DeepSeek Harness Auto-Approval: dsh-auto-mode Bridges the Middle Layer in Permission Modes

Introducing the DSH plugin dsh-auto-mode (@nanmicoder/dsh-auto-mode) maintained by NanmiCoder. It adds an Auto/automatic approval mode on top of the official workspace-write sandbox: routine builds, tests, and dependency installations are automatically allowed, while semantic risks outside the sandbox are reviewed by a classifier, and dangerous operations such as accessing the root directory or credential paths are directly rejected. The article covers a comparison of four permission modes, installation commands, steps to enable it in the Web UI, optional classifier configuration, and an explanation of security boundaries.