deepseekplugins

DeepSeek Harness plugin

dsh-workspace-scope-selection

A fourth permission option for DeepSeek Harness sessions: selected-workspace-write, where the user opens the workspace directory tree and toggles which directories the agent may write to.

Workflow & Automation
Jump to install

Source facts

Repository
jiangr100/dsh-workspace-scope-selection
Latest update
Aug 17, 2026
Category
Workflow & Automation
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/jiangr100/dsh-workspace-scope-selection
Plugin: dsh-workspace-scope-selection
Author: jiangr100

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-workspace-scope-selection

A fourth permission option for DeepSeek Harness sessions: Selected Workspace Write. Instead of "only the workspace" or "everything", you pick exactly which directories the agent may write to — the workspace itself included.

What you get

  • The composer permission chip (and /permission) gains a **Selected

Workspace Write** option.

  • Picking it opens a directory-tree editor right away. **The checked state IS

the writable scope**: check directories to make them writable; the session workspace sits at the top, checked by default — uncheck it to make the workspace read-only. Everything unchecked is denied (or needs your approval).

  • A small Edit scope button next to the access chip reopens the editor.
  • The selection is per-session and survives restarts.

Install

dsh plugin --profile web add file:/path/to/dsh-workspace-scope-selection

Use the file: protocol (not a bare path — that records a link: symlink and the plugin fails to load). Then restart dsh web.

Usage

1. Click the permission chip (or /permission) → Selected Workspace Write. 2. In the editor, check the directories the agent may write to. Unchecking a parent removes its whole subtree; a directory included via a checked parent shows a "via parent" mark. 3. Click Done. The selection applies immediately.

How it works

  • The plugin adds a selected-workspace-write sandbox mode and enforces it

in both the filesystem tools and the shell/terminal sandboxes: only the selected directories (plus platform temp areas) are writable.

  • The selection is stored in the session log and replayed on resume.
  • Outside the selection, writes are denied and can be escalated with your

approval, like any other sandboxed operation.

Notes

  • The General-settings Permission row still lists the three built-in options;

this one is a per-session switch via the chip or /permission.

  • Windows grants the workspace + temp areas only (selected extra roots are

denied there).

  • Writes outside the selection always require an approved escalation.

Uninstall

dsh plugin --profile web remove dsh-workspace-scope-selection

then restart dsh web.

Development

node --test test/core.test.mjs

lib/client.js is a hand-written module-loader bundle (no build step).

Back to searchOpen GitHub repository

More related plugins

View category