deepseek-autoreview

Usage

Switch a session to「替我审核」:

• workspace edits run silently;
• escalations pass the funnel: structurally verifiable commands (npm/pnpm/pip install, git clone/pull/fetch, no shell metacharacters) fast-approve with zero tokens; catastrophic shapes and sensitive paths (rm -rf /, curl | sh, writes to /etc …) intercept with zero tokens; the gray zone is judged by the reviewer model;
• auto-approvals are rate-limited (5/min, 30/hour by default) — over-budget asks delegate to the human.

Configuration (profile cordis.patch.yml)

- id: permission-review
  name: deepseek-autoreview
  config:
    provider: deepseek-official   # optional deployment-level fallback route (paired with model)
    model: deepseek-v4-flash

Field	Default	Meaning
presets	['review']	Preset table keys that activate the reviewer.
provider / model	unset	Composition-level fallback route, supplied together.
maxInputBytes	1024	Byte budget for the current-turn user context.
maxOutputTokens	256	Judgment response token cap.
timeoutMs	10000	End-to-end judgment deadline; timeout delegates.
maxConcurrent	4	In-flight judgment cap; over-capacity asks delegate.
whitelist	true	Zero-token fast approval for structurally verifiable commands.
whitelistVerbs	[npm,pnpm,yarn,pip,pip3,poetry,cargo,git]	Whitelisted command verbs.
preflight	true	Deterministic blocklist interception.
blocklist	26 built-in rules	{id, pattern, tools?} string-pattern rules.
staticDeny	false	Blocklist hits reject (deny) instead of delegating.
deny	true	Allow the model to decide deny.
maxAutoPerMinute / maxAutoPerHour	5 / 30	Auto-approval budget; overflow delegates.
retryTransient	true	Retry transient failures once (rate limits/network); timeouts and invalid outputs never retry.
reasoningEffort	off	Judgment reasoning effort (off skips reasoning; degrades automatically when unsupported).
rubric	built-in	Full replacement for the reviewer system prompt.