Plow Seeds
seeds/plow-pbc/seed-os-manager

Seed OS Manager

A signed macOS helper that holds your automation permissions so AI agents can control apps without repeated prompts.

Install in your terminal with command:
curl -fsSL https://raw.githubusercontent.com/plow-pbc/seed/main/install.sh | bash -s -- https://github.com/plow-pbc/seed-os-manager/blob/main/SEED.md

What this seed does

Seed OS Manager solves a frustrating Mac problem: every time an AI agent tries to control an app like Messages, Calendar, or Finder, macOS asks you to approve it — and the approval often shows up as a confusing, process-named prompt (like sshd-keygen-wrapper wants to control Messages) instead of something recognizable. Grant access once and it might not stick, or the next agent session starts the whole cycle again.

This seed installs a tiny, Apple-signed app (Seed OS Manager.app) that acts as a single, stable identity for all your AI-driven automations. Any seed that wants to control a Mac app runs its AppleScript through seedctl, which routes through this bundle. macOS attributes the permission request to "Seed OS Manager" — a name you recognize — and once you click Allow, that grant is durable across reboots and reinstalls.

The on-disk footprint is just the .app bundle in /Applications and a seedctl command-line shortcut. There's no background daemon, no login item, and no network service running — it only activates when a seed asks it to run a script.

When to use it

  • When I want my AI agent to send Messages or update my Calendar without macOS prompting me for access every time.
  • When I'm running automations over SSH and keep seeing cryptic permission dialogs attributed to the wrong process.
  • When I'm setting up a new Mac for AI-driven workflows and want a single, recognizable identity to hold all automation approvals.
  • When a seed I'm installing fails because it can't get Automation access to a system app and I need a reliable way to grant it.
  • When I want to know that rebooting or reinstalling seeds won't wipe out the app-control permissions I've already granted.

Source

Version history

1 release
v1.0.0Jun 9, 2026

Initial Seed Release.

Dependencies

3 required · 1 optional
Seed OS Manager
  • SWmacOS ≥13.0 (Ventura)required· authored on macOS 26.4.1 / arm64; Intel-Mac installs unverified
  • State≥20 MB free disk spacerequired
  • SWmacOS system tools (curl, hdiutil, open, pgrep, pkill, ln)required· verified present (macOS built-in tools at /usr/bin/*; no install needed)
  • State~/.local/bin directoryoptional· install script creates it if absent via mkdir -p

Contributors

2 contributors
Sam OdioContributor@srosro
Contributor@swagatpatel

Comments

0 comments

You need to be signed in with GitHub to comment.

No comments yet — be the first to share how this seed worked for you.

Similar seeds

Plow App

Installs the latest production Plow app on macOS — your personal AI assistant for calendars, messages, email, and files.

by @swagatpatel
0Installs
4dependencies

Installs a signed macOS helper for AI automation, handling similar security and permission challenges as Plow's installation.

Hermes + gbrain (Compose)

Give your Hermes AI agent a persistent, searchable knowledge graph it can read and write without any image rebuild.

by @plow-pbc
0Installs
3dependencies

Both provide persistent infrastructure (knowledge graph, permissions manager) that AI agents can access across sessions without repeated setup.

Hermes Plow Chat Platform Adapter

Connect your Hermes AI agent to iMessage/SMS by wiring it to the Plow Chat API via a direct-mounted gateway plugin.

by @plow-pbc
0Installs
4dependencies

Both act as intermediary layers that connect AI agents to system capabilities (messaging, app control) through a unified gateway.