@yadsh/dsh-session-scope
DeepSeek Harness 的按会话划分的工作区可见性范围。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @yadsh/dsh-session-scope@0.7.8Session Scope 以 @yadsh/dsh-session-scope 发布，当前版本为 0.7.8。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Per-session workspace visibility scopes for DeepSeek Harness.
dsh-session-scope keeps a session's original workspace and working directory while exposing only explicitly selected workspace directories to the agent. Permission controls effects; scope independently controls visibility.
Permission != Scope
Specification · Compatibility matrix
Install the published npm package by name:
dsh plugin --profile web add @yadsh/dsh-session-scope
To remove the plugin:
dsh plugin --profile web remove @yadsh/dsh-session-scope
The package includes its Host and Web client entry points plus the cordis.patch.yml bundle patch. Restart the DeepSeek Harness host if bundle hot reload does not pick up the newly installed plugin or browser client.
| Mode | Visibility and enforcement |
|---|---|
full | The ordinary complete workspace view |
focused | Selected roots across DSH filesystem services and known path-aware tools; arbitrary shell processes are not confined |
isolated | Selected roots plus Linux process confinement through a fully enforcing, recognized bubblewrap profile, in a private PID namespace |
isolated is unavailable on unsupported backends and cannot currently be combined with danger-full-access. Unsupported or partially enforced combinations fail closed instead of silently degrading to focused.
Version 0.6.0 implements the specification through Phase 4:
session-scope/set snapshots with a last-write-wins fold;sessionScope/list RPC, and a write-only /scope command;AsyncLocalStorage;full emits no scope prompt and bypasses the filesystem carrier;workspace-scope/selection sessions;read-only, workspace-write, and danger-full-access remain DSH permission modes; they are not scope modes.hidepid= policy. A host where that namespace cannot be created reports isolated as unavailable instead of degrading.sessionScope/list, so it does not add command rows to session history. Applying an unchanged scope is a no-op.>=0.1.7-rc.2 <0.2.0isolated modeFrom the monorepo root:
pnpm install --frozen-lockfile
pnpm --filter @yadsh/dsh-session-scope check
The package check runs the TypeScript build, Vitest suite, client and package-contract checks, and compatibility verification. The packed-plugin smoke test can be run separately:
pnpm --filter @yadsh/dsh-session-scope smoke:packed
This package uses independent Nx Version Plans from the monorepo. Add a plan with pnpm release:plan; maintainers publish verified tarballs through the shared release workflow.
The initial directory picker, path canonicalization, filesystem fencing, and sandbox integration were adapted from dsh-workspace-scope-selection by jiangr100, used under the MIT License. The original copyright notice is preserved in LICENSE.
Issues and focused pull requests are welcome. Read the monorepo contribution guide and run the package check before submitting a change.
MIT. This is an independent community project and is not affiliated with or endorsed by DeepSeek.