dsh-approval

Human approval gates for DeepSeek Harness agent actions, with DingTalk / WeCom flow integration

A DeepSeek Harness (dsh) plugin.

Why

敏感操作（删文件、发消息、花钱、调用生产 API）前插入人工审批门。飞书桥接已有三个，钉钉/企微审批流生态位仍然空白。

Business scenarios

• 生产变更管控：agent 要在生产环境执行 kubectl apply 或数据库迁移，先创建审批，人批准后才继续
• 费用类操作：调用付费 API、下单、打赏——金额超过阈值的动作先过审批门
• 对外沟通：以你的名义发消息、发邮件、提交 PR 之前的人工确认

What works in 0.0.1

This is a working plugin, not a name reservation:

• approval_request 工具：为敏感操作创建一条待审批记录（标题+理由），返回审批 ID 与当前队列状态
• approval_decide 工具：按 ID 批准或驳回，写回审批队列。模型据此决定继续执行或中止

Install it and ask the agent to call the tool — the loop (tool registration, schema validation, model invocation, structured output) is fully exercised.

Roadmap

• 0.1.x — Web UI 审批面板 + 工具调用拦截钩子（敏感操作自动触发审批而非手动调用）
• 0.2.x — 钉钉/企微审批流：把审批推到 IM，移动端一键通过/驳回
• 0.3.x — 审批策略模板：按团队/项目复用的策略包

Install

dsh plugin --profile web add dsh-approval

DeepSeek Harness is in developer preview and states that compatibility-breaking changes will happen. This build was developed and tested against @deepseek-ai/dsh 0.1.0-rc.x (August 2026); re-verify against your host version before relying on it.

License

MIT