Introduction

When running agent tasks with DSH, permissions are generally selected from Read Only / Workspace Write / Full Access. Choosing Workspace Write keeps file operations sandboxed within the workspace, which is safer; however, the trade-off is having to click approve for every tool call. If there are many task steps, clicking confirm disrupts the workflow. Switching to Full Access stops the approval pop-ups, but it also lifts the sandbox restrictions on file operations; they are coupled together.

dsh-approval-mode splits these two concerns: it keeps Workspace Write permission and adds an “Approval Mode” button next to it, turning the “step-by-step confirmation” into an independent toggle. Below is an introduction to how to use this plugin.

What is it

dsh-approval-mode is a DSH plugin maintained by NEVSTOP-LAB, licensed under MIT. DSH’s philosophy is “everything is a plugin.” This plugin does one simple thing: it adds an “Approval Mode” button next to the input toolbar and the permission dropdown (Read Only / Workspace Write / Full Access), providing two modes:

  • Default Approval: Consistent with DSH’s original behavior, tool calls require a click to approve.
  • Bypass Approval: All tool calls are automatically approved without needing to click.

Mode switching takes effect immediately and persists after a restart.

Core Features

  • The button is located next to the input toolbar and the permission selection, with the same style as the permission controls.
  • When bypassing approval, the button turns orange, making the current status immediately visible.
  • Switching modes notifies the agent of the current session, allowing the agent to perceive the mode change.
  • When the session permission is Full Access, the button is grayed out and displays “Bypass Approval”; the mode cannot be switched—DSH itself no longer initiates approval requests, rendering this plugin useless at this point.
  • When bypassing approval, file operations are still sandboxed within the workspace.

Installation and Usage

Requires dsh CLI 0.1.0-rc.6 or higher. First, install the plugin:

dsh plugin --profile web add github:NEVSTOP-LAB/dsh-approval-mode

--profile web is the default profile. For the desktop version (DSH Desktop), use --profile desktop; for other profiles, simply replace web with the corresponding name.

It is recommended to lock to a specific commit to avoid subsequent updates changing the actual content:

dsh plugin --profile web add github:NEVSTOP-LAB/dsh-approval-mode#<commit-sha>

You can also install locally by downloading a tarball from the Releases page:

dsh plugin --profile web add ./dsh-approval-mode-0.1.1-rc.2.tgz

The tarball filename in the README example is 0.1.1-rc.2, while the current version in package.json is 0.1.1-rc.3. When downloading, refer to the actual version on the Releases page.

After installation, confirm that the plugin has been loaded in the composition layer:

dsh --profile web --dump-config

After starting, a “Default Approval” button will appear next to the permission dropdown in the input toolbar.

Uninstall:

dsh plugin --profile web remove dsh-approval-mode

Typical Usage

Daily workflow:

  1. Keep session permission as Workspace Write.
  2. When you need to execute a batch of trusted operations consecutively, click the “Approval Mode” button to switch to “Bypass Approval”. The button turns orange, and all subsequent tool calls are automatically approved.
  3. Switch back to “Default Approval” after the task is complete.

Two edge cases:

  • If you switch the session permission to Full Access, DSH itself no longer initiates approval requests, the button will be grayed out and display “Bypass Approval”, and the plugin will not participate in the work.
  • If you want to reduce confirmation clicks without lifting the sandbox restrictions, using “Bypass Approval” is more appropriate than switching to Full Access: tool calls are allowed, but file operations are still restricted to the workspace.

Applicable Scenarios and Notes

Suitable users: Those who frequently use Workspace Write permission, have many task steps, have frequent confirmation clicks, and are confident in the current task content.

Notes:

  • “Bypass Approval” will automatically approve all tool calls, including sensitive operations like file modifications and external commands, without any confirmation prompts throughout. Use it only when you completely trust the current task, and switch back to “Default Approval” after use.
  • The plugin runs with the permissions of the current dsh process. Installing a third-party plugin is equivalent to putting code into your runtime environment. It is recommended to review the source code before installation to confirm the license (this plugin is MIT).
  • Regarding versions, package.json is 0.1.1-rc.3, and the tarball example in the README is 0.1.1-rc.2. Pay attention to the actual version on the Releases page during installation.

Conclusion

dsh-approval-mode solves a very specific problem: while maintaining Workspace Write sandbox restrictions, it adds a toggleable switch for “step-by-step confirmation,” reducing confirmation clicks during long tasks, which can be switched back after use. The plugin itself has a single function and clear boundaries; it is a small tool that you install and forget.

  • Community Directory Page: https://www.skillhub.cn/plugins/NEVSTOP-LAB/dsh-approval-mode (An independently maintained community site, with no official affiliation to DeepSeek / Huafan)
  • GitHub Repository: https://github.com/NEVSTOP-LAB/dsh-approval-mode