dsh-flutter-sandbox

LIMITATIONS

已知限制

- **Shell commands only.** dsh's own file write/edit tools check writable paths separately and still deny these directories; the model can ask for approval as usual. Flutter, pub and Gradle write through the shell, so this does not affect them. - **Windows is not supported.** The ACL runner cannot grant extra directories, so confined commands fail with a clear error instead of silently running without the grants. - **Depends on the stock runner's argument layout.** A dsh release that changes it makes the plugin fail loudly with "unexpected sandbox argv layout" rather than run unconfined. Tested with dsh 0.1.1-rc.2. - **Pub workspaces.** `flutter pub get` in a package of a pub workspace writes to the workspace root; start the dsh session at that root.