accpowered/dsh-auto-review

README 摘要

dsh-auto-review English 简体中文 LLM auto-review approval answerer for DeepSeek Harness: when a session's approval policy is 'auto' , sandbox escalations beyond workspace-write ( sandbox permissions: "danger-full-access" + justification) are decided without a human prompt — a human is asked only when the reviewer is unsure, and every error path fails closed. Two decision layers, in order: 1. Deterministic filter — hardline (always-deny) + deny/allow regex rules over a normalized command ( / $HOME expansion, comment stripping, whitespace collapse, macOS private-path folding). A hardline or deny match rejects immediately; an allow match grants immediately; neither runs the LLM. Deterministic denials are FINAL — operator policy is never appealed. 2. Clean-context LLM safety review — the gray zone goes to a small reviewer model with a fixed constant system prompt, temperature: 0 , a single-word verdict ( ALLOW / DENY / UNSURE ), and a tight output cap. The user message carries ONLY the tool name, the justification, and the XML-wrapped command — never the conversation. Appeal mode ( context: 'appeal-user-prompts' , the default): an LLM-voiced DENY is re-judged ONCE with the session's genuin…

分类