Security automatic permission plug-in

Key features

• Coding agents need broad access to build, test, and inspect a project without stopping every few steps.
• Auto keeps the execution range of Full access, but evaluates every tool call independently
• Every Bash and PowerShell call is inspected segment by segment, including compound commands, pipelines, and redirections.
• Official in-process Subagents, Workflow agent() calls, Ralph spawn workers, and AgentTeams members inherit Auto through their live parentSession chain.
• But DeepSeek Harness currently leaves a sharp choice: restricted modes interrupt normal development, while Full access removes approval entirely.