dsh-auto-mode
CC-style auto-approval for DeepSeek Harness: deterministic rules + model-agnostic classifier as final authority. Robust verdict parser, non-bash pre-execute escalation envelope, circuit breaker, fail-closed semantics.
AI Analysis
核心用途是提供安全的自动审批机制，通过正则拦截高危操作，自动放行安全命令。适合需要平衡自动化执行效率与系统安全性的用户。
Install
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:log-li/dsh-automodeREADME
Read the full README ↗Configuration
Key options in cordis.patch.yml (all have defaults):
| Option | Default | Description |
|---|---|---|
modePreset | "auto" | Permission preset this plugin owns. Empty = observe all sessions. |
dryRun | true | Shadow mode: decide + record, but always delegate. Set false to enforce. |
hardDeny | exfil, curl pipe, … | Regexes that always deny. |
sensitiveDeny | .ssh/, .env, … | Sensitive targets: deny + safer-alternative guidance. |
allowCommands | trash *, git status, … | CC-style prefix globs. Zero-LLM auto-allow. |
allowPaths | [] | Curated full-trust directories. Danger-full-access writes here auto-allow. |
breakerConsecutive | 3 | Consecutive DENY count to trip the breaker. |
breakerTotal | 20 | Total DENY count to trip the breaker. |
timeoutMs | 45000 | Classifier call timeout. |
classifyContextChars | 6000 | Context budget for task-alignment input. |
preExecuteGate | true | Enable the pre-execute deny-band + escalation pre-screen. |