dsh-auto-approver

When DeepSeek Harness executes privileged operations — file writes, command execution, full-access calls — it pauses and waits for a human to approve. In an unattended or fully automated pipeline those interruptions are pure friction. dsh-auto-approver intercepts every approval request before the relay pushes it to iMessage or the Web UI, settles it according to your policy, and writes a complete audit trail, so you never have to trade safety for speed.

The decision pipeline works in layers. A hard denyAlways list and an allowlist filter out known-safe or known-dangerous tools first. The remaining requests are handed to Hermes Pro for a semantic verdict that can detect data-destruction, credential-exfiltration, or irreversible-delete risks. If the policy or Hermes rejects, the plugin writes the reason back into the requesting session so the agent understands what went wrong and can retry with a corrected, narrower request. A userGranted signal acts as a soft endorsement inside the Hermes prompt — a nudge, not a hard allow — and never overrides denyAlways or Hermes safety rejections. Every decision is appended as a JSON line to a local audit log for full traceability.

The plugin is best suited for administrators running long autonomous tasks on a trusted single-user box or a private network who want to eliminate approval noise while keeping a complete decision record. Hermes mode is fail-closed: if Hermes is unreachable or times out, the request falls back to a human and is never silently granted. Manual approval on iMessage or the Web UI always takes precedence over any automated verdict.