dsh-action-outbox

Configuration

The default permits any visible non-internal tool to be staged, requires approval for commit, and does not force any direct tool through the outbox.

- id: action-outbox
  name: dsh-action-outbox
  config:
    include: ['github_*', 'slack_*', 'deploy_*']
    exclude: ['github_get_*', 'github_list_*']
    enforce: ['github_create_*', 'github_update_*', 'slack_send', 'deploy_*']
    requireApproval: true
    rejectDuplicateActions: true
    maxPendingMs: 1800000
    maxActions: 20
    maxArgumentBytes: 65536
    resultPreviewChars: 2000
    approvalPreviewChars: 4000

• include: wildcard patterns for tools that may be staged.
• exclude: wildcard exceptions to both staging and enforcement.
• enforce: wildcard patterns that reject direct calls and require the transactional route. Empty by default for compatibility.
• requireApproval: ask once for the exact reviewed batch. Without an approval service, commit fails closed.
• rejectDuplicateActions: reject repeated target-name/argument pairs that could otherwise duplicate a write. Disable only when repetition is intentional.
• maxPendingMs: expire an uncommitted batch after this many milliseconds so old intent cannot receive a fresh approval. The default is 30 minutes; 0 disables expiry.
• maxActions / maxArgumentBytes: bound retained in-memory state.
• resultPreviewChars / approvalPreviewChars: bound model- and user-facing receipts.

* is the only wildcard. Every other regular-expression character is literal.