dsh-workspace-enhancement
English | 中文
A DeepSeek Harness workspace-enhancement plugin — local and remote (SSH) workspaces managed in one place. A session can hold multiple workspaces (a main cwd plus a thin declaration list of side directories); machines, TOFU host keys and keychain passwords all live in your local ~/.dsh. Built on ssh2.
Features
| Feature | Description |
|---|
| Remote workspaces | One SSH chain (multi-hop) runs bash / files / PTY / directory browsing. Tools that already use ctx.subprocess / ctx.fs keep working remotely with no code changes |
| Multi-workspace sessions | The「⊕ 工作区」button in the session header attaches extra directories (local or remote) as a declaration list — mount/unmount + label. The model is told about them and can operate them directly |
| Add-workspace flow | Connection sidebar (saved machines, ~/.ssh/config aliases, local) + directory browser (breadcrumbs, native chooser, new folder); remote "Connect & open" creates the session on the server |
| Machine settings page | Machine CRUD / test / set-current / forget host key; OS-keychain passwords; TOFU host keys (accept-new default) |
| Session awareness | Remote marker + online tri-state + reconnect in the sidebar; the session prompt states the remote / extra-workspace context |
| Cross-server execution | sw_exec(server, command) runs a command on a named registered machine (defaults to the session's machine). The target OS is probed once per connection (bash -c on POSIX, pwsh -Command on win32). Windows hosts inject a bash tool only for remote-Linux workspace sessions |
| Remote approval gate | Optional per-machine gate (default off): every shell-shaped remote command and every remote terminal asks before it runs — human asks you each time, ai auto-grants a short read-only whitelist (pwd, ls, git status, …) and asks for the rest |
| Model tools | sw_status, sw_connect (attach this session to machines you already registered), sw_exec |
| Runtime localization | UI copy, tool descriptions/errors, and routing errors follow the settings-page Language option (zh/en); the UI defaults to the browser language. Protocol-layer bad-request: diagnostics stay English |
How it works
flowchart LR
subgraph local["Your machine"]
agent["agent loop<br/>orchestration · memory · LLM calls"] --> seam["this plugin<br/>ctx.subprocess · ctx.fs"]
end
subgraph remote["Remote host"]
run["bash · files · PTY (terminal)"]
end
seam -- "one SSH connection (multi-hop jumps)" --> run
No DSH install on the remote: the model orchestrates locally, commands run remotely, results come back into context.
How routing, the approval gate, the remote sandbox fence, and session connections actually work: docs/architecture.md. Known security boundaries: SECURITY.md.
Install
# from npm (v0.1.0+)
dsh plugin --profile web add dsh-workspace-enhancement
# from source: npm run build first (host loads lib/)
dsh plugin --profile web add <this-repo-path>
First install with DSH's supply-chain pnpm: native build scripts are blocked by default —
allow them once per profile in pnpm-workspace.yaml (unstrict allowBuilds):
ssh2, cpu-features, koffi, node-pty, dsh-subprocess-local — then run
dsh plugin --profile web install. Without it the first add exits non-zero
(ERR_PNPM_IGNORED_BUILDS) and the bundle is not appended.
Compatibility
Which plugin version to install depends on the DSH host family you run — check it with dsh --version
(and the family under your DSH install, e.g. <npm root -g>/@deepseek-ai/):
| Your DSH host | Install | Notes |
|---|
0.2.1 line (0.2.1-rc.1, 0.2.1-rc.2, …) | 0.2.8 | Official as of 2026-10-19. The union pin adds ^0.2.1-rc.1, whose caret covers later prereleases of the same 0.2.1 tuple (0.2.1-rc.2 included, 0.2.1-alpha.* not). Lab boot and gates passed on host 0.2.1-rc.2; PR #76 classifies watchLinuxScopeStart as internal. npm/pnpm do not set includePrerelease, so 0.2.4 does not satisfy a 0.2.1 seam install — use 0.2.8 (peer unchanged from 0.2.7) |
0.2.0 line (0.2.0-rc.1, …) | 0.2.3 or newer (0.2.8 current) | Runtime-compatible as of 2026-09-29 — the union peer pin boots on a real 0.2.0-rc.1 host and mounts the channel (boot sentinel SMOKE PASS). The 0.2.0 host ENFORCES plugin peerDependencies at boot (an incompatible pin silently skips the whole bundle) — on 0.2.0 hosts install 0.2.3+, not 0.2.2. 0.2.8 keeps this line as ^0.2.0-rc.1 |
0.1.7 line (0.1.7-rc.2, …) | next release after 0.2.2 | The family the peer pin targets as of 2026-09-28 (^0.1.7-rc.2, UPSTREAM-9 — the host package's latest tag moved to it). Seam- and runtime-aligned: watch + terminalEnvironment on the mixed facades (UPSTREAM-5), localized-marker renders and background-job owners/outputs fixed for the rewritten settings and jobs contracts (UPSTREAM-8), verified by the drift sentinel plus 0.1.7-family typecheck/suite/boot locally |
0.1.5 line (0.1.5-rc.1, 0.1.5-rc.2, …) | 0.2.2 (the last release pinned to it) | Still works at runtime — the dual-family paths are kept (the boot sentinel on a 0.1.5 host stays green) — but releases after 0.2.2 require the 0.1.7 family, so stay on 0.2.2 until the host moves. The browser channel rides the official shared /api transport (/api/dsw/<endpoint>) |
Host and plugin must move together. The 0.1.4 line speaks /api/dsw/* while 0.1.3 and earlier speak
/dsw/*, and 0.1.3 has no readByteRange. Mixing them leaves the connection / directory UI without a data
channel (the host still boots, the UI silently cannot load machines or browse). Upgrading DSH means upgrading
this plugin in the same step; the full window and the upstream drift log are in
docs/compatibility.md.
Roadmap
Public progress: docs/ROADMAP.md. The single backlog is docs/backlog.md.
Development
Start with AGENTS.md (rules, commands, red lines). The document map — what lives where, and what must not be copied — is docs/README.md.
One gate for everything: npm run check (static constraints + typecheck + unit tests + build + pack smoke) —
the same command CI runs.
References
- dsh-ssh: remote execution engine —
ctx.subprocess / ctx.fs providers, jump chains, PTY, directory-picker seam, session.route placeholder.
- dsh-remote: workspace helper — machines registry, TOFU, OS keychain, web UI and settings page.
License
MIT
