dsh-default-workspace
跨平台原生 DSH 默认工作区，可对 DSH 资源进行完整的只读访问，包括敏感状态。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:CDeZT/dsh-default-workspace#e3cf1c1649ac0a721feee8c275cbd47eaefbc781Default Workspace 以 dsh-default-workspace 发布，当前版本为 1.0.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →An installable, cross-platform DSH bundle that creates a persistent default Workspace and gives the model a complete, paged, read-only view of DSH resources.
This is a DSH plugin, not a Codex plugin. It never bridges to ~/.codex.
Source: https://github.com/CDeZT/dsh-default-workspace · Release: https://github.com/CDeZT/dsh-default-workspace/releases/latest · Community: https://github.com/deepseek-ai/deepseek-harness/discussions/5344
This plugin deliberately exposes sensitive DSH data to the model. dsh_resources can return unredacted settings, resolved credential values, credential records, full session records, plugin files, skill bodies, memory, and files below DSH_HOME. Tool results may be sent to the configured model provider. Install it only on a trusted personal deployment; read SECURITY.md first.
$DSH_HOME/workspace as Default workspace (normally ~/.dsh/workspace).AGENTS.md, MEMORY.md, and .dsh/skills/ without overwriting existing files.MEMORY.md into requests made from the default Workspace.dsh_resources tool for complete plugin inventory and package files, skill bodies, memory, full session records, storage files, unredacted settings and credentials, and every file below DSH_HOME.$DSH_HOME/settings.yaml, .credentials.yaml, profiles, sessions, and storages outside the workspace-write boundary.The dedicated workspace child is a narrow write boundary inside DSH's home. Do not use the whole $DSH_HOME directory as a Workspace: in workspace-write, that would make credentials, configuration, profiles, and session databases writable. DSH filesystem sandbox modes restrict writes, not reads; resource discovery is provided by dsh_resources rather than by weakening the write boundary.
DSH already discovers both <workspace>/.dsh/skills and $DSH_HOME/skills; this bundle does not require customSkillDirs.
The tool is backed by ctx.loader, ctx.skills, ctx.sessionQuery, ctx.fs, ctx.settings, ctx.credentials, and ctx.storage. Its kind values are overview, plugins, skills, memory, sessions, storage, settings, credential, list, and file. kind=storage also reports the mounted native storage backend and form names before listing the corresponding DSH storage directory.
Use offset and limit to continue a result. A nextOffset value means another page is available; the plugin does not silently replace a complete list with “last N” entries. For skills, pass name to read a complete native definition/body. For sessions, pass id to read a complete session document. list and file accept any DSH_HOME-relative or DSH_HOME-contained path, including profiles and installed package files.
The lexical path check blocks .. traversal outside DSH_HOME while allowing DSH's own package links. Text and structured resources are page-addressable. Binary reads use native ctx.fs.readBytes and are bounded by maxBinaryReadBytes to avoid accidental unbounded allocations.
Pack or download the .tgz, then run the DSH command bundled with DSH Desktop:
& "$env:APPDATA\DSH Desktop\host-commands\desktop\bin\dsh.cmd" plugin --profile desktop add "C:\path\to\dsh-default-workspace-1.0.0.tgz"
Restart DSH Desktop after installation. dsh plugin adds the package's dsh.bundle layer automatically.
Defaults require no configuration. To override them, add a later layer in $DSH_HOME/profiles/desktop/cordis.patch.yml:
- id: default-workspace
config:
workspacePath: 'D:\DSH\Default'
title: 'Default workspace'
pinFirst: true
memoryMaxBytes: 32768
defaultListLimit: 50
defaultContentLimit: 32768
maxBinaryReadBytes: 67108864
Patch config values replace the row's complete config, so restate every non-default key you want to keep.
For temporary testing, DSH_DEFAULT_WORKSPACE can override the default path without editing the profile. An explicit workspacePath in plugin configuration takes precedence.
read-only: every dsh_resources operation works, including sensitive reads; no mutation is performed.workspace-write: the same complete read access remains available. Normal files, MEMORY.md, and Workspace-local skills can be changed; host settings and state stay outside the allowed write root.danger-full-access: DSH applies its standard unrestricted policy.The plugin never changes DSH's sandbox mode and never uses symlinks or junctions to bypass canonical path containment.
The package contains no preinstall, install, postinstall, or prepare script. It ships built JavaScript and can be installed from a GitHub release tarball without a build step.
<workspace>/.dsh/skills and $DSH_HOME/skills: https://github.com/deepseek-ai/deepseek-harness/blob/master/docs/subsystems/skills.mdAGENTS.md instructions: https://github.com/deepseek-ai/deepseek-harness/blob/master/packages/context/agent-instructions/README.md& "$env:APPDATA\DSH Desktop\host-commands\desktop\bin\dsh.cmd" plugin --profile desktop remove dsh-default-workspace
Uninstalling unregisters the plugin. It intentionally leaves the Workspace directory and user-authored MEMORY.md, skills, and files in place.