dsh-auto-approver

When DeepSeek Harness runs privileged operations such as file writes, command execution, or full-access calls, it pauses for human approval. In an unattended or fully automated pipeline those interruptions are pure friction. dsh-auto-approver intercepts every approval request before the relay pushes it to iMessage or the Web UI, settles it according to your policy, and keeps a complete audit trail so you never have to trade safety for speed.

The decision pipeline works in layers: a hard denyAlways list and an allowlist filter out known-safe or known-dangerous tools first; the remaining requests go to Hermes Pro for a semantic verdict that can spot data-destruction, credential-exfiltration, or irreversible-delete risks. When the policy or Hermes rejects, the plugin writes the reason back into the requesting session so the agent knows what went wrong and can retry with a corrected, narrower request. A userGranted signal acts as a soft endorsement in the Hermes prompt — a nudge, not a hard allow — and never overrides denyAlways or Hermes safety rejections. Every decision is appended as a JSON line to a local audit log for full traceability.

The plugin is best for administrators running long autonomous tasks on a trusted single-user box or private network who want to eliminate approval noise while preserving a full decision record. Hermes mode is fail-closed: if Hermes is unreachable or times out, the request falls back to a human and is never silently granted. Manual approval on iMessage or the Web UI always takes precedence.