dsh-full-with-approval

DSH profile plugin: unconfined (GPU-capable) session sandbox plus per-operation user approval for writes outside the workspace or to protected files.

AI 分析

核心用途是在保障安全的前提下提供高权限执行环境。适合需要运行 GPU 任务或修改敏感文件，同时要求严格写保护的用户。

パッケージ

dsh-full-with-approval

バージョン

0.1.0

ライセンス

MIT

最終更新

2026/08/22

Usage

In the web UI open the permission selector and pick Full With Approval (4th option), or run:
```
/permission full-with-approval
```
While the preset is active, protected writes raise the approval prompt; approve to let that one write through.
Switch back to workspace-write / danger-full-access / read-only at any time; the gate follows the preset.

Configuration

The plugin entry config (patch cordis.patch.yml in the profile or override via cordis.patch.yml of your profile):

- id: full-with-approval
  config:
    # Globs matched against the POSIX path relative to the session workspace.
    # An absolute pattern matches the absolute target path.
    protectedPaths:
      - ".git/**"
      - ".env*"
      - ".env/**"
    # Absolute scratch roots that never prompt (besides the platform temp dir).
    extraWritableRoots: []

Changing protectedPaths takes effect on reload/restart.

dsh-full-with-approval

AI 分析

インストール

ドキュメント

Usage

Configuration