dsh-fs-allowlist

In DSH Desktop, writes outside the workspace hit the sandbox fence and force an escalation-and-approval cycle. If you regularly ask the Agent to edit your Obsidian vault, a Markdown docs folder, or a config directory, every single write pops up an approval prompt. dsh-fs-allowlist lets you whitelist trusted directories so that write/edit tools pass through the fence without any manual confirmation.

The plugin works at three layers: it wraps the checkedTarget fence so whitelisted paths are approved early; it registers an approval-waterfall listener that auto-answers bash escalations when the model justification mentions a whitelisted path; and it ships a Settings GUI for adding or removing directories and toggling bash auto-approve, with hot-reload configuration that takes effect instantly without restarting DSH.

Built for developers who use DSH Desktop to manage personal knowledge bases, documentation trees, or project config files. A whitelisted directory means the Agent can write there without asking, so keep the list intentionally narrow and only add paths you fully trust.