
Safe automatic permissions for DeepSeek Harness.
Install Dsh Auto Mode
Clean install: prebuilt on npm and declares a `dsh.bundle` layer.
The one-line version
dsh plugin --profile my-profile add @nanmicoder/dsh-auto-modeThe easy path: this bundle is published to npm, so the install pulls a prebuilt artifact — no build step runs on your machine and no build approval is needed.
From npm — installs a prebuilt artifact, no build step on your machine
# 1. add the bundle to a profile — --profile my-profile points at $DSH_HOME/profiles/my-profile
dsh plugin --profile my-profile add @nanmicoder/dsh-auto-mode
# 2. verify: the bundle should show up as a layer in the resolved config
dsh --profile my-profile --dump-config
# 3. boot the profile
dsh --profile my-profilePackage: @nanmicoder/dsh-auto-mode
Prefer to install from source instead?
From GitHub — pulls source, and may ask for build approval on first run
# 1. add the bundle to a profile — --profile my-profile points at $DSH_HOME/profiles/my-profile
dsh plugin --profile my-profile add github:NanmiCoder/dsh-auto-mode#<commit-sha>
# 2. verify: the bundle should show up as a layer in the resolved config
dsh --profile my-profile --dump-config
# 3. boot the profile
dsh --profile my-profilePrerequisites
- API key
- Not required.
- Network access
- Not required at runtime.
- Language
- TypeScript
Install check
Every field the verdict was derived from, so you can re-derive it yourself
| Field checked | Result | Weight | What the spec says about it |
|---|---|---|---|
| lifecycleScripts | pass | info | no install-time scripts |
| dsh.bundle | pass | fatal | package.json declares a `dsh.bundle` layer |
| dsh.bundle.patch file | pass | fatal | patch file present at `cordis.patch.yml` |
| npm registry | pass | fatal | published as `@nanmicoder/dsh-auto-mode` — prebuilt artifacts |
- Verdict reason
- on npm with a valid bundle declaration
- package.json read
- package.json
- Rules applied from
- docs/user/develop/basic/publish.md
- Checked at
- 2026-08-15
From the README
Excerpt as published by the author, plain text, unedited
Coding agents need broad access to build, test, and inspect a project without stopping every few steps. But DeepSeek Harness currently leaves a sharp choice: restricted modes interrupt normal development, while Full access removes approval entirely. `dsh-auto-mode` adds the missing middle ground. Routine project work proceeds automatically, contextual risk is classified using the current DSH model and the direct user's instructions, genuine ambiguity asks once, and destructive access to critical paths is denied before execution. > [!IMPORTANT] > This plugin is a fail-closed policy layer for calls dispatched through Harness `ctx.tools`; it is not an operating-system sandbox. Keep the official sandbox and filesystem observation policies enabled. > [!NOTE] > Requires an existing [DeepSeek Har
Topics
GitHub topics on this repository
More in Computer Use Desktop Automation
Ranked by similarity inside the cluster, not alphabetically
Dsh Computer Use
Anionex
为 DeepSeek Harness 提供电脑控制插件:新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入(目前支持macos)|Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.
Dsh Computer Use
ZRui-C
Text-first browser & background macOS control for DeepSeek Harness (DSH): target the right process and window without taking the user's pointer. 为 DSH 提供文本优先的电脑控制:后台操作 Chromium 与 macOS,不抢前台、不移动鼠标。
Dsh Computer Use
geohotstan
Desktop computer use for DeepSeek Harness: macOS app listing, accessibility-tree window capture, screenshots, and synthesized input, cloned from Codex Computer Use