dsh-fs-allowlist：白名单目录写入免审批
dsh-fs-allowlist 是 wzn16 维护的 DSH 社区插件（MIT，0.3.0）。它在默认沙箱之上为 extraWritableRoots 配置的可信目录开放 write/edit 免审批，并通过 pre-execute 与 approval/request 对白名单相关的 bash escalation 自动 allowed-once；提供 Settings → Plugins → Directory Allowlist 与 fs-allowlist.json 热重载。安装使用 dsh plugin --profile web add 本地路径或 github:wzn16/dsh-fs-allowlist#main，需重启 DSH Desktop。白名单应收窄；插件以 DSH 进程权限运行，安装前宜审阅源码。
Read Moredsh-fs-allowlist: Writing to Allowlisted Directories Without Approval
The DSH plugin `dsh-fs-allowlist` is designed to resolve the “access denied → escalation retry → manual approval” deadlock that an agent may enter when writing outside the workspace. It intercepts write operations, grants approval-free access to allowlisted directories, and provides automatic approval for Bash commands. Core features include: 1. **File tools**: write requests to allowlisted directories are passed through directly; 2. **Bash commands**: automatic approval is achieved by heuristically matching allowlisted paths in the command text. Users can configure directory allowlists through the GUI or configuration files, with support for hot reloading. Note that allowlists should be managed carefully under the MIT license, and the plugin depends on DSH internal interfaces, which may become invalid if a version upgrade refactors them.
Read More