dsh-smart-approval: Fail-closed Smart Approval Plugin for DeepSeek Harness

dsh-smart-approval is a DeepSeek Harness (DSH) plugin maintained by TingRuDeng that provides LLM-based automatic approval functionality. Building upon the native Read Only, Workspace Write, and Full Access permissions of DSH, it independently introduces three approval modes: Manual, Smart (default), and Unattended, thereby decoupling "access permissions" from "request approvals." The plugin only handles requests for known tools—such as bash, pwsh, and write—that enter the DSH approval/request flow; it employs a fail-closed strategy for unknown tools and does not expand existing permissions or automatically switch to Full Access.