Xpectuer/dsh-llm-approver

README 摘要

dsh-llm-approver LLM pre-review for sandbox-escalation approvals in the DeepSeek Harness web GUI. When the session sits in the workspace-write-llm permission preset, a sandbox escalation retry ( sandbox permissions on bash/pwsh/fs tools) is first judged by an independent-context LLM call — the request contains only the pending command and its justification, never the conversation history: - ALLOW → the call runs immediately ( allowed-once ); the user is never prompted. - DENY, timeout, error, unparsable output, tool-call output, abort → the request falls through to the existing web UI approval prompt unchanged. The gate is fail-closed : it can only grant, never reject, and every failure mode degrades to the user. Sessions in any other preset pass through synchronously with zero behavior change. Installation Requires dsh with a profile ( /.dsh/profiles/web for the web GUI) and pnpm available. Quick (scripts) Each script edits the profile's package.json (bundle + dependency, keeping both lists intact), runs pnpm install , verifies the composed tree, and prints the restart reminder. Both are idempotent. Manual Edit /.dsh/profiles/web/package.json : For local development instead of Git…

分类