@llangtop/dsh-approval-ai

Configuration

- id: approval-ai
  name: '@llangtop/dsh-approval-ai'
  config:
    provider: deepseek-official
    model: deepseek-v4-flash
    mode: ai-only
    currentPath: /workspace/project
    projectArchitecture: 'Configuration-supplied summary; the plugin never reads project files.'
    implementationArchitecture: 'Approval policy plugin over approval/request and ctx.llm.'
    agentsMd: 'Configuration-supplied guidance; the plugin never reads AGENTS.md.'
    securityApprovalPrompt: 'Assess only this approval request; do not read files or call tools.'
    timeoutMs: 3000
    failClosed: true

mode is ai-only, ai-then-human, or human-only. The plugin receives every approval request that reaches its listener; it does not decide whether an approval request should exist. human-only delegates every request. ai-only maps valid allow assessments to allowed-once; deny, high/critical risk, review, malformed output, missing routes, cancellation, timeout, and provider errors fail closed. ai-then-human maps review to the configured reviewOutcome because listener order is not a priority mechanism.

The model receives the DSH approval request fields plus explicitly configured background: the current path, architecture summaries, mounted AGENTS.md guidance, and the security-approval prompt. These are configuration values, not files the plugin reads. The plugin never reads the project, session history, tool schemas, credentials, or the main system prompt, and does not write the model request or response to the agent session. Arguments and response reasons are byte-bounded and model output is runtime-validated JSON.