dsh-managed-approval

Working with DeepSeek Harness (DSH) day to day, the permission menu offers only three presets—Read Only, Workspace Write, and Full Access—and the constant approval prompts fragment focus. Existing auto-approve plugins either blanket-permit everything or limit themselves to Shell command allowlists. dsh-managed-approval adds a fourth session-level preset, "Approve for me," where a tool-free, one-shot model reviewer evaluates each pending operation against its risk and your trusted authorization context, auto-granting or denying it so approval fatigue drops to a minimum while DSH's sandbox stays in place as the safety floor.

The decision semantics are Codex-inspired: read-only search, list, and fetch-style MCP calls continue without an extra prompt, while side-effecting operations—create, update, delete, write, send, publish, upload—or unknown MCP actions are promoted into the approval path. The reviewer issues a one-time grant per operation, never a persistent permission. On denial it not only blocks the call but instructs the agent to find a materially safer alternative. If the reviewer times out, returns malformed output, or hits any other infrastructure failure, the request falls back to DSH's native human-approval prompt; three consecutive denials in a single turn trip a circuit breaker. You can point the reviewer at a separate model and provider via the profile patch, and layer glob-based toolRules for fine-grained allow/review/deny routing—though no rule can ever weaken an ask or deny returned by another DSH policy layer.

This plugin is for DSH users who want to cut approval interruptions dramatically without resorting to blanket auto-approve, especially in workflows heavy on MCP tool calls. It is not a full Codex clone—there is no exact-action /approve retry or rolling 10-of-50 rejection breaker yet—but within the hooks DSH rc.6 exposes it provides a conservative, configurable, risk-aware approval layer. If the session experience you want is "grant when safe, deny with a safer-path hint, hand off to a human on failure," dsh-managed-approval is one of the closest community plugins to Codex-style approval semantics on DSH today.