dsh-auto-mode

给 DSH 补上「安全自动权限」的中间档：日常项目工作直接跑在官方 workspace-write 沙箱内，沙箱外的语义风险由当前 DSH 模型按用户指令分级——真歧义才问一次，关键路径的破坏性访问在执行前直接拒绝；在「受限模式打断开发」与「Full access 完全免批」的两难之外给出新解。

The missing middle ground for DSH permissions: routine project work runs directly inside the official workspace-write sandbox, while semantic risks outside it are classified by the current DSH model against your instructions — genuine ambiguity asks once, and destructive access to critical paths is denied before execution; an alternative to both interruption-prone restricted modes and no-approval Full access.