@goodandready/dsh-github-ops 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -2,27 +2,17 @@
 
 Notable changes to `@goodandready/dsh-github-ops`.
 
-## 0.1.1
+## 0.1.1 — released
 
-- Retries and rate-limit respect: a read (GET/HEAD) is retried on a network failure, a
-  timeout or a 5xx, and a 429 is honoured through `Retry-After` or the rate-limit reset.
-  A write is never retried automatically. `maxRetries` in settings.
-- A call may omit the repository inside a checkout: it is taken from the origin remote.
-  `owner/repo#12` and a bare `12` are understood.
-- Review findings are configuration now: glob paths, severities, the large-diff threshold
-  and whether tests are required (`reviewRulesJson`).
-- Tool results render as cards (links, branch pairs, verdicts, failing steps) instead of a
-  JSON blob.
-- Writes pass through the approval contour: every write maps to a named action, an action
-  outside `allowedActions` is denied, destructive actions always ask, and only
-  `DSH_GITHUB_OPS_UNATTENDED=1` with `autoApprove` can skip a prompt.
-- Background reviews: `gh_review_job` starts one and answers immediately;
-  `gh_review_job_status` reads it.
-- Slash commands: `/pr create [title]`, `/review [number]`, `/issue new|list|show`, `/gh`.
-  A command never writes itself — it hands the model an instruction, so the write still goes
-  through the approval gate.
-- Access can come from the DSH credential, the environment variable or the `gh` CLI session
-  (`tokenSource`), which is why a machine with `gh auth login` needs no extra configuration.
+- `approvalMode` with "auto" as the default: an agreed, non-destructive write goes through
+  without a prompt, so a session whose host has approval prompts disabled is not blocked by a
+  question it cannot answer. Deleting a release, a tag, a secret, a variable, a ruleset,
+  cancelling a run or removing branch protection still asks, and where prompts are
+  unavailable that means it is refused — never automatic. "ask" prompts on every write;
+  "off" leaves the decision entirely to the host approval contour.
+- `allowedActions` is the fence in every mode: an action outside it is denied outright.
+- The setting is editable in the card (a three-option select) and documented in all three
+  READMEs.
 
 ## 0.1.0 — first release
 

package/README.md

@@ -1,4 +1,39 @@
-# dsh-github-ops
+# 📦 @goodandready/dsh-github-ops
+
+<div align="center">
+
+<h3>Advanced GitHub Operations, Releases, CI Runs, Secrets & Sanitized Mirrors for DeepSeek Harness</h3>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@goodandready/dsh-github-ops"><img src="https://img.shields.io/npm/v/@goodandready/dsh-github-ops.svg?style=for-the-badge&color=6366f1&labelColor=1e1b4b" alt="npm version"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/GooDAnDReaDY/dsh-github-ops.svg?style=for-the-badge&color=10b981&labelColor=064e3b" alt="license"></a>
+  <a href="https://github.com/topics/dsh-plugin"><img src="https://img.shields.io/badge/DSH-Plugin-8b5cf6.svg?style=for-the-badge&labelColor=2e1065" alt="DSH Plugin"></a>
+  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node-20%2B-f59e0b.svg?style=for-the-badge&labelColor=451a03" alt="Node version"></a>
+</p>
+
+<p align="center">
+  <a href="https://goodandready.app/"><img src="https://img.shields.io/badge/All_Author_Projects-goodandready.app-ff4500.svg?style=for-the-badge&logo=rocket&logoColor=white&labelColor=1a1a2e" alt="All Author Projects"></a>
+</p>
+
+<p align="center">
+  <a href="README.md"><b>🇬🇧 English</b></a> •
+  <a href="README.zh.md"><b>🇨🇳 中文说明</b></a> •
+  <a href="README.ru.md"><b>🇷🇺 Русский</b></a>
+</p>
+
+<table align="center">
+  <tr>
+    <td align="center">
+      ⭐ <strong>If you like this plugin, please star it on GitHub</strong> — it shows me that the plugin is useful to you and motivates me to keep developing it.
+      <br><br>
+      🐛 <strong>If you find a bug or would like to request a feature</strong>, open a GitHub issue in any language — I will review your proposal and implement useful suggestions in a future plugin version.
+    </td>
+  </tr>
+</table>
+
+</div>
+
+---
 
 GitHub operations for [DeepSeek Harness](https://github.com/topics/dsh-plugin): releases,
 tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror
@@ -31,6 +66,7 @@ Requires a GitHub token in the DSH credential service. Store the token under a n
 | `timeoutMs` | `30000` | Per-request timeout. |
 | `maxRetries` | `2` | Retries for a failed read (never for a write). |
 | `reviewRulesJson` | *(empty)* | Review-rule overrides as JSON: `sensitivePaths`, `sensitiveSeverity`, `attentionPaths`, `migrationPaths`, `testsRequired`, `sourcePatterns`, `testPatterns`, `largeDiffLines`. |
+| `approvalMode` | `auto` | `auto` lets agreed non-destructive writes through without a prompt; deleting a release, tag, secret, variable, ruleset or branch protection, and cancelling a run, always ask. `ask` asks on every write; `off` leaves approvals to the host. |
 | `allowedActions` | *(all)* | Write actions the plugin may perform; anything else is denied. Each one still asks. |
 | `autoApprove` | *(empty)* | Actions an unattended run (`DSH_GITHUB_OPS_UNATTENDED=1`) may perform without asking. Destructive actions are never auto-approved. |
 | `reviewJobTimeoutMs` | `120000` | How long a background review job may run. |

package/README.ru.md

@@ -1,4 +1,39 @@
-# dsh-github-ops
+# 📦 @goodandready/dsh-github-ops
+
+<div align="center">
+
+<h3>Комплексные операции GitHub, релизы, CI-запуски, секреты и санитизированные зеркала для DeepSeek Harness</h3>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@goodandready/dsh-github-ops"><img src="https://img.shields.io/npm/v/@goodandready/dsh-github-ops.svg?style=for-the-badge&color=6366f1&labelColor=1e1b4b" alt="npm version"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/GooDAnDReaDY/dsh-github-ops.svg?style=for-the-badge&color=10b981&labelColor=064e3b" alt="license"></a>
+  <a href="https://github.com/topics/dsh-plugin"><img src="https://img.shields.io/badge/DSH-Plugin-8b5cf6.svg?style=for-the-badge&labelColor=2e1065" alt="DSH Plugin"></a>
+  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node-20%2B-f59e0b.svg?style=for-the-badge&labelColor=451a03" alt="Node version"></a>
+</p>
+
+<p align="center">
+  <a href="https://goodandready.app/"><img src="https://img.shields.io/badge/Все_проекты_автора-goodandready.app-ff4500.svg?style=for-the-badge&logo=rocket&logoColor=white&labelColor=1a1a2e" alt="Все проекты автора"></a>
+</p>
+
+<p align="center">
+  <a href="README.md"><b>🇬🇧 English</b></a> •
+  <a href="README.zh.md"><b>🇨🇳 中文说明</b></a> •
+  <a href="README.ru.md"><b>🇷🇺 Русский</b></a>
+</p>
+
+<table align="center">
+  <tr>
+    <td align="center">
+      ⭐ <strong>Если вам нравится этот плагин, поставьте ему Star на GitHub</strong> — это покажет мне, что плагин полезен, и добавит мотивации продолжать его развитие.
+      <br><br>
+      🐛 <strong>Если вы нашли ошибку или хотите предложить новую функцию</strong>, откройте issue на GitHub на любом удобном языке — я регулярно просматриваю предложения и реализую полезные идеи в будущих версиях плагина.
+    </td>
+  </tr>
+</table>
+
+</div>
+
+---
 
 Операции с GitHub для [DeepSeek Harness](https://github.com/topics/dsh-plugin): релизы,
 теги, защищённый универсальный доступ к API, запуски workflow, секреты и публикация
@@ -31,6 +66,7 @@ dsh plugin --profile web add @goodandready/dsh-github-ops
 | `timeoutMs` | `30000` | Таймаут одного запроса. |
 | `maxRetries` | `2` | Повторы для неудачного чтения (запись не повторяется). |
 | `reviewRulesJson` | пусто | Переопределение правил ревью в JSON: `sensitivePaths`, `sensitiveSeverity`, `attentionPaths`, `migrationPaths`, `testsRequired`, `sourcePatterns`, `testPatterns`, `largeDiffLines`. |
+| `approvalMode` | `auto` | `auto` — согласованные неразрушительные записи проходят без вопроса; удаление релиза, тега, секрета, переменной, ruleset, защиты веток и отмена запуска спрашивают всегда. `ask` — спрашивать на каждую запись; `off` — решение целиком за штатным гейтом развёртывания. |
 | `allowedActions` | все | Разрешённые записи; всё остальное отклоняется, и каждая всё равно спрашивает подтверждение. |
 | `autoApprove` | пусто | Действия, которые неавтономный прогон (`DSH_GITHUB_OPS_UNATTENDED=1`) может выполнить без вопроса; разрушительные не автоутверждаются никогда. |
 | `reviewJobTimeoutMs` | `120000` | Сколько может работать фоновая задача ревью. |

package/README.zh.md

@@ -1,4 +1,39 @@
-# dsh-github-ops
+# 📦 @goodandready/dsh-github-ops
+
+<div align="center">
+
+<h3>面向 DeepSeek Harness 的高级 GitHub 操作、发布、CI 运行、密钥与净化镜像套件</h3>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@goodandready/dsh-github-ops"><img src="https://img.shields.io/npm/v/@goodandready/dsh-github-ops.svg?style=for-the-badge&color=6366f1&labelColor=1e1b4b" alt="npm version"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/GooDAnDReaDY/dsh-github-ops.svg?style=for-the-badge&color=10b981&labelColor=064e3b" alt="license"></a>
+  <a href="https://github.com/topics/dsh-plugin"><img src="https://img.shields.io/badge/DSH-Plugin-8b5cf6.svg?style=for-the-badge&labelColor=2e1065" alt="DSH Plugin"></a>
+  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node-20%2B-f59e0b.svg?style=for-the-badge&labelColor=451a03" alt="Node version"></a>
+</p>
+
+<p align="center">
+  <a href="https://goodandready.app/"><img src="https://img.shields.io/badge/作者全部项目-goodandready.app-ff4500.svg?style=for-the-badge&logo=rocket&logoColor=white&labelColor=1a1a2e" alt="作者全部项目"></a>
+</p>
+
+<p align="center">
+  <a href="README.md"><b>🇬🇧 English</b></a> •
+  <a href="README.zh.md"><b>🇨🇳 中文说明</b></a> •
+  <a href="README.ru.md"><b>🇷🇺 Русский</b></a>
+</p>
+
+<table align="center">
+  <tr>
+    <td align="center">
+      ⭐ <strong>如果您喜欢这个插件，请在 GitHub 上为它点亮 Star</strong> — 这能让我知道插件对您有用，并鼓励我继续开发和维护它。
+      <br><br>
+      🐛 <strong>如果您发现 Bug 或希望增加功能</strong>，请使用任意语言在 GitHub 上提交 Issue — 我会评估您的建议，并在后续版本中实现有价值的改进。
+    </td>
+  </tr>
+</table>
+
+</div>
+
+---
 
 面向 [DeepSeek Harness](https://github.com/topics/dsh-plugin) 的 GitHub 操作插件：发布（release）、
 标签（tag）、受保护的通用 API 直通、工作流运行、密钥，以及经过净化的镜像发布。
@@ -28,6 +63,7 @@ dsh plugin --profile web add @goodandready/dsh-github-ops
 | `timeoutMs` | `30000` | 单次请求超时。 |
 | `maxRetries` | `2` | 读取失败时的重试次数（写入不重试）。 |
 | `reviewRulesJson` | 空 | 以 JSON 覆盖评审规则：`sensitivePaths`、`sensitiveSeverity`、`attentionPaths`、`migrationPaths`、`testsRequired`、`sourcePatterns`、`testPatterns`、`largeDiffLines`。 |
+| `approvalMode` | `auto` | `auto` 允许已同意的非破坏性写入免询问；删除 release、tag、secret、变量、ruleset、分支保护或取消运行仍会询问。`ask` 每次询问；`off` 交由宿主决定。 |
 | `allowedActions` | 全部 | 允许执行的写操作；其余一律拒绝，且每个都会询问确认。 |
 | `autoApprove` | 空 | 非交互运行（`DSH_GITHUB_OPS_UNATTENDED=1`）可免除询问的操作；破坏性操作永远不会被自动批准。 |
 | `reviewJobTimeoutMs` | `120000` | 后台评审任务的最长运行时间。 |

package/lib/approval.js

@@ -128,36 +128,61 @@ export function isUnattended(env = process.env) {
   return String((env && env.DSH_GITHUB_OPS_UNATTENDED) || '') === '1'
 }
 
+/** How the plugin treats a write. */
+export const APPROVAL_MODES = ['auto', 'ask', 'off']
+
 /**
  * The policy, as a pure function.
  *
+ * - `auto` (default): an agreed, non-destructive write goes through without a prompt, so a
+ *   session whose host has approvals disabled is not blocked by a question it cannot answer.
+ *   A destructive action still asks — and where prompts are unavailable that means it is
+ *   refused, which is the intent: deleting a release, a tag, a secret, a ruleset or branch
+ *   protection is never automatic.
+ * - `ask`: every write asks.
+ * - `off`: the plugin has no opinion; the host's own approval contour decides everything.
+ *
+ * `allowedActions` is the fence in every mode: an action outside it is denied outright.
+ *
  * @returns {{kind: 'allow'|'ask'|'deny'|'continue', reason?: string, action?: string|null}}
  */
-export function decide({ exec, allowedActions, autoApprove, unattended = false } = {}) {
+export function decide({ exec, allowedActions, autoApprove, unattended = false, mode = 'auto' } = {}) {
   const action = actionFor(exec)
   if (!action) return { kind: 'continue', action: null }
+  if (mode === 'off') return { kind: 'continue', action }
 
   const allowed = Array.isArray(allowedActions) && allowedActions.length ? allowedActions : ALL_ACTIONS
   if (!allowed.includes(action)) {
     return { kind: 'deny', action, reason: `dsh-github-ops: action "${action}" is not in allowedActions` }
   }
-  if (unattended && !DESTRUCTIVE_ACTIONS.has(action) && Array.isArray(autoApprove) && autoApprove.includes(action)) {
-    return { kind: 'allow', action }
+
+  const destructive = DESTRUCTIVE_ACTIONS.has(action)
+  if (destructive) {
+    return {
+      kind: 'ask',
+      action,
+      reason: `dsh-github-ops: ${askReason(exec)}. This cannot be undone here, so it is never automatic.`,
+    }
   }
-  const destructive = DESTRUCTIVE_ACTIONS.has(action) ? ' This cannot be undone here.' : ''
-  return { kind: 'ask', action, reason: `dsh-github-ops: ${askReason(exec)}.${destructive}` }
+
+  if (mode === 'auto') return { kind: 'allow', action }
+  if (unattended && Array.isArray(autoApprove) && autoApprove.includes(action)) return { kind: 'allow', action }
+  return { kind: 'ask', action, reason: `dsh-github-ops: ${askReason(exec)}.` }
 }
 
 /**
  * Register the gate. Registration is an effect: disposing the plugin removes the listener.
  */
 export function registerApprovalGate(ctx, getConfig) {
+  const first = (typeof getConfig === 'function' ? getConfig() : getConfig) || {}
+  if (first.approvalMode === 'off') return () => {}
   return ctx.on('tools/pre-execute', async (exec, next) => {
     const cfg = (typeof getConfig === 'function' ? getConfig() : getConfig) || {}
     const decision = decide({
       exec,
       allowedActions: cfg.allowedActions,
       autoApprove: cfg.autoApprove,
+      mode: cfg.approvalMode || 'auto',
       unattended: cfg.unattended !== undefined ? cfg.unattended : isUnattended(),
     })
     if (decision.kind === 'continue') return next()

package/lib/client.js

@@ -35,6 +35,8 @@ window.__ModuleLoader__.load({
       timeoutMs: 'Request timeout, ms',
       maxRetries: 'Retries for a failed read',
       maxRetriesHint: 'A read (GET/HEAD) is retried on a network failure, a timeout or a 5xx. Writes are never retried automatically.',
+      approvalMode: 'Write approval',
+      approvalModeHint: '"auto" lets agreed non-destructive writes through without a prompt; deleting a release, tag, secret, variable, ruleset, branch protection or cancelling a run always asks. "ask" asks for every write; "off" leaves approvals to the host.',
       reviewRules: 'Review rule overrides (JSON)',
       reviewRulesHint: 'Optional. sensitivePaths, sensitiveSeverity, attentionPaths, migrationPaths, testsRequired, sourcePatterns, testPatterns, largeDiffLines. Example: {"largeDiffLines": 400, "sensitivePaths": [".env", "private/**"]}',
       timeoutMsHint: 'How long one GitHub request may take before it is aborted.',
@@ -64,6 +66,8 @@ window.__ModuleLoader__.load({
       timeoutMs: '请求超时（毫秒）',
       maxRetries: '读取失败重试次数',
       maxRetriesHint: '读取（GET/HEAD）在网络故障、超时或 5xx 时重试；写入不会自动重试。',
+      approvalMode: '写入审批',
+      approvalModeHint: '"auto" 允许已同意的非破坏性写入免询问；删除 release、tag、secret、变量、ruleset、分支保护或取消运行仍会询问。"ask" 每次写入都询问；"off" 交由宿主决定。',
       reviewRules: '评审规则覆盖（JSON）',
       reviewRulesHint: '可选。sensitivePaths、sensitiveSeverity、attentionPaths、migrationPaths、testsRequired、sourcePatterns、testPatterns、largeDiffLines。',
       timeoutMsHint: '单个 GitHub 请求在被中断前允许的时长。',
@@ -181,7 +185,7 @@ window.__ModuleLoader__.load({
         if (!scope || typeof scope.set !== 'function') return
         setSaving(true)
         const failed = []
-        const keys = ['tokenEnv', 'tokenSource', 'defaultRepository', 'baseUrl', 'timeoutMs', 'maxRetries', 'reviewRulesJson']
+        const keys = ['tokenEnv', 'tokenSource', 'defaultRepository', 'baseUrl', 'timeoutMs', 'maxRetries', 'reviewRulesJson', 'approvalMode']
         for (const key of keys) {
           if (current[key] === value[key]) continue
           let next = current[key]
@@ -237,6 +241,17 @@ window.__ModuleLoader__.load({
         field('baseUrl', 'baseUrl', 'baseUrlHint'),
         field('timeoutMs', 'timeoutMs', 'timeoutMsHint', 'number'),
         field('maxRetries', 'maxRetries', 'maxRetriesHint', 'number'),
+        React.createElement('div', { className: 'gho-field' },
+          React.createElement('label', { className: 'gho-label', htmlFor: `${NS}-approvalMode` }, t('approvalMode')),
+          React.createElement('div', { className: 'gho-hint' }, t('approvalModeHint')),
+          React.createElement('select', {
+            id: `${NS}-approvalMode`,
+            className: 'gho-input',
+            value: current.approvalMode || 'auto',
+            disabled: !writable,
+            onChange: (event) => change('approvalMode', event.target.value),
+          }, ['auto', 'ask', 'off'].map((option) => React.createElement('option', { key: option, value: option }, option))),
+        ),
         field('reviewRulesJson', 'reviewRules', 'reviewRulesHint', 'json'),
         React.createElement('div', { className: 'gho-foot' },
           React.createElement('span', { className: 'gho-note' }, message),

package/lib/index.js

@@ -108,6 +108,8 @@ export const Config = Schema.object({
     .description('Retries for a read (GET/HEAD) on a network failure, a timeout or a 5xx. Writes are never retried automatically.'),
   reviewRulesJson: Schema.string().default('')
     .description('Optional review-rule overrides as JSON: sensitivePaths, sensitiveSeverity, attentionPaths, migrationPaths, testsRequired, sourcePatterns, testPatterns, largeDiffLines.'),
+  approvalMode: Schema.string().default('auto')
+    .description('"auto" (default): an agreed, non-destructive write goes through without a prompt, while deleting a release, tag, secret, variable, ruleset, branch protection or cancelling a run always asks. "ask": every write asks. "off": the plugin has no opinion and the host approval contour decides.'),
   allowedActions: Schema.array(Schema.string()).default([])
     .description('Write actions this plugin may perform; anything else is denied. Empty means every known action is allowed, and each one still asks for confirmation.'),
   autoApprove: Schema.array(Schema.string()).default([])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-github-ops",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "GitHub operations for DeepSeek Harness: releases, tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror publication.",
   "license": "MIT",
   "type": "module",