PerryLink/dsh-auto-review
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only
dsh-auto-review inserts a second AI model on the DSH approval chain. When the primary agent requests a sandbox-crossing action, a read-only reviewer subagent (allowed only read/glob/grep) inspects the actual workspace, the streamed tool-call arguments (sensitive values redacted), and configured risk rules, then returns a structured verdict with decision, reason, and risk level. Deny verdicts feed back to the calling model with the reviewer's specific reason. The system fails closed by default: crash, timeout, or schema mismatch resolves via fallbackPolicy (default: rejected). A rejection circuit breaker, per-tool policy routing, and one-shot override round out the controls.
Install
dsh plugin --profile web add dsh-auto-reviewnpm package: dsh-auto-review (verified from README npm badge). Also: dsh plugin --profile web add github:PerryLink/dsh-auto-review. Requires Node.js 22.19 or 24+. Apache 2.0 license.
Compatibility
DSH 0.1.1-rc.2+, Node.js 22.19 or 24+. All platforms. Optional web review panel via session-projection capability. Apache 2.0 license.
Details
- Repo: PerryLink/dsh-auto-review
- Category: Coding & Development
- Stars: 57
- Version: Latest stable via npm dsh-auto-review
- Last push: 2026-09-21
- First seen: 2026-08-13
FAQ
- Does dsh-auto-review replace the human approval flow?
- No. It claims only requests it owns (ai policy) and delegates everything else via next(). The human approval flow is never short-circuited. The reviewer adds a layer before human approval, not instead of it.
- What happens if the reviewer crashes or times out?
- The system is fail-closed: any crash, timeout, or schema mismatch resolves through fallbackPolicy, which defaults to rejected. Configure fallbackPolicy to allow or prompt-human if preferred.
- Can I configure which tools get auto-reviewed?
- Yes. Per-tool policies (ai / human / never) plus regex risk rules are configurable in cordis.yml. A never policy hard-disables auto-review for specific tools.
Alternatives
PerryLink/dsh-memento · omdsh-dev/dsh-annotation