Do not attach credentials, complete conversations, or unredacted logs to a public issue.

Released under the [GNU GPL v3.0](LICENSE).

Back to searchOpen GitHub repository

More related plugins

View category