dsh-remote-workstation

Configuration

The plugin is mounted through a bundle patch (cordis.patch.yml), so options live on the loader row:

- id: fs-sandbox          # replaced by the plugin's union filesystem
  disabled: true
- insert:
    - id: remote-workspace
      name: dsh-remote-workstation
      config:
        storePath: ~/.dsh/remote-workspaces.json          # anchor  remote mapping
        sshHostsPath: ~/.dsh/dsh-ssh.json                 # secondary host source
        hostsPath: ~/.dsh/remote-workspaces-hosts.json    # plugin-owned host store
        anchorRoot: ~/.dsh/remote-workspaces              # where anchors are created
        remoteReadOnly: true                              # stage 1: read-only
        connectTimeoutMs: 15000
        maxReadTextBytes: 33554432

Option	Default	Meaning
storePath	~/.dsh/remote-workspaces.json	mount table (no credentials)
hostsPath	~/.dsh/remote-workspaces-hosts.json	plugin-owned hosts (credentials, 0600)
sshHostsPath	~/.dsh/dsh-ssh.json	fallback host source
anchorRoot	~/.dsh/remote-workspaces	anchor directory root
remoteReadOnly	true	reject remote writes
connectTimeoutMs	15000	SSH connect timeout
maxReadTextBytes	32 MiB	single readText ceiling
mounts	[]	static mounts ({host, remote, anchor?}), not persisted

fs-sandbox has to be disabled: a composition may mount only one ctx.fs provider, and this plugin's provider already inherits the sandboxed implementation.