dsh-auto-pass

In everyday DeepSeek Harness sessions, a single pnpm test, an echo with a redirect, or a sandbox permission escalation each demands a manual approval tap. The action is harmless; the interruption is not. dsh-auto-pass adds an Auto Approve permission preset to the Web UI: every action that needs approval goes through a single plain model call - no child Agent, no tools, no session history - fed only the normalized action and your last direct instruction. Pass it, and the call proceeds; fail it, and the request falls back to the DSH approval chain for your decision.

On top of that model review the plugin maintains two layers of permission memory: project and global allow lists and deny lists. When the same permission is approved three times in a row (default threshold) within a project, the plugin writes an allow-list rule automatically, skipping the model call on subsequent identical actions. Three consecutive denials still ask you where to record the rule. The matching unit is a permission fingerprint derived from tool name and normalized key arguments - immune to output truncation or reworded descriptions, yet sensitive to parameters that genuinely change what is authorized, such as an escalation marker.

It suits developers who drive deep tool-call workloads in DeepSeek Harness daily, want fewer approval interrupts, and are comfortable trading a transparent rule for an uninterrupted flow. It never replaces judgment: a model denial, an infrastructure timeout, or an unresolvable action all hand the request back to you.