@dnalec/dsh-auto-approve

Configuration

- id: dsh-auto-approve
  config:
    onlyAutoApprovePreset: true
    presetSandbox: workspace-write   # or read-only: workspace writes also go through the judge
    judge:
      provider: ''
      model: ''
      reasoningEffort: ''
      timeoutMs: 20000
    notify:
      enabled: true
      chatId: ''
      userId: ''
      timeoutSecs: 120

Empty judge fields follow the deployment default model. If there is no default and nothing is configured, or the route is invalid, that request goes to a human. There is no hardcoded fallback model. The settings Judge timeout writes judgeTimeoutMs in allowlist.json (that is what runtime uses); yaml judge.timeoutMs is only a default when allowlist does not exist yet.

If a JSON file cannot be parsed, this process uses in-memory defaults and does not overwrite the file. Settings will not write a corrupt allowlist except Restore defaults; a corrupt plugin config needs an explicit overwrite; corrupt QQ credentials need a re-save or QR scan.