@ran-sh/dsh-crew 2.2.12 → 2.2.13

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-crew",
-  "version": "2.2.12",
+  "version": "2.2.13",
   "description": "Dispatch subtasks to DeepSeek Harness (DSH) agents as native subagents with live progress",
   "author": {
     "name": "ZSeven-W"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ran-sh/dsh-crew",
-  "version": "2.2.12",
+  "version": "2.2.13",
   "type": "module",
   "main": "./src/hub/entry.mjs",
   "bin": {

package/src/hub/index.mjs

@@ -28,6 +28,7 @@ import { createCanonicalJobEvent, projectWorkflowView } from '../job-contracts.m
 import { getHubRuntimeIdentity } from '../runtime-identity.mjs';
 import { loadCiEvidence } from '../ci-evidence.mjs';
 import { ensureCrewWorkspace, releaseCrewWorkspace } from '../crew-workspaces.mjs';
+import { sameRepoPath } from '../workspace-isolation.mjs';
 import { loadRoleProfiles, resolveRoleProfile, saveRoleProfiles } from '../role-profiles.mjs';
 import { addContextReferences, buildWorkspaceTask, isSafeBranchName, loadWorkspaceContexts, resolveWorkspaceContext, saveWorkspaceContexts } from '../workspace-context.mjs';
 import { buildExtensionContract } from '../extension-contract.mjs';
@@ -897,7 +898,12 @@ export class WorkerRegistry {  constructor(ctx) {
       // This project's stable worker/reviewer workspace, reset to the job's base
       // revision and held for the job's duration, so the Harness groups these
       // sessions into two entries instead of one per job.
-      const created = await ensureCrewWorkspace({ cwd, role: jobRole, baseRevision: workspace_branch });
+      // The cross-SID git exception is granted only for a root the OPERATOR listed
+      // in `trusted_workspace_roots`: this API authenticates a loopback socket, not
+      // a Windows account, so an API caller's path can never grant itself the trust.
+      const approvedRoots = Array.isArray(cfg.trusted_workspace_roots) ? cfg.trusted_workspace_roots : [];
+      const trustedRepoRoot = approvedRoots.find((root) => typeof root === 'string' && sameRepoPath(root, cwd)) ?? null;
+      const created = await ensureCrewWorkspace({ cwd, trustedRepoRoot, role: jobRole, baseRevision: workspace_branch });
       if (!created.ok) throw Object.assign(new Error(created.error ?? created.reason), { code: created.reason });
       executionCwd = created.worktreePath;
       isolatedWorkspace = { worktreePath: created.worktreePath, repoRoot: created.repoRoot, stable: true, release: created.release };

package/src/install/install-legacy.mjs

@@ -396,6 +396,13 @@ export const GLOBAL_CONFIG_DEFAULTS = {
   // default: the interactive desktop entry is what opens a session, and an extra
   // always-on harness process is the operator's choice to make.
   frontend_autostart: false,
+  // Opt-in trust: repository roots whose ownership differs from this account's, for
+  // which the hub's worktree dispatch may carry a request-scoped git
+  // `safe.directory` exception. The hub API authenticates a loopback socket, not a
+  // Windows account, so this file — edited by the operator, not by an API caller —
+  // is what turns a foreign-owned checkout into a legal dispatch target. Exact
+  // roots only; wildcards are refused.
+  trusted_workspace_roots: [],
   // Worker provider routing for HUB workers: which DSH provider backs each
   // worker session. Fresh installs stay on the built-in DeepSeek provider;
   // follow-dsh is an explicit opt-in that uses the provider selected in DSH

package/src/runtime-identity.mjs

@@ -36,7 +36,7 @@ export {
 // included in the identity contract.
 const RUNTIME_ID = randomUUID();
 
-export const RUNTIME_VERSION = '2.2.12';
+export const RUNTIME_VERSION = '2.2.13';
 export const HUB_PROTOCOL_VERSION = 1;
 
 export const HUB_CAPABILITIES = Object.freeze([