固定源码记录

Approve

DSH command whitelist plugin: non-workspace commands need confirmation unless they exactly match the whitelist; dangerous commands (rm, mkfs, ...) are always denied. · DSH 命令白名单插件：非当前目录命令需确认（精确白名单命中则放行），危险命令一律拒绝。