a903067276-rgb/dsh-perm-guard

README 摘要

dsh-perm-guard English 简体中文 Auto-approval permission guard for DeepSeek Harness ( dsh ) web — the "middle tier" between workspace-write (asks too often) and danger-full-access (too open). Common operations like cross-directory edits, git commit / merge and builds run without approval prompts ; destructive operations (deletes, disk ops, privilege escalation, curl sh ) always ask for human confirmation . Features - Auto approval answerer — intercepts every approval request before the host prompt, classifies the actual command/target, and auto-answers allowed-once for safe operations (13ms, no popup) or forwards to the human prompt for risky ones. - Command-level firewall ( tools/pre-execute ) — dangerous categories are intercepted before the sandbox even rejects them. - Two modes (switchable in the settings page, persisted): - Standard — auto-approve inside the trust directories (workspace, sibling directories, custom list); outside + risky operations prompt. - Aggressive — location-unrestricted: only destructive operations still prompt. - 11 per-category tri-state switches (auto / ask / deny) with your personal defaults. - Audit trail — every decision is recorded (approved / forward…

分类