PAKIKNOWLEDGE/dsh-auto-classifier

README 摘要

dsh-auto-classifier — autonomous ("auto") mode for DeepSeek Harness English 中文 A Claude-Code-auto-mode-like permission classifier for DeepSeek Harness. Adds a fourth permission preset auto (Autonomous) beside read-only / workspace-write / danger-full-access : tool calls are classified automatically — dangerous operations are blocked before they run, safe ones flow, and sandbox escalations are decided by the classifier without a human watching the approval prompts. How it works Host-plane plugin. Two { prepend: true } listeners decide BEFORE the browser answerer, active only in sessions whose permission preset is auto ; every other session keeps the stock interactive behavior (handlers call next() ): Hook Role tools/pre-execute (the tool pre-execution waterfall) Every tool call sees its name + full arguments: dangerous commands (system-directory deletion, formatting, registry writes, git reset --hard / force push, credential access, …) are denied BEFORE anything executes approval/request (the approval waterfall) Sandbox escalations ( sandbox permissions ) are auto-allowed / auto-rejected by the classifier — no browser prompt in auto sessions git snapshot Before an allowed high-risk …

分类