v0.32.9 — run_shell OS launch + autopilot workspace bypass
累积更新：相对于 v0.32.7，包含 v0.32.8 和 v0.32.9 两个补丁版本，均为 bug 修复。
Cumulative update from v0.32.7: two bug-fix patches, v0.32.8 and v0.32.9.
v0.32.8 — 修复：Agent 拒绝打开桌面应用 / Fix: Agent refuses to open desktop apps
问题背景 / Background
在 autopilot 模式下，请求"请打开我的 CAD 软件"等桌面操作时，Agent 会回复"作为 AI 助手我无法打开桌面应用程序"——实际上根本没有尝试调用 run_shell（日志显示 tool_calls=0）。根本原因是模型训练先验（"我只是编程助手"）覆盖了对 run_shell 能力的认知。
In autopilot mode, requests like "please open my CAD software" caused the agent to reply "As an AI assistant I cannot open desktop applications" — without even attempting run_shell (logs showed tool_calls=0). The root cause was the model's training prior ("I'm just a coding assistant") overriding its awareness of run_shell capabilities.
修复内容 / Changes
在系统提示词的"Using tools"章节新增明确正向指令：声明 run_shell 拥有完整的操作系统访问权限；列出各平台应用启动命令（Windows: Start-Process，macOS: open，Linux: xdg-open）；明确禁止以"无法启动应用"为由拒绝任务，要求始终先用 run_shell 尝试。
Added an explicit instruction in the "Using tools" section of the system prompt: declares run_shell has full OS-level access; lists platform launch commands (Start-Process / open / xdg-open); explicitly prohibits the agent from refusing with "I cannot launch applications" — it must always attempt with run_shell first.
受影响文件 / Affected file: src/prompts/system.js
v0.32.9 — 修复：Autopilot 模式下仍弹出工作区外访问对话框 / Fix: "Outside workspace" dialog in autopilot mode
问题背景 / Background
将审批模式设为 autopilot（无需人工确认）后，Agent 读写工作区外文件（如 ~/.deepcopilot/memory.md）时仍会弹出"Deep Copilot 想访问工作区之外的路径"对话框，需手动点击确认——与 autopilot 的语义相悖。
Even with approvalMode = autopilot, the "Deep Copilot wants to access a path outside the workspace" dialog still appeared when reading/writing files outside the workspace (e.g. ~/.deepcopilot/memory.md). This contradicted the intended semantics of autopilot mode.
修复内容 / Changes
在 ensurePathAllowed() 中，弹出对话框前先检测审批模式：autopilot 时静默放行并缓存路径至本轮会话集合（_outsideWsApprovals），后续不再重复检查；manual / auto-edit 模式行为不变。
In ensurePathAllowed(), added an approval-mode check before the dialog: when autopilot, silently allow the path and cache it in _outsideWsApprovals for the session. manual and auto-edit modes are unaffected.
受影响文件 / Affected file: src/tools/utils.js