dsh-default-workspace
An installable, cross-platform DSH bundle that creates a persistent default Workspace and gives the model a complete, paged, read-only view of DSH resources.
This is a DSH plugin, not a Codex plugin. It never bridges to ~/.codex.
Source: https://github.com/CDeZT/dsh-default-workspace · Release: https://github.com/CDeZT/dsh-default-workspace/releases/latest · Community: https://github.com/deepseek-ai/deepseek-harness/discussions/5344
Important security warning
This plugin deliberately exposes sensitive DSH data to the model. dsh_resources can return unredacted settings, resolved credential values, credential records, full session records, plugin files, skill bodies, memory, and files below DSH_HOME. Tool results may be sent to the configured model provider. Install it only on a trusted personal deployment; read SECURITY.md first.
What it does
- Creates and registers
$DSH_HOME/workspace as Default workspace (normally ~/.dsh/workspace).
- Moves that Workspace to the front of DSH's durable Workspace order, so the Web/Desktop new-session flow can use it as the most recent fallback.
- Creates
AGENTS.md, MEMORY.md, and .dsh/skills/ without overwriting existing files.
- Loads
MEMORY.md into requests made from the default Workspace.
- Adds the read-only
dsh_resources tool for complete plugin inventory and package files, skill bodies, memory, full session records, storage files, unredacted settings and credentials, and every file below DSH_HOME.
- Keeps
$DSH_HOME/settings.yaml, .credentials.yaml, profiles, sessions, and storages outside the workspace-write boundary.
The dedicated workspace child is a narrow write boundary inside DSH's home. Do not use the whole $DSH_HOME directory as a Workspace: in workspace-write, that would make credentials, configuration, profiles, and session databases writable. DSH filesystem sandbox modes restrict writes, not reads; resource discovery is provided by dsh_resources rather than by weakening the write boundary.
DSH already discovers both <workspace>/.dsh/skills and $DSH_HOME/skills; this bundle does not require customSkillDirs.
Native resource access and pagination
The tool is backed by ctx.loader, ctx.skills, ctx.sessionQuery, ctx.fs, ctx.settings, ctx.credentials, and ctx.storage. Its kind values are overview, plugins, skills, memory, sessions, storage, settings, credential, list, and file. kind=storage also reports the mounted native storage backend and form names before listing the corresponding DSH storage directory.
Use offset and limit to continue a result. A nextOffset value means another page is available; the plugin does not silently replace a complete list with “last N” entries. For skills, pass name to read a complete native definition/body. For sessions, pass id to read a complete session document. list and file accept any DSH_HOME-relative or DSH_HOME-contained path, including profiles and installed package files.
The lexical path check blocks .. traversal outside DSH_HOME while allowing DSH's own package links. Text and structured resources are page-addressable. Binary reads use native ctx.fs.readBytes and are bounded by maxBinaryReadBytes to avoid accidental unbounded allocations.
Install in DSH Desktop
Pack or download the .tgz, then run the DSH command bundled with DSH Desktop:
& "$env:APPDATA\DSH Desktop\host-commands\desktop\bin\dsh.cmd" plugin --profile desktop add "C:\path\to\dsh-default-workspace-1.0.0.tgz"
Restart DSH Desktop after installation. dsh plugin adds the package's dsh.bundle layer automatically.
Configuration
Defaults require no configuration. To override them, add a later layer in $DSH_HOME/profiles/desktop/cordis.patch.yml:
- id: default-workspace
config:
workspacePath: 'D:\DSH\Default'
title: 'Default workspace'
pinFirst: true
memoryMaxBytes: 32768
defaultListLimit: 50
defaultContentLimit: 32768
maxBinaryReadBytes: 67108864
Patch config values replace the row's complete config, so restate every non-default key you want to keep.
For temporary testing, DSH_DEFAULT_WORKSPACE can override the default path without editing the profile. An explicit workspacePath in plugin configuration takes precedence.
Permission behavior
read-only: every dsh_resources operation works, including sensitive reads; no mutation is performed.workspace-write: the same complete read access remains available. Normal files, MEMORY.md, and Workspace-local skills can be changed; host settings and state stay outside the allowed write root.danger-full-access: DSH applies its standard unrestricted policy.
The plugin never changes DSH's sandbox mode and never uses symlinks or junctions to bypass canonical path containment.
The package contains no preinstall, install, postinstall, or prepare script. It ships built JavaScript and can be installed from a GitHub release tarball without a build step.
Official mechanisms used
Uninstall
& "$env:APPDATA\DSH Desktop\host-commands\desktop\bin\dsh.cmd" plugin --profile desktop remove dsh-default-workspace
Uninstalling unregisters the plugin. It intentionally leaves the Workspace directory and user-authored MEMORY.md, skills, and files in place.
