dsh-flutter-sandbox

Overview

dsh plugin: let workspace-write sandboxed commands write the Flutter SDK, pub cache, Dart/Flutter settings, Gradle, and Android directories.

README / EN

Package documentation

Registry summary

dsh plugin: let workspace-write sandboxed commands write the Flutter SDK, pub cache, Dart/Flutter settings, Gradle, and Android directories.

dsh.pub verifies the pinned bundle contract, runtime facts, and distribution semantics. The complete README remains in the source repository.

Read the full README on GitHub

LIMITATIONS

Known limitations

- **Shell commands only.** dsh's own file write/edit tools check writable paths separately and still deny these directories; the model can ask for approval as usual. Flutter, pub and Gradle write through the shell, so this does not affect them. - **Windows is not supported.** The ACL runner cannot grant extra directories, so confined commands fail with a clear error instead of silently running without the grants. - **Depends on the stock runner's argument layout.** A dsh release that changes it makes the plugin fail loudly with "unexpected sandbox argv layout" rather than run unconfined. Tested with dsh 0.1.1-rc.2. - **Pub workspaces.** `flutter pub get` in a package of a pub workspace writes to the workspace root; start the dsh session at that root.

dsh-flutter-sandbox