dsh-extra-folders 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 kingOfSoySauce
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,120 @@
+# dsh-extra-folders
+
+Attach extra writable folders to one workspace. Once the plugin is installed, the sidebar workspace row gets an extra "Add folder" item in its menu. Any folder you pick there is writable for that workspace's sessions. Both the file tools and the shell honor the grant, so writing there does not need a separate approval each time.
+
+| Workspace menu | Dialog |
+| --- | --- |
+| ![Add folder in the workspace menu](assets/menu.png) | ![Add folder dialog](assets/dialog.png) |
+
+## Install
+
+Requires DSH 0.2.2-alpha.3 or later.
+
+### Option 1: Add from the Plugins page
+
+Open **Settings → Plugins → Add plugin** and paste this line:
+
+```text
+github:kingOfSoySauce/dsh-extra-folders
+```
+
+After it installs, make sure the plugin row is on.
+
+### Option 2: Command line
+
+```sh
+dsh plugin --profile desktop add github:kingOfSoySauce/dsh-extra-folders
+```
+
+### Option 3: Ask an agent to install it
+
+<details>
+<summary><strong>Click to expand the prompt</strong></summary>
+
+```text
+Please install dsh-extra-folders into the current profile:
+https://github.com/kingOfSoySauce/dsh-extra-folders
+
+First, confirm three things in read-only mode: whether the host is Desktop or Web, the current profile name, and whether the dsh version is >= 0.2.2-alpha.3.
+If the version is too low, tell me and do not try to install.
+
+On Desktop, prefer Plugins → Add plugin and paste
+github:kingOfSoySauce/dsh-extra-folders
+If the current host provides plugin management tools, you can also run
+dsh plugin --profile <profile> add github:kingOfSoySauce/dsh-extra-folders.
+
+After install, check that the plugin row is enabled. If a restart is needed, tell me and I will restart it myself.
+Do not edit the profile's package.json by hand, and do not touch other plugins.
+When it is installed, take me to the more menu of a sidebar workspace row and confirm that it contains "Add folder".
+```
+
+</details>
+
+## Usage
+
+Sidebar workspace row → the more button at the end of the row → **Add folder**.
+
+The first row in the dialog is the workspace itself. It is always writable and cannot be removed. The rows below are the folders you added. You can remove each one on its own. Adding and removing take effect right away. No refresh, and no need to wait for the next session.
+
+The grant follows the workspace. Subagents are covered too. Sessions in other workspaces do not see these folders.
+
+## How it compares to similar plugins
+
+| | This plugin | multi-root-workspace | union-workspace |
+| --- | --- | --- | --- |
+| Registers model tools | No | No | Yes, 5 |
+| Changes upstream components | Only wraps `sandboxPolicy.resolve()` | Disables the `fs-sandbox` and `sandbox` rows, replaces both implementations | No replacement. Adds separate tools to bypass it |
+| Runtime dependencies | None | `koffi`, `zod` | None |
+| Per-folder read-only or read-write levels | No | Yes | No |
+| Sidebar management panel | No | Yes | Yes |
+| Minimum DSH version | 0.2.2-alpha.3 | 0.1.5-rc.2 | 0.1.7-rc.2 (from peer deps) |
+| bash can write to attached folders on macOS | Yes | Yes | No (needs the danger-full-access preset) |
+
+This plugin does one thing: it adds the attached folders to the session's writable scope. It registers no tools, replaces no implementation, and adds no dependencies. Turn it off and the host behaves like stock DSH again.
+
+The closest neighbour is jkm6221/dsh-workspace-folders. It uses the same mechanism (wraps `resolve()`, merges `additionalWritableRoots`) but registers a `workspace_folders` model tool and requires DSH 0.2.1-rc.1 or later.
+
+If you need per-folder permission levels or a sidebar panel, use multi-root-workspace.
+
+## Compatibility
+
+| Environment | Status |
+| --- | --- |
+| macOS desktop 0.2.2-rc.1 | Verified |
+| DSH 0.2.2-alpha.3 and later | Supported |
+| DSH 0.2.1 and earlier | Not supported. The kernel has no `additionalWritableRoots` and no workspace menu service |
+| Web (`dsh web`) | Same code as desktop. The folder picker is replaced by in-app browsing. Not tested |
+| Windows | Applies to the file tools only. The sandboxed shell is not affected. This limit comes from DSH. Not tested |
+
+The kernel is checked when the host starts. If the kernel is not supported, the plugin writes one clear log line and stops. You are not left with a menu item that does nothing.
+
+## Update and uninstall
+
+To update, pull the latest code, then turn the plugin row off and on again in Plugins.
+
+```sh
+cd /absolute/path/dsh-extra-folders && git pull
+```
+
+To uninstall:
+
+```sh
+dsh plugin --profile desktop remove dsh-extra-folders
+```
+
+You can also remove it directly in Plugins.
+
+## Troubleshooting
+
+| Symptom | What to do |
+| --- | --- |
+| No "Add folder" in the menu | Check that the plugin row is on and refresh the page once. dsh below 0.2.2-alpha.3 does not have this item |
+| I added a folder but it still asks for approval | Check whether the session permission is `read-only`. Attached folders do not apply in that mode |
+| An old session still asks for approval, or asks first whether to request it | Start a new session. The approval habit from earlier turns carries over. A new grant does not rewrite the pattern already set in that conversation |
+| I picked a folder but it was not added | The plugin only accepts real directories. A symlink is rejected, so pick the path it points to |
+| bash cannot write on Windows | DSH only grants attached folders to the file tools. This is a DSH limit and the plugin cannot change it |
+| On Web, the dialog opens but there is no system picker | On Web, in-app browsing replaces the system dialog |
+
+## License
+
+MIT

package/README.md

@@ -1,3 +1,120 @@
-# Temporary Holding Version
+# dsh-extra-folders
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+给一个工作区多挂几个可写文件夹。装好以后，侧栏工作区行的菜单里多一项「添加文件夹」，选进来的文件夹对这个工作区的会话可写，文件工具和 shell 都认，写到那里不用再逐次点授权。
+
+| 工作区菜单 | 对话框 |
+| --- | --- |
+| ![工作区菜单里的「添加文件夹」](assets/menu.png) | ![添加文件夹对话框](assets/dialog.png) |
+
+## 安装
+
+需要 DSH 0.2.2-alpha.3 及以上。
+
+### 方式一：在插件页添加
+
+**设置 → Plugins → Add plugin**，把下面这行粘进去：
+
+```text
+github:kingOfSoySauce/dsh-extra-folders
+```
+
+装完确认插件行是开着的。
+
+### 方式二：命令行
+
+```sh
+dsh plugin --profile desktop add github:kingOfSoySauce/dsh-extra-folders
+```
+
+### 方式三：让 Agent 装
+
+<details>
+<summary><strong>点击展开提示词</strong></summary>
+
+```text
+请帮我把 dsh-extra-folders 装到当前 profile：
+https://github.com/kingOfSoySauce/dsh-extra-folders
+
+先只读确认三件事：宿主是桌面端还是 Web、当前 profile 名、dsh 版本是否 >= 0.2.2-alpha.3。
+版本不够就直接告诉我，不要尝试安装。
+
+桌面端优先用 Plugins → Add plugin，粘贴
+github:kingOfSoySauce/dsh-extra-folders
+如果当前宿主提供了插件管理工具，也可以执行
+dsh plugin --profile <profile> add github:kingOfSoySauce/dsh-extra-folders。
+
+装完核对插件行是启用状态。需要重启时告诉我，由我自己重启。
+不要手改 profile 的 package.json，不要动其他插件。
+装好后带我到侧栏工作区行的更多菜单，确认里面有「添加文件夹」。
+```
+
+</details>
+
+## 使用
+
+侧栏工作区行 → 行尾的更多按钮 → **添加文件夹**。
+
+弹框第一行是工作区本身，它一直可写，不能移除。下面是你添加的文件夹，可以单独移除。添加和移除都立即生效，不用刷新，也不用等下一个会话。
+
+授权跟着工作区走。子 agent 也算在内，其他工作区的会话看不到这些文件夹。
+
+## 和同类插件比
+
+| | 本插件 | multi-root-workspace | union-workspace |
+| --- | --- | --- | --- |
+| 注册模型工具 | 不注册 | 不注册 | 注册 5 个 |
+| 改动上游组件 | 只包 `sandboxPolicy.resolve()` | 禁用 fs-sandbox、sandbox 两行，换掉 fs 与 sandbox 实现 | 不替换，另建工具绕开 |
+| 运行时依赖 | 无 | `koffi`、`zod` | 无 |
+| 每目录只读或读写分级 | 没有 | 有 | 没有 |
+| 侧栏管理面板 | 没有 | 有 | 有 |
+| macOS 上 bash 可写附加目录 | 是 | 是 | 否（要 danger-full-access 预设） |
+| 最低 DSH 版本 | 0.2.2-alpha.3 | 0.1.5-rc.2 | 0.1.7-rc.2（按 peer 依赖推断） |
+
+这插件只做一件事：把附加目录并进会话的可写范围。不加工具、不换实现、不加依赖，关掉就回到原生行为。
+
+另一个同类是 jkm6221/dsh-workspace-folders，机制和我们一样（包装 `resolve()`、合并 `additionalWritableRoots`），但它注册了一个 `workspace_folders` 模型工具，最低要求 0.2.1-rc.1。
+
+要每目录分级权限或侧栏面板，用 multi-root-workspace。
+
+## 兼容性
+
+| 环境 | 状态 |
+| --- | --- |
+| macOS 桌面端 0.2.2-rc.1 | 已验证 |
+| DSH 0.2.2-alpha.3 及以上 | 支持 |
+| DSH 0.2.1 及更早 | 不支持。内核没有 `additionalWritableRoots`，也没有工作区菜单服务 |
+| Web（`dsh web`） | 代码与桌面端相同，文件夹选择器换成应用内浏览。未实测 |
+| Windows | 只对文件工具生效，沙箱里的 shell 不受影响。这条限制来自 DSH 本身，未实测 |
+
+宿主启动时会检查内核。不支持就写一条明确日志并退出，不会留下一个点了没反应的菜单。
+
+## 更新与卸载
+
+更新：拉最新代码，然后在 Plugins 里把插件行关掉再打开。
+
+```sh
+cd /绝对路径/dsh-extra-folders && git pull
+```
+
+卸载：
+
+```sh
+dsh plugin --profile desktop remove dsh-extra-folders
+```
+
+也可以在 Plugins 里直接移除。
+
+## 遇到问题
+
+| 现象 | 处理 |
+| --- | --- |
+| 菜单里没有「添加文件夹」 | 确认插件行开着，刷新一次页面；dsh 低于 0.2.2-alpha.3 不会有这一项 |
+| 加了文件夹还是弹授权 | 看会话权限是不是 `read-only`，这个模式下附加文件夹不生效 |
+| 老会话还在弹授权，或者先问一句要不要申请 | 新开一个会话。之前几轮的审批习惯会延续下来，新加的授权不会改写已经形成的对话惯性 |
+| 选了文件夹却没加上 | 插件只收真实目录，选了软链接会被拒绝，选它指向的路径 |
+| Windows 上 bash 写不进去 | DSH 只给文件工具放行附加目录，这是 DSH 的限制，插件改不了 |
+| Web 端点开但没有系统选择器 | Web 端由应用内浏览代替系统对话框 |
+
+## License
+
+MIT

package/client.js

@@ -0,0 +1,447 @@
+window.__ModuleLoader__.load({
+  id: 'dsh-extra-folders',
+  factory(require) {
+    const React = require('react')
+    const h = React.createElement
+    /** The official controls: Modal and Button are seed modules every plugin may require. */
+    let primitives
+    try {
+      primitives = require('@deepseek-ai/dsh-client-ui-primitives')
+    } catch {
+      primitives = undefined
+    }
+
+    const ROUTE = '/extra-folders'
+    const DIALOG_CLASS = 'wxf-dialog'
+    const ICON_KEY = 'workspace-extra-folders.folder'
+    /** After 打开文件夹 and 在 Finder 中显示, before 重命名 (100) and 删除 (300). */
+    const MENU_ORDER = 150
+
+    const COPY = {
+      zh: {
+        menu: '添加文件夹',
+        title: '工作区添加文件夹',
+        add: '添加文件夹',
+        cancel: '取消',
+        close: '关闭',
+        empty: '还没有文件夹',
+        remove: '移除',
+        missing: '文件夹已不存在',
+        failed: '没保存成功，再试一次',
+        pickerUnavailable: '这里打不开系统文件夹选择器',
+        root: '工作区',
+        codes: {
+          notWorkspace: '这个目录不是侧栏里的工作区',
+          duplicate: '这个文件夹已经加过了',
+          notDirectory: '选中的不是文件夹',
+          missing: '文件夹不见了，可能刚被删掉',
+          symlink: '这是软链接，请选它指向的真实路径',
+          self: '这就是工作区本身',
+          unknown: '没保存成功，再试一次'
+        }
+      },
+      en: {
+        menu: 'Add folder',
+        title: 'Add workspace folders',
+        add: 'Add folder',
+        cancel: 'Cancel',
+        close: 'Close',
+        empty: 'No folders yet',
+        remove: 'Remove',
+        missing: 'Folder is gone',
+        failed: "Didn't save. Try again",
+        pickerUnavailable: 'The system folder picker is not available here',
+        root: 'Workspace',
+        codes: {
+          notWorkspace: 'That directory is not a workspace in the sidebar',
+          duplicate: 'That folder is already attached',
+          notDirectory: 'That is not a folder',
+          missing: 'That folder is gone',
+          symlink: 'That is a symlink. Pick the real path it points to.',
+          self: 'That is the workspace itself',
+          unknown: "Didn't save. Try again"
+        }
+      }
+    }
+
+    /** Captured Client context so components can reach services lazily. */
+    let pluginContext
+
+    /** One dictionary per render, picked from the live locale. Never mixed. */
+    function copy() {
+      try {
+        const snapshot = pluginContext?.get?.('locale')?.getLocale?.()
+        const id = typeof snapshot?.active === 'string' ? snapshot.active : snapshot?.id
+        return COPY[typeof id === 'string' && id.startsWith('zh') ? 'zh' : 'en'] ?? COPY.en
+      } catch {
+        return COPY.en
+      }
+    }
+
+    /** One translated sentence per failure code. */
+    function describe(failure) {
+      const dict = copy()
+      const code = typeof failure?.code === 'string' ? failure.code : 'unknown'
+      return dict.codes[code] ?? dict.failed
+    }
+
+    async function callRoute(endpoint, payload) {
+      if (typeof location === 'undefined') throw new Error('the workspace route needs the browser GUI')
+      const url = new URL(`${ROUTE}/${endpoint}`, location.href).toString()
+      const response = await fetch(url, {
+        method: 'POST',
+        credentials: 'same-origin',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(payload ?? {})
+      })
+      const text = await response.text()
+      let data
+      try {
+        data = JSON.parse(text)
+      } catch {
+        data = undefined
+      }
+      const code = typeof data?.error === 'string' ? data.error : 'unknown'
+      if (!response.ok || typeof data?.error === 'string') {
+        const failure = new Error(code)
+        failure.code = code
+        throw failure
+      }
+      return data
+    }
+
+    // -- one open dialog at a time -----------------------------------------
+    let openRequest = null
+    const listeners = new Set()
+    function publish(next) {
+      openRequest = next
+      for (const listener of [...listeners]) {
+        try {
+          listener()
+        } catch {
+          // one broken listener must not block the others
+        }
+      }
+    }
+    function subscribe(listener) {
+      listeners.add(listener)
+      return () => {
+        listeners.delete(listener)
+      }
+    }
+    function useRequest() {
+      return React.useSyncExternalStore(subscribe, () => openRequest, () => openRequest)
+    }
+
+    // Rows copy the models page: one bordered card per entry, actions at the right edge.
+    const styles = {
+      list: { display: 'flex', flexDirection: 'column', gap: '10px' },
+      row: {
+        display: 'flex',
+        alignItems: 'center',
+        gap: '12px',
+        minHeight: '52px',
+        padding: '0 16px',
+        borderRadius: '12px',
+        border: '1px solid var(--dsw-alias-border-l1)',
+        background: 'transparent'
+      },
+      rowPath: { flex: '1 1 auto', minWidth: '0', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap', direction: 'ltr', fontSize: '14px' },
+      remove: {
+        border: '1px solid var(--dsw-alias-border-l1)',
+        background: 'transparent',
+        color: 'var(--dsw-alias-label-primary)',
+        borderRadius: '8px',
+        padding: '4px 12px',
+        cursor: 'pointer',
+        font: 'inherit',
+        fontSize: '13px'
+      },
+      tag: { color: 'var(--dsw-alias-label-secondary)', fontSize: '12px', flex: '0 0 auto' },
+      missing: { color: 'var(--dsw-alias-state-warn-primary)', fontSize: '12px' },
+      error: { color: 'var(--dsw-alias-label-secondary)', fontSize: '12px', lineHeight: '1.5' },
+      addRow: {
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'center',
+        gap: '8px',
+        minHeight: '52px',
+        width: '100%',
+        borderRadius: '12px',
+        border: '1px dashed var(--dsw-alias-border-l2)',
+        background: 'transparent',
+        color: 'var(--dsw-alias-label-primary)',
+        cursor: 'pointer',
+        font: 'inherit',
+        fontSize: '14px'
+      }
+    }
+
+    function FolderGlyph() {
+      return h('svg', {
+        width: 14,
+        height: 14,
+        viewBox: '0 0 16 16',
+        fill: 'none',
+        stroke: 'currentColor',
+        strokeWidth: 1.3,
+        strokeLinecap: 'round',
+        strokeLinejoin: 'round',
+        'aria-hidden': true
+      }, [
+        h('path', { key: 'folder', d: 'M1.5 3.5C1.5 2.94772 1.94772 2.5 2.5 2.5H6.5L8 4.5H13.5C14.0523 4.5 14.5 4.94772 14.5 5.5V12.5C14.5 13.0523 14.0523 13.5 13.5 13.5H2.5C1.94772 13.5 1.5 13.0523 1.5 12.5V3.5Z' }),
+        h('path', { key: 'plus', d: 'M8 7.5V11.5M6 9.5H10' })
+      ])
+    }
+
+    /** One workspace's attached folders, rendered inside the official Modal. */
+    function FolderDialog({ request, onClose }) {
+      const text = copy()
+      const workspace = typeof request.path === 'string' ? request.path : ''
+      const title = typeof request.title === 'string' && request.title !== '' ? request.title : workspace
+      const [folders, setFolders] = React.useState([])
+      const [missing, setMissing] = React.useState([])
+      const [busy, setBusy] = React.useState(false)
+      const [error, setError] = React.useState('')
+
+      const load = React.useCallback(async () => {
+        const data = await callRoute('list', { workspace })
+        setFolders(Array.isArray(data?.folders) ? data.folders : [])
+        setMissing(Array.isArray(data?.missing) ? data.missing : [])
+      }, [workspace])
+
+      React.useEffect(() => {
+        load().catch((failure) => setError(describe(failure)))
+      }, [load])
+
+      const add = async () => {
+        setError('')
+        const ui = pluginContext?.get?.('uiWorkspace')
+        if (typeof ui?.pickDirectory !== 'function') {
+          setError(text.pickerUnavailable)
+          return
+        }
+        let picked
+        try {
+          picked = await ui.pickDirectory()
+        } catch (failure) {
+          setError(describe(failure))
+          return
+        }
+        if (typeof picked !== 'string' || picked === '') return
+        setBusy(true)
+        try {
+          await callRoute('add', { workspace, path: picked })
+          await load()
+        } catch (failure) {
+          setError(describe(failure))
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const remove = async (folder) => {
+        setError('')
+        setBusy(true)
+        try {
+          await callRoute('remove', { workspace, path: folder })
+          await load()
+        } catch (failure) {
+          setError(describe(failure))
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      /** The workspace itself always comes first and cannot be removed. */
+      const rows = [
+        { path: workspace, removable: false },
+        ...folders.map((folder) => ({ path: folder, removable: true }))
+      ]
+
+      const body = h('div', { style: styles.list },
+        rows.map((row) => h('div', { key: row.path, style: styles.row }, [
+          h('span', { key: 'path', style: styles.rowPath, title: row.path }, row.path),
+          row.removable ? null : h('span', { key: 'tag', style: styles.tag }, text.root),
+          row.removable && missing.includes(row.path) ? h('span', { key: 'missing', style: styles.missing }, text.missing) : null,
+          row.removable
+            ? h('button', {
+              key: 'remove',
+              type: 'button',
+              style: styles.remove,
+              disabled: busy,
+              onClick: () => {
+                void remove(row.path)
+              }
+            }, text.remove)
+            : null
+        ])))
+
+      const Modal = primitives?.Modal
+      const Button = primitives?.Button
+      /** forwardRef and memo components are objects, so never test `typeof x === 'function'` here. */
+      const official = Modal !== undefined && Modal !== null && Button !== undefined && Button !== null
+      const addRow = h('button', {
+        key: 'add',
+        type: 'button',
+        style: { ...styles.addRow, opacity: busy ? 0.6 : 1 },
+        disabled: busy,
+        onClick: () => {
+          void add()
+        }
+      }, [
+        h('svg', { key: 'plus', width: 14, height: 14, viewBox: '0 0 16 16', fill: 'none', stroke: 'currentColor', strokeWidth: 1.6, strokeLinecap: 'round', 'aria-hidden': true }, [
+          h('path', { key: 'h', d: 'M8 3.5v9' }),
+          h('path', { key: 'v', d: 'M3.5 8h9' })
+        ]),
+        h('span', { key: 'label' }, text.add)
+      ])
+
+      if (official) {
+        return h(Modal, {
+          open: true,
+          onClose,
+          closeLabel: text.close,
+          title: text.title,
+          className: DIALOG_CLASS,
+          // Both actions stay right-aligned inside the Modal's own footer container,
+          // the way the rename and delete dialogs place theirs.
+          footer: h(React.Fragment, null,
+            h(Button, { key: 'close', variant: 'outline', onClick: onClose }, text.close),
+            h(Button, { key: 'add', variant: 'primary', disabled: busy, onClick: () => { void add() } }, text.add)),
+          children: h('div', { style: { display: 'flex', flexDirection: 'column', gap: '16px' } }, [
+            body,
+            error === '' ? null : h('div', { key: 'error', role: 'alert', style: styles.error }, error)
+          ])
+        })
+      }
+
+      // Older deployments without the primitives seed keep a usable panel.
+      return h('div', {
+        role: 'dialog',
+        'aria-modal': 'true',
+        'aria-label': text.title,
+        style: {
+          position: 'fixed',
+          inset: '0',
+          display: 'flex',
+          alignItems: 'center',
+          justifyContent: 'center',
+          background: 'color-mix(in srgb, var(--dsw-alias-bg-base) 55%, transparent)',
+          zIndex: 60
+        }
+      }, h('div', {
+        style: {
+          width: 'min(520px, calc(100vw - 32px))',
+          display: 'flex',
+          flexDirection: 'column',
+          gap: '12px',
+          padding: '20px',
+          borderRadius: '16px',
+          background: 'var(--dsw-alias-bg-overlay)',
+          border: '1px solid var(--dsw-alias-border-l1)',
+          color: 'var(--dsw-alias-label-primary)'
+        }
+      }, [
+          body,
+          error === '' ? null : h('div', { key: 'error', style: styles.error }, error),
+          addRow,
+          h('button', {
+            key: 'close',
+            type: 'button',
+            onClick: onClose,
+            style: { alignSelf: 'flex-end', border: '1px solid var(--dsw-alias-border-l2)', background: 'transparent', color: 'var(--dsw-alias-label-primary)', borderRadius: '10px', padding: '6px 14px', cursor: 'pointer', font: 'inherit' }
+          }, text.close)
+        ]))
+    }
+
+    /** A broken dialog must not take the overlay layer with it. */
+    class OverlayBoundary extends React.Component {
+      constructor(props) {
+        super(props)
+        this.state = { failed: false }
+      }
+
+      static getDerivedStateFromError() {
+        return { failed: true }
+      }
+
+      componentDidCatch(error) {
+        console.error('dsh-extra-folders: dialog failed', error)
+      }
+
+      render() {
+        return this.state.failed ? null : this.props.children
+      }
+    }
+
+    function OverlayHost() {
+      const request = useRequest()
+      if (request === null) return null
+      return h(OverlayBoundary, null, h(FolderDialog, {
+        key: request.path,
+        request,
+        onClose: () => publish(null)
+      }))
+    }
+
+    /**
+     * The workspace row's own more menu: the action list this plugin contributes.
+     * The menu owns rendering, so an action needs a label, an optional icon key,
+     * and what to run.
+     */
+    function registerWorkspaceAction(ctx) {
+      ctx.inject(['contextMenus'], (scope) => {
+        scope.effect(() => scope.contextMenus.register({
+          id: 'workspace-extra-folders.attach',
+          target: 'workspace',
+          order: MENU_ORDER,
+          observe: () => {
+            const locale = ctx.get('locale')
+            return locale !== undefined && typeof locale.subscribe === 'function' ? [locale] : []
+          },
+          resolve: (target) => [{
+            id: 'attach-folders',
+            label: copy().menu,
+            icon: { key: ICON_KEY },
+            run: () => {
+              publish({ path: target?.path, title: target?.displayTitle })
+            }
+          }]
+        }), 'dsh-extra-folders: workspace menu action')
+      })
+    }
+
+    return {
+      inject: ['slots'],
+      apply(ctx) {
+        pluginContext = ctx
+        try {
+          ctx.effect(() => {
+            const style = document.createElement('style')
+            style.dataset.plugin = 'workspace-extra-folders'
+            style.textContent = `.${DIALOG_CLASS}{width:max-content;min-width:min(380px,calc(100vw - 32px));max-width:min(680px,calc(100vw - 32px))}`
+            document.head.append(style)
+            return () => style.remove()
+          }, 'dsh-extra-folders: dialog width')
+
+          ctx.slots.inject('contextMenu.icon', () => ctx.slots.register({
+            name: 'contextMenu.icon',
+            key: ICON_KEY
+          }, FolderGlyph))
+
+          registerWorkspaceAction(ctx)
+
+          ctx.slots.inject('shell.overlay', () => ctx.slots.register({
+            name: 'shell.overlay',
+            id: 'workspace-extra-folders.dialog',
+            order: 20
+          }, OverlayHost))
+        } catch (error) {
+          // A deployment without this plugin's slots must keep its boot.
+          console.error('dsh-extra-folders: client half could not install', error)
+        }
+      }
+    }
+  }
+})

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: extra-folders
+      name: dsh-extra-folders

package/icon.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64" role="img" aria-label="Workspace extra folders">
+  <rect width="64" height="64" rx="14" fill="#1f6feb"/>
+  <path d="M14 22.5c0-1.38 1.12-2.5 2.5-2.5h10l4 4h17c1.38 0 2.5 1.12 2.5 2.5v18c0 1.38-1.12 2.5-2.5 2.5h-31A2.5 2.5 0 0 1 14 44.5v-22Z" fill="#ffffff" fill-opacity="0.92"/>
+  <path d="M32 31v10M27 36h10" stroke="#1f6feb" stroke-width="3.2" stroke-linecap="round"/>
+</svg>

package/index.js

@@ -0,0 +1,350 @@
+/**
+ * Workspace extra folders — Host half.
+ *
+ * Attach additional writable directories to ONE workspace. The list is durable
+ * per canonical workspace path, is managed only from the Web UI (the model has
+ * no write path), and is granted per capability call by wrapping
+ * `ctx.sandboxPolicy.resolve()`: the resolved policy carries the calling
+ * Session's workspace folders in `additionalWritableRoots`, which the shared
+ * `writableRoots()` derivation in `@deepseek-ai/dsh-sandbox` turns into the
+ * allow-list used by BOTH the filesystem fence and the Seatbelt/bwrap/Landlock
+ * profiles. Sessions in other workspaces never see them.
+ *
+ * The UI talks to this half over a loopback route fenced by
+ * `ctx.connection.requestRejection()`, the same authenticated-peer check the
+ * `/api` routes use: a local process without a live browser Peer is refused.
+ *
+ * Failures travel back as stable CODES, never as English sentences: the Client
+ * half owns every user-visible sentence, so one workspace's error text cannot
+ * arrive in the wrong language.
+ *
+ * The plugin contributes NO prompt text of its own. DSH's sandbox-policy note
+ * already renders `Additional writable directories: [...]` from the resolved
+ * policy, so a second note would only duplicate tokens. The policy note is
+ * projected as a tail entry of the session history and de-duplicated while the
+ * list holds, so adding or removing a folder changes the tail only. It never
+ * rewrites the system prompt or an earlier prefix, which keeps the provider's
+ * prefix cache intact.
+ *
+ * @module dsh-extra-folders
+ */
+
+import { readFileSync, realpathSync, statSync } from 'node:fs'
+import { mkdir, rename, writeFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, isAbsolute, join, resolve as resolvePath } from 'node:path'
+
+/** Cordis plugin name. */
+export const name = 'workspace-extra-folders'
+
+/** Loopback JSON route the Client half calls. */
+const ROUTE = '/extra-folders'
+/** Durable state format. */
+const STATE_VERSION = 1
+/** Bound on a request body; the route only carries two paths. */
+const MAX_BODY_BYTES = 64 * 1024
+
+/** The Harness home that owns plugin state. */
+function dshHome() {
+  const configured = process.env.DSH_HOME
+  return typeof configured === 'string' && configured !== '' ? configured : join(homedir(), '.dsh')
+}
+
+/** An error carrying a code the Client half translates. */
+function fail(code) {
+  const error = new Error(code)
+  error.code = code
+  return error
+}
+
+/** Canonical identity of a path, tolerant of a path that disappeared. */
+function canonical(path) {
+  try {
+    return realpathSync(path)
+  } catch {
+    return resolvePath(path)
+  }
+}
+
+/** Whether a path is an existing directory. */
+function isDirectory(target) {
+  try {
+    return statSync(target).isDirectory()
+  } catch {
+    return false
+  }
+}
+
+/**
+ * Validate a directory grant the way the sandbox will: it must exist, be a
+ * directory, and be spelled as its own physical path. `additionalRoot()` in the
+ * sandbox rejects symlinked grants, so accepting one here would only fail later,
+ * on every confined call.
+ * @param target - candidate directory from the folder picker.
+ * @returns the physical path to store.
+ */
+function physicalDirectory(target) {
+  let stats
+  try {
+    stats = statSync(target)
+  } catch {
+    throw fail('missing')
+  }
+  if (!stats.isDirectory()) throw fail('notDirectory')
+  const physical = realpathSync(target)
+  if (physical !== resolvePath(target)) throw fail('symlink')
+  return physical
+}
+
+/**
+ * The durable per-workspace folder lists plus their write path.
+ * @param ctx - plugin context, used for diagnostics only.
+ */
+function createStore(ctx) {
+  const file = join(dshHome(), 'extra-folders.json')
+  let workspaces = read()
+
+  function read() {
+    /** The pre-rename state file, read when the current one does not exist. */
+    const legacyFile = join(dshHome(), 'workspace-extra-folders.json')
+    for (const candidate of [file, legacyFile]) {
+      try {
+        const parsed = JSON.parse(readFileSync(candidate, 'utf8'))
+        const source = parsed?.version === STATE_VERSION && typeof parsed?.workspaces === 'object' && parsed.workspaces !== null
+          ? parsed.workspaces
+          : {}
+        const result = {}
+        for (const [workspace, list] of Object.entries(source)) {
+          if (workspace === '' || !Array.isArray(list)) continue
+          const folders = [...new Set(list.filter((entry) => typeof entry === 'string' && entry !== ''))]
+          if (folders.length > 0) result[workspace] = folders
+        }
+        return result
+      } catch (error) {
+        if (error?.code !== 'ENOENT') ctx.logger?.warn?.(`dsh-extra-folders: cannot read ${candidate}: ${String(error)}`)
+      }
+    }
+    return {}
+  }
+
+  async function persist() {
+    await mkdir(dirname(file), { recursive: true })
+    const temporary = `${file}.${process.pid}.tmp`
+    await writeFile(temporary, `${JSON.stringify({ version: STATE_VERSION, workspaces }, null, 2)}\n`, 'utf8')
+    await rename(temporary, file)
+  }
+
+  const foldersFor = (workspace) => (Array.isArray(workspaces[workspace]) ? [...workspaces[workspace]] : [])
+
+  return {
+    list: foldersFor,
+    existing: (workspace) => foldersFor(workspace).filter(isDirectory),
+    missing: (workspace) => foldersFor(workspace).filter((folder) => !isDirectory(folder)),
+    async add(workspace, target) {
+      const physical = physicalDirectory(target)
+      if (physical === workspace) throw fail('self')
+      const current = foldersFor(workspace)
+      if (current.includes(physical)) throw fail('duplicate')
+      workspaces = { ...workspaces, [workspace]: [...current, physical] }
+      await persist()
+      return physical
+    },
+    async remove(workspace, target) {
+      const absolute = canonical(target)
+      const current = foldersFor(workspace)
+      const index = current.indexOf(absolute) !== -1 ? current.indexOf(absolute) : current.indexOf(target)
+      if (index === -1) throw fail('unknown')
+      const next = current.filter((_, position) => position !== index)
+      const updated = { ...workspaces }
+      if (next.length === 0) delete updated[workspace]
+      else updated[workspace] = next
+      workspaces = updated
+      await persist()
+      return absolute
+    },
+    count: () => Object.keys(workspaces).length,
+    stateFile: file
+  }
+}
+
+/** One workspace's attached folders, plus the ones whose directory vanished. */
+function summarize(store, workspace) {
+  return { workspace, folders: store.list(workspace), missing: store.missing(workspace) }
+}
+
+/**
+ * Extend the shared sandbox policy per call. Every enforcing family (filesystem
+ * fence, one-shot bash, terminal) resolves its policy through this one service,
+ * so this wrapper is the whole grant: folders are merged into
+ * `additionalWritableRoots` only for a Session whose immutable cwd is that
+ * workspace, and only while the folders still exist on disk.
+ * @param policy - the mounted `sandboxPolicy` service.
+ * @param existing - folders that currently exist for one canonical workspace.
+ * @returns a disposer restoring the original method.
+ */
+function installGrant(policy, existing) {
+  if (policy === null || typeof policy !== 'object' || typeof policy.resolve !== 'function') return () => {}
+  const original = policy.resolve
+  const ownDescriptor = Object.getOwnPropertyDescriptor(policy, 'resolve')
+  const resolveWithFolders = function resolveWithWorkspaceFolders(request = {}) {
+    const resolved = original.call(this, request)
+    const cwd = request?.session?.header?.cwd
+    if (typeof cwd !== 'string' || cwd === '') return resolved
+    const folders = existing(canonical(cwd))
+    if (folders.length === 0) return resolved
+    const configured = resolved.additionalWritableRoots ?? []
+    const extras = folders.filter((folder) => !configured.includes(folder))
+    if (extras.length === 0) return resolved
+    return { ...resolved, additionalWritableRoots: Object.freeze([...configured, ...extras]) }
+  }
+  policy.resolve = resolveWithFolders
+  return () => {
+    if (policy.resolve !== resolveWithFolders) return
+    if (ownDescriptor !== undefined) Object.defineProperty(policy, 'resolve', ownDescriptor)
+    else delete policy.resolve
+  }
+}
+
+/** Whether a path is a workspace the sidebar lists (tolerant of a missing registry). */
+function isRegisteredWorkspace(ctx, workspace) {
+  const registry = ctx.get('workspaceRegistry')
+  if (registry === undefined || typeof registry.list !== 'function') return true
+  try {
+    const wanted = canonical(workspace)
+    return registry.list().some((entry) => canonical(entry.path) === wanted)
+  } catch {
+    return true
+  }
+}
+
+/** Read one bounded JSON body. */
+function readJsonBody(request) {
+  return new Promise((resolve, reject) => {
+    const chunks = []
+    let size = 0
+    request.on('data', (chunk) => {
+      size += chunk.length
+      if (size > MAX_BODY_BYTES) {
+        reject(fail('tooLarge'))
+        request.destroy()
+        return
+      }
+      chunks.push(chunk)
+    })
+    request.on('end', () => {
+      const text = Buffer.concat(chunks).toString('utf8').trim()
+      if (text === '') {
+        resolve({})
+        return
+      }
+      try {
+        resolve(JSON.parse(text))
+      } catch {
+        reject(fail('badBody'))
+      }
+    })
+    request.on('error', reject)
+  })
+}
+
+/** Write one JSON response. */
+function sendJson(response, status, value) {
+  const body = JSON.stringify(value)
+  response.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'content-length': Buffer.byteLength(body),
+    'cache-control': 'no-store'
+  })
+  response.end(body)
+}
+
+/**
+ * Register every Host contribution.
+ * @param ctx - Host plugin context.
+ */
+export function apply(ctx) {
+  const store = createStore(ctx)
+
+  // 0.2.2-alpha.2 added `additionalWritableRoots`; earlier lines cannot honor an extra
+  // root at all. Say so instead of installing a menu that grants nothing.
+  const policy = ctx.get('sandboxPolicy')
+  if (policy !== undefined && !('additionalWritableRoots' in policy)) {
+    ctx.logger?.error?.(
+      'dsh-extra-folders: this DSH build has no additionalWritableRoots on its sandbox policy, '
+      + 'so extra folders cannot be granted. Requires DSH >= 0.2.2-alpha.3.'
+    )
+    return
+  }
+
+  ctx.inject(['sandboxPolicy'], (scope) => {
+    scope.effect(() => installGrant(scope.sandboxPolicy, (workspace) => store.existing(workspace)), 'dsh-extra-folders: sandbox grant')
+  })
+
+  ctx.inject(['webServer'], (scope) => {
+    scope.effect(() => scope.webServer.register({
+      kind: 'prefix',
+      path: ROUTE,
+      handler: (request, response) => {
+        void (async () => {
+          const connection = ctx.get('connection')
+          if (connection !== undefined && typeof connection.admit === 'function') {
+            const admission = connection.admit(request)
+            if (admission !== null && typeof admission === 'object' && 'rejection' in admission) {
+              response.writeHead(admission.rejection)
+              response.end(admission.rejection === 401 ? 'unauthorized' : 'forbidden')
+              return
+            }
+          }
+          if (request.method !== 'POST') {
+            sendJson(response, 405, { error: 'unknown' })
+            return
+          }
+          let payload
+          try {
+            payload = await readJsonBody(request)
+          } catch (error) {
+            sendJson(response, 400, { error: error?.code ?? 'unknown' })
+            return
+          }
+          const endpoint = new URL(request.url ?? '/', 'http://127.0.0.1').pathname.slice(ROUTE.length + 1)
+          const workspaceInput = typeof payload?.workspace === 'string' ? payload.workspace : ''
+          if (workspaceInput === '' || !isAbsolute(workspaceInput)) {
+            sendJson(response, 400, { error: 'notWorkspace' })
+            return
+          }
+          const workspace = canonical(workspaceInput)
+          if (!isDirectory(workspace) || !isRegisteredWorkspace(ctx, workspace)) {
+            sendJson(response, 409, { error: 'notWorkspace' })
+            return
+          }
+          try {
+            if (endpoint === 'list') {
+              sendJson(response, 200, summarize(store, workspace))
+              return
+            }
+            if (endpoint !== 'add' && endpoint !== 'remove') {
+              sendJson(response, 404, { error: 'unknown' })
+              return
+            }
+            const target = typeof payload?.path === 'string' ? payload.path.trim() : ''
+            if (target === '') {
+              sendJson(response, 400, { error: 'missing' })
+              return
+            }
+            if (endpoint === 'add') {
+              const added = await store.add(workspace, target)
+              sendJson(response, 200, { ...summarize(store, workspace), added })
+              return
+            }
+            const removed = await store.remove(workspace, target)
+            sendJson(response, 200, { ...summarize(store, workspace), removed })
+          } catch (error) {
+            sendJson(response, 400, { error: error?.code ?? 'unknown' })
+          }
+        })()
+      }
+    }), 'dsh-extra-folders: loopback route')
+  })
+
+  ctx.logger?.info?.(`dsh-extra-folders: ${store.count()} workspace(s) carry attached folders (${store.stateFile})`)
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Workspace folders",
+    "description": "A workspace has one writable directory by default, so writing anywhere else asks for approval again and again. This plugin adds more directories from the workspace row's menu. Attached directories are writable for that workspace's sessions by both the file tools and the shell. Sessions in other workspaces don't get that grant."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "工作区多文件夹",
+    "description": "工作区默认只有一个可写目录，写到别处要一次次点授权。这个插件让你在工作区行的菜单里多加几个目录，加进来的目录对这个工作区的会话可写，文件工具和 bash 都认。别的工作区的会话没有这份授权。"
+  }
+}

package/package.json

@@ -1,6 +1,57 @@
 {
   "name": "dsh-extra-folders",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Attach extra writable folders to one workspace, granted per session, not profile-wide.",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "workspace",
+    "multi-root",
+    "folders",
+    "writable",
+    "sandbox",
+    "permissions"
+  ],
+  "author": "kingOfSoySauce",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kingOfSoySauce/dsh-extra-folders.git"
+  },
+  "homepage": "https://github.com/kingOfSoySauce/dsh-extra-folders#readme",
+  "bugs": {
+    "url": "https://github.com/kingOfSoySauce/dsh-extra-folders/issues"
+  },
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "assets/menu.png",
+    "assets/dialog.png",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "dsh": ">=0.2.2-alpha.3 <0.3"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true
+    }
+  }
+}