dsh-multi-workspace
适用于 DSH 的多工作区沙盒：自动向所有已注册工作区授予文件写入权限——在界面中添加工作区后即可立即写入，无需配置。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:somnusovis/dsh-multi-workspace#96cd8427bd72d8a70e7590191ca058c40eb17c87Multi Workspace 以 dsh-multi-workspace 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Multi-workspace sandbox for DeepSeek Harness (DSH).
Automatically grants file-write access to ALL registered workspaces — add a workspace in the UI, write to it immediately, no config needed.
By default, DSH file sandbox only allows writes to one workspace directory (the session cwd). Writing to other directories requires sandbox escalation.
This plugin reads the live workspace registry on every sandbox policy check and injects every registered workspace path as an additional writable root.
Two layers:
@deepseek-ai/dsh-sandbox-local, windows-acl / bwrap / seatbelt) reads only
the single policy.workspaceRoot, so pwsh / bash writes outside the
session workspace are still denied.workspace-write without going
through the approval flow. That is the plugin's intended "write immediately"
behavior — make sure the registered workspaces are trusted.resolve() must return a plain object (own
mode / workspaceRoot / sessionId): executors spread the policy
({ ...policy }), and a prototype-based copy silently drops those keys,
making the windows-acl runner fail with --workspace undefined
(SANDBOX_UNAVAILABLE). test/smoke.mjs guards this regression.dsh plugin --profile web add github:somnusovis/dsh-multi-workspace
# Or from npm (once published)
dsh plugin --profile web add dsh-multi-workspace
Restart DSH web service and refresh browser.
MIT