dsh-extra-folders 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 kingOfSoySauce
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,131 @@
+# dsh-extra-folders
+
+When a project spans several folders, or you temporarily need to write outside the workspace, add those folders to the workspace. Sessions and subagents can then write them directly, without repeated approvals and without granting full access.
+
+Before adding a folder, writing outside the workspace triggers an approval:
+
+![Writing outside the workspace triggers an approval](assets/approval.png)
+
+| Workspace menu | Dialog |
+| --- | --- |
+| ![Add folder in the workspace menu](assets/menu.png) | ![Add folder dialog](assets/dialog.png) |
+
+## Install and update
+
+DSH 0.2.2-alpha.3 or later.
+
+### Option 1: Add from the UI
+
+**Settings → Plugins → Add plugin**
+
+```text
+dsh-extra-folders@latest
+```
+
+### Option 2: Command line
+
+```sh
+dsh plugin --profile desktop add dsh-extra-folders@latest
+```
+
+### Option 3: Ask an agent for help
+
+<details>
+<summary><strong>Expand the install prompt</strong></summary>
+
+```text
+Please install dsh-extra-folders into the current profile:
+npm package dsh-extra-folders@latest (source https://github.com/kingOfSoySauce/dsh-extra-folders)
+
+First, confirm three things in read-only mode: whether the host is Desktop or Web, the current profile name, and whether the dsh version is >= 0.2.2-alpha.3.
+If the version is too low, tell me and do not try to install.
+
+On Desktop, prefer Plugins → Add plugin and paste
+dsh-extra-folders@latest
+If the current host provides plugin management tools, you can also run
+dsh plugin --profile <profile> add dsh-extra-folders@latest.
+
+After install, check that the plugin row is enabled. If a restart is needed, tell me and I will restart it myself.
+Do not edit the profile's package.json by hand, and do not touch other plugins.
+When it is installed, take me to the more menu of a sidebar workspace row and confirm that it contains "Add folder".
+```
+
+</details>
+
+<details>
+<summary><strong>Expand the update prompt</strong></summary>
+
+```text
+Please update dsh-extra-folders to the latest version:
+npm package dsh-extra-folders@latest (source https://github.com/kingOfSoySauce/dsh-extra-folders)
+
+First, confirm four things in read-only mode: whether the host is Desktop or Web, the current profile name, the installed version, and the latest version on npm.
+If it is already the latest, tell me and do not reinstall.
+
+On Desktop, prefer Plugins → Add plugin and add
+dsh-extra-folders@latest
+If the current host provides plugin management tools, you can also run
+dsh plugin --profile <profile> add dsh-extra-folders@latest.
+
+After the update, check that the plugin row is enabled. If a restart is needed, tell me and I will restart it myself.
+Do not edit the profile's package.json by hand, and do not touch other plugins.
+When it is updated, take me to the more menu of a sidebar workspace row and confirm that "Add folder" is there and the folders I added before are still listed.
+```
+
+</details>
+
+Whichever option you use, if the version still looks old after updating, turn the plugin row off and on in Plugins.
+
+## Usage
+
+Sidebar workspace row → the more button at the end of the row → **Add folder**.
+
+The first row in the dialog is the workspace itself. It is always writable and cannot be removed. The rows below are the folders you added. You can remove each one on its own. Adding and removing take effect right away. No refresh, and no need to wait for the next session.
+
+The grant follows the workspace. Subagents are covered too. Sessions in other workspaces do not see these folders.
+
+## Strengths
+
+- **Native UI**: the dialog and buttons belong to the host, opened from the workspace row menu. Colors and fonts follow the host, so appearance plugins are naturally compatible.
+- **No new tools**: the model sees the same toolset as before, and prefix-cache hits are unaffected.
+- **No prompt text**: the plugin writes nothing into the context. DSH's own writable-directories note is updated at the end of the session history when folders change; earlier prefixes stay put.
+- **No kernel patch**: the filesystem and the sandbox are untouched. One resolve method is wrapped, and disabling the plugin restores stock behavior.
+- **Scoped grant**: grants are stored per workspace; other workspaces do not see these folders. Folders can only be added or removed from the UI, and the model has no way to widen its own access.
+- **Zero dependencies**: one host file, one client file, no build step, no third-party packages.
+
+How grants work, where state lives, and what does not apply: see [Design notes](https://github.com/kingOfSoySauce/dsh-extra-folders/blob/main/DESIGN.en.md).
+
+## Compatibility
+
+| Environment | Status |
+| --- | --- |
+| macOS desktop 0.2.2-rc.1 | Verified |
+| DSH 0.2.2-alpha.3 and later | Supported |
+| DSH 0.2.1 and earlier | Not supported. The kernel has no `additionalWritableRoots` and no workspace menu service |
+| Web (`dsh web`) | Same code as desktop. The folder picker is replaced by in-app browsing. Not tested |
+| Windows | Applies to the file tools only. The sandboxed shell is not affected. This limit comes from DSH. Not tested |
+
+The kernel is checked when the host starts. If the kernel is not supported, the plugin writes one clear log line and stops.
+
+## Uninstall
+
+```sh
+dsh plugin --profile desktop remove dsh-extra-folders
+```
+
+You can also remove it directly in Plugins.
+
+## Troubleshooting
+
+| Symptom | What to do |
+| --- | --- |
+| No "Add folder" in the menu | Check that the plugin row is on and refresh the page once. dsh below 0.2.2-alpha.3 does not have this item |
+| I added a folder but it still asks for approval | Check whether the session permission is `read-only`. Attached folders do not apply in that mode |
+| An old session still asks for approval, or asks first whether to request it | Start a new session. The approval habit from earlier turns carries over. A new grant does not rewrite the pattern already set in that conversation |
+| I picked a folder but it was not added | The plugin only accepts real directories. A symlink is rejected, so pick the path it points to |
+| bash cannot write on Windows | DSH only grants attached folders to the file tools. This is a DSH limit and the plugin cannot change it |
+| On Web, the dialog opens but there is no system picker | On Web, in-app browsing replaces the system dialog |
+
+## License
+
+MIT

package/README.md

@@ -1,3 +1,131 @@
-# Temporary Holding Version
+# DSH工作区添加文件夹插件
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+项目跨了几个文件夹，或者临时要访问工作区外的文件时，把文件夹加进工作区。之后工作区里的会话和子 agent 都能直接写，不用再逐次点授权，也不用放开全部权限。
+
+加文件夹之前，写工作区外的文件会触发审批：
+
+![工作区外写入触发审批](assets/approval.png)
+
+| 工作区菜单 | 对话框 |
+| --- | --- |
+| ![工作区菜单里的「添加文件夹」](assets/menu.png) | ![添加文件夹对话框](assets/dialog.png) |
+
+## 安装、更新
+
+DSH 0.2.2-alpha.3 及以上。
+
+### 方式一：界面添加
+
+**插件 → 添加插件**
+
+```text
+dsh-extra-folders@latest
+```
+
+### 方式二：命令行
+
+```sh
+dsh plugin --profile desktop add dsh-extra-folders@latest
+```
+
+### 方式三：Agent 帮忙
+
+<details>
+<summary><strong>展开安装提示词</strong></summary>
+
+```text
+请帮我把 dsh-extra-folders 装到当前 profile：
+npm 包 dsh-extra-folders@latest（源码 https://github.com/kingOfSoySauce/dsh-extra-folders）
+
+先只读确认三件事：宿主是桌面端还是 Web、当前 profile 名、dsh 版本是否 >= 0.2.2-alpha.3。
+版本不够就直接告诉我，不要尝试安装。
+
+桌面端优先用 Plugins → Add plugin，粘贴
+dsh-extra-folders@latest
+如果当前宿主提供了插件管理工具，也可以执行
+dsh plugin --profile <profile> add dsh-extra-folders@latest。
+
+装完核对插件行是启用状态。需要重启时告诉我，由我自己重启。
+不要手改 profile 的 package.json，不要动其他插件。
+装好后带我到侧栏工作区行的更多菜单，确认里面有「添加文件夹」。
+```
+
+</details>
+
+<details>
+<summary><strong>展开更新提示词</strong></summary>
+
+```text
+请帮我把 dsh-extra-folders 更新到最新版：
+npm 包 dsh-extra-folders@latest（源码 https://github.com/kingOfSoySauce/dsh-extra-folders）
+
+先只读确认四件事：宿主是桌面端还是 Web、当前 profile 名、已装版本、npm 上的最新版本。
+已经是最新就直接告诉我，不要重装。
+
+桌面端优先用 Plugins → Add plugin 重新添加
+dsh-extra-folders@latest
+如果当前宿主提供了插件管理工具，也可以执行
+dsh plugin --profile <profile> add dsh-extra-folders@latest。
+
+更新完核对插件行是启用状态。需要重启时告诉我，由我自己重启。
+不要手改 profile 的 package.json，不要动其他插件。
+更新后带我到侧栏工作区行的更多菜单，确认「添加文件夹」还在，之前加的文件夹也还在。
+```
+
+</details>
+
+不管用哪种方式，更新后如果版本号没变，在 Plugins 里把插件行关掉再打开。
+
+## 使用
+
+侧栏工作区行 → 行尾的更多按钮 → **添加文件夹**。
+
+弹框第一行是工作区本身，它一直可写，不能移除。下面是你添加的文件夹，可以单独移除。添加和移除都立即生效，不用刷新，也不用等下一个会话。
+
+授权跟着工作区走。子 agent 也算在内，其他工作区的会话看不到这些文件夹。
+
+## 优点
+
+- **原生界面**：弹框和按钮都是官方的，入口在工作区行的更多菜单里。颜色、字体这些全跟宿主走，天然兼容各种外观插件。
+- **不加工具**：模型看到的工具和没装时一样，不影响前缀缓存命中。
+- **零提示词**：插件不往上下文里写东西。提示词和工具说明都没有，连进度提示也不写。DSH 自己的策略说明会跟着目录更新末尾那一条，前面的前缀不动。
+- **不换内核**：没换文件系统，也没换沙箱。只包了权限解析那一个方法，插件一关就回到原生行为。
+- **范围可控**：授权按工作区存，别的工作区看不到；加和删只能从界面点，模型没有扩权入口。
+- **零依赖**：宿主一个文件，界面一个文件，不用构建，也没有第三方包。
+
+怎么授权、状态放哪，见 [设计说明](https://github.com/kingOfSoySauce/dsh-extra-folders/blob/main/DESIGN.md)。不适用的场景也写在那里。
+
+## 兼容性
+
+| 环境 | 状态 |
+| --- | --- |
+| macOS 桌面端 0.2.2-rc.1 | 已验证 |
+| DSH 0.2.2-alpha.3 及以上 | 支持 |
+| DSH 0.2.1 及更早 | 不支持。内核没有 `additionalWritableRoots`，也没有工作区菜单服务 |
+| Web（`dsh web`） | 代码与桌面端相同，文件夹选择器换成应用内浏览。未实测 |
+| Windows | 只对文件工具生效，沙箱里的 shell 不受影响。这条限制来自 DSH 本身，未实测 |
+
+宿主启动时会检查内核。不支持就写一条明确日志并退出。
+
+## 卸载
+
+```sh
+dsh plugin --profile desktop remove dsh-extra-folders
+```
+
+也可以在 Plugins 里直接移除。
+
+## 遇到问题
+
+| 现象 | 处理 |
+| --- | --- |
+| 菜单里没有「添加文件夹」 | 确认插件行开着，刷新一次页面；dsh 低于 0.2.2-alpha.3 不会有这一项 |
+| 加了文件夹还是弹授权 | 看会话权限是不是 `read-only`，这个模式下附加文件夹不生效 |
+| 老会话还在弹授权，或者先问一句要不要申请 | 新开一个会话。之前几轮的审批习惯会延续下来，新加的授权不会改写已经形成的对话惯性 |
+| 选了文件夹却没加上 | 插件只收真实目录，选了软链接会被拒绝，选它指向的路径 |
+| Windows 上 bash 写不进去 | DSH 只给文件工具放行附加目录，这是 DSH 的限制，插件改不了 |
+| Web 端点开但没有系统选择器 | Web 端由应用内浏览代替系统对话框 |
+
+## License
+
+MIT

package/client.js

@@ -0,0 +1,447 @@
+window.__ModuleLoader__.load({
+  id: 'dsh-extra-folders',
+  factory(require) {
+    const React = require('react')
+    const h = React.createElement
+    /** The official controls: Modal and Button are seed modules every plugin may require. */
+    let primitives
+    try {
+      primitives = require('@deepseek-ai/dsh-client-ui-primitives')
+    } catch {
+      primitives = undefined
+    }
+
+    const ROUTE = '/extra-folders'
+    const DIALOG_CLASS = 'wxf-dialog'
+    const ICON_KEY = 'workspace-extra-folders.folder'
+    /** After 打开文件夹 and 在 Finder 中显示, before 重命名 (100) and 删除 (300). */
+    const MENU_ORDER = 150
+
+    const COPY = {
+      zh: {
+        menu: '添加文件夹',
+        title: '工作区添加文件夹',
+        add: '添加文件夹',
+        cancel: '取消',
+        close: '关闭',
+        empty: '还没有文件夹',
+        remove: '移除',
+        missing: '文件夹已不存在',
+        failed: '没保存成功，再试一次',
+        pickerUnavailable: '这里打不开系统文件夹选择器',
+        root: '工作区',
+        codes: {
+          notWorkspace: '这个目录不是侧栏里的工作区',
+          duplicate: '这个文件夹已经加过了',
+          notDirectory: '选中的不是文件夹',
+          missing: '文件夹不见了，可能刚被删掉',
+          symlink: '这是软链接，请选它指向的真实路径',
+          self: '这就是工作区本身',
+          unknown: '没保存成功，再试一次'
+        }
+      },
+      en: {
+        menu: 'Add folder',
+        title: 'Add workspace folders',
+        add: 'Add folder',
+        cancel: 'Cancel',
+        close: 'Close',
+        empty: 'No folders yet',
+        remove: 'Remove',
+        missing: 'Folder is gone',
+        failed: "Didn't save. Try again",
+        pickerUnavailable: 'The system folder picker is not available here',
+        root: 'Workspace',
+        codes: {
+          notWorkspace: 'That directory is not a workspace in the sidebar',
+          duplicate: 'That folder is already attached',
+          notDirectory: 'That is not a folder',
+          missing: 'That folder is gone',
+          symlink: 'That is a symlink. Pick the real path it points to.',
+          self: 'That is the workspace itself',
+          unknown: "Didn't save. Try again"
+        }
+      }
+    }
+
+    /** Captured Client context so components can reach services lazily. */
+    let pluginContext
+
+    /** One dictionary per render, picked from the live locale. Never mixed. */
+    function copy() {
+      try {
+        const snapshot = pluginContext?.get?.('locale')?.getLocale?.()
+        const id = typeof snapshot?.active === 'string' ? snapshot.active : snapshot?.id
+        return COPY[typeof id === 'string' && id.startsWith('zh') ? 'zh' : 'en'] ?? COPY.en
+      } catch {
+        return COPY.en
+      }
+    }
+
+    /** One translated sentence per failure code. */
+    function describe(failure) {
+      const dict = copy()
+      const code = typeof failure?.code === 'string' ? failure.code : 'unknown'
+      return dict.codes[code] ?? dict.failed
+    }
+
+    async function callRoute(endpoint, payload) {
+      if (typeof location === 'undefined') throw new Error('the workspace route needs the browser GUI')
+      const url = new URL(`${ROUTE}/${endpoint}`, location.href).toString()
+      const response = await fetch(url, {
+        method: 'POST',
+        credentials: 'same-origin',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(payload ?? {})
+      })
+      const text = await response.text()
+      let data
+      try {
+        data = JSON.parse(text)
+      } catch {
+        data = undefined
+      }
+      const code = typeof data?.error === 'string' ? data.error : 'unknown'
+      if (!response.ok || typeof data?.error === 'string') {
+        const failure = new Error(code)
+        failure.code = code
+        throw failure
+      }
+      return data
+    }
+
+    // -- one open dialog at a time -----------------------------------------
+    let openRequest = null
+    const listeners = new Set()
+    function publish(next) {
+      openRequest = next
+      for (const listener of [...listeners]) {
+        try {
+          listener()
+        } catch {
+          // one broken listener must not block the others
+        }
+      }
+    }
+    function subscribe(listener) {
+      listeners.add(listener)
+      return () => {
+        listeners.delete(listener)
+      }
+    }
+    function useRequest() {
+      return React.useSyncExternalStore(subscribe, () => openRequest, () => openRequest)
+    }
+
+    // Rows copy the models page: one bordered card per entry, actions at the right edge.
+    const styles = {
+      list: { display: 'flex', flexDirection: 'column', gap: '10px' },
+      row: {
+        display: 'flex',
+        alignItems: 'center',
+        gap: '12px',
+        minHeight: '52px',
+        padding: '0 16px',
+        borderRadius: '12px',
+        border: '1px solid var(--dsw-alias-border-l1)',
+        background: 'transparent'
+      },
+      rowPath: { flex: '1 1 auto', minWidth: '0', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap', direction: 'ltr', fontSize: '14px' },
+      remove: {
+        border: '1px solid var(--dsw-alias-border-l1)',
+        background: 'transparent',
+        color: 'var(--dsw-alias-label-primary)',
+        borderRadius: '8px',
+        padding: '4px 12px',
+        cursor: 'pointer',
+        font: 'inherit',
+        fontSize: '13px'
+      },
+      tag: { color: 'var(--dsw-alias-label-secondary)', fontSize: '12px', flex: '0 0 auto' },
+      missing: { color: 'var(--dsw-alias-state-warn-primary)', fontSize: '12px' },
+      error: { color: 'var(--dsw-alias-label-secondary)', fontSize: '12px', lineHeight: '1.5' },
+      addRow: {
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'center',
+        gap: '8px',
+        minHeight: '52px',
+        width: '100%',
+        borderRadius: '12px',
+        border: '1px dashed var(--dsw-alias-border-l2)',
+        background: 'transparent',
+        color: 'var(--dsw-alias-label-primary)',
+        cursor: 'pointer',
+        font: 'inherit',
+        fontSize: '14px'
+      }
+    }
+
+    function FolderGlyph() {
+      return h('svg', {
+        width: 14,
+        height: 14,
+        viewBox: '0 0 16 16',
+        fill: 'none',
+        stroke: 'currentColor',
+        strokeWidth: 1.3,
+        strokeLinecap: 'round',
+        strokeLinejoin: 'round',
+        'aria-hidden': true
+      }, [
+        h('path', { key: 'folder', d: 'M1.5 3.5C1.5 2.94772 1.94772 2.5 2.5 2.5H6.5L8 4.5H13.5C14.0523 4.5 14.5 4.94772 14.5 5.5V12.5C14.5 13.0523 14.0523 13.5 13.5 13.5H2.5C1.94772 13.5 1.5 13.0523 1.5 12.5V3.5Z' }),
+        h('path', { key: 'plus', d: 'M8 7.5V11.5M6 9.5H10' })
+      ])
+    }
+
+    /** One workspace's attached folders, rendered inside the official Modal. */
+    function FolderDialog({ request, onClose }) {
+      const text = copy()
+      const workspace = typeof request.path === 'string' ? request.path : ''
+      const title = typeof request.title === 'string' && request.title !== '' ? request.title : workspace
+      const [folders, setFolders] = React.useState([])
+      const [missing, setMissing] = React.useState([])
+      const [busy, setBusy] = React.useState(false)
+      const [error, setError] = React.useState('')
+
+      const load = React.useCallback(async () => {
+        const data = await callRoute('list', { workspace })
+        setFolders(Array.isArray(data?.folders) ? data.folders : [])
+        setMissing(Array.isArray(data?.missing) ? data.missing : [])
+      }, [workspace])
+
+      React.useEffect(() => {
+        load().catch((failure) => setError(describe(failure)))
+      }, [load])
+
+      const add = async () => {
+        setError('')
+        const ui = pluginContext?.get?.('uiWorkspace')
+        if (typeof ui?.pickDirectory !== 'function') {
+          setError(text.pickerUnavailable)
+          return
+        }
+        let picked
+        try {
+          picked = await ui.pickDirectory()
+        } catch (failure) {
+          setError(describe(failure))
+          return
+        }
+        if (typeof picked !== 'string' || picked === '') return
+        setBusy(true)
+        try {
+          await callRoute('add', { workspace, path: picked })
+          await load()
+        } catch (failure) {
+          setError(describe(failure))
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const remove = async (folder) => {
+        setError('')
+        setBusy(true)
+        try {
+          await callRoute('remove', { workspace, path: folder })
+          await load()
+        } catch (failure) {
+          setError(describe(failure))
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      /** The workspace itself always comes first and cannot be removed. */
+      const rows = [
+        { path: workspace, removable: false },
+        ...folders.map((folder) => ({ path: folder, removable: true }))
+      ]
+
+      const body = h('div', { style: styles.list },
+        rows.map((row) => h('div', { key: row.path, style: styles.row }, [
+          h('span', { key: 'path', style: styles.rowPath, title: row.path }, row.path),
+          row.removable ? null : h('span', { key: 'tag', style: styles.tag }, text.root),
+          row.removable && missing.includes(row.path) ? h('span', { key: 'missing', style: styles.missing }, text.missing) : null,
+          row.removable
+            ? h('button', {
+              key: 'remove',
+              type: 'button',
+              style: styles.remove,
+              disabled: busy,
+              onClick: () => {
+                void remove(row.path)
+              }
+            }, text.remove)
+            : null
+        ])))
+
+      const Modal = primitives?.Modal
+      const Button = primitives?.Button
+      /** forwardRef and memo components are objects, so never test `typeof x === 'function'` here. */
+      const official = Modal !== undefined && Modal !== null && Button !== undefined && Button !== null
+      const addRow = h('button', {
+        key: 'add',
+        type: 'button',
+        style: { ...styles.addRow, opacity: busy ? 0.6 : 1 },
+        disabled: busy,
+        onClick: () => {
+          void add()
+        }
+      }, [
+        h('svg', { key: 'plus', width: 14, height: 14, viewBox: '0 0 16 16', fill: 'none', stroke: 'currentColor', strokeWidth: 1.6, strokeLinecap: 'round', 'aria-hidden': true }, [
+          h('path', { key: 'h', d: 'M8 3.5v9' }),
+          h('path', { key: 'v', d: 'M3.5 8h9' })
+        ]),
+        h('span', { key: 'label' }, text.add)
+      ])
+
+      if (official) {
+        return h(Modal, {
+          open: true,
+          onClose,
+          closeLabel: text.close,
+          title: text.title,
+          className: DIALOG_CLASS,
+          // Both actions stay right-aligned inside the Modal's own footer container,
+          // the way the rename and delete dialogs place theirs.
+          footer: h(React.Fragment, null,
+            h(Button, { key: 'close', variant: 'outline', onClick: onClose }, text.close),
+            h(Button, { key: 'add', variant: 'primary', disabled: busy, onClick: () => { void add() } }, text.add)),
+          children: h('div', { style: { display: 'flex', flexDirection: 'column', gap: '16px' } }, [
+            body,
+            error === '' ? null : h('div', { key: 'error', role: 'alert', style: styles.error }, error)
+          ])
+        })
+      }
+
+      // Older deployments without the primitives seed keep a usable panel.
+      return h('div', {
+        role: 'dialog',
+        'aria-modal': 'true',
+        'aria-label': text.title,
+        style: {
+          position: 'fixed',
+          inset: '0',
+          display: 'flex',
+          alignItems: 'center',
+          justifyContent: 'center',
+          background: 'color-mix(in srgb, var(--dsw-alias-bg-base) 55%, transparent)',
+          zIndex: 60
+        }
+      }, h('div', {
+        style: {
+          width: 'min(520px, calc(100vw - 32px))',
+          display: 'flex',
+          flexDirection: 'column',
+          gap: '12px',
+          padding: '20px',
+          borderRadius: '16px',
+          background: 'var(--dsw-alias-bg-overlay)',
+          border: '1px solid var(--dsw-alias-border-l1)',
+          color: 'var(--dsw-alias-label-primary)'
+        }
+      }, [
+          body,
+          error === '' ? null : h('div', { key: 'error', style: styles.error }, error),
+          addRow,
+          h('button', {
+            key: 'close',
+            type: 'button',
+            onClick: onClose,
+            style: { alignSelf: 'flex-end', border: '1px solid var(--dsw-alias-border-l2)', background: 'transparent', color: 'var(--dsw-alias-label-primary)', borderRadius: '10px', padding: '6px 14px', cursor: 'pointer', font: 'inherit' }
+          }, text.close)
+        ]))
+    }
+
+    /** A broken dialog must not take the overlay layer with it. */
+    class OverlayBoundary extends React.Component {
+      constructor(props) {
+        super(props)
+        this.state = { failed: false }
+      }
+
+      static getDerivedStateFromError() {
+        return { failed: true }
+      }
+
+      componentDidCatch(error) {
+        console.error('dsh-extra-folders: dialog failed', error)
+      }
+
+      render() {
+        return this.state.failed ? null : this.props.children
+      }
+    }
+
+    function OverlayHost() {
+      const request = useRequest()
+      if (request === null) return null
+      return h(OverlayBoundary, null, h(FolderDialog, {
+        key: request.path,
+        request,
+        onClose: () => publish(null)
+      }))
+    }
+
+    /**
+     * The workspace row's own more menu: the action list this plugin contributes.
+     * The menu owns rendering, so an action needs a label, an optional icon key,
+     * and what to run.
+     */
+    function registerWorkspaceAction(ctx) {
+      ctx.inject(['contextMenus'], (scope) => {
+        scope.effect(() => scope.contextMenus.register({
+          id: 'workspace-extra-folders.attach',
+          target: 'workspace',
+          order: MENU_ORDER,
+          observe: () => {
+            const locale = ctx.get('locale')
+            return locale !== undefined && typeof locale.subscribe === 'function' ? [locale] : []
+          },
+          resolve: (target) => [{
+            id: 'attach-folders',
+            label: copy().menu,
+            icon: { key: ICON_KEY },
+            run: () => {
+              publish({ path: target?.path, title: target?.displayTitle })
+            }
+          }]
+        }), 'dsh-extra-folders: workspace menu action')
+      })
+    }
+
+    return {
+      inject: ['slots'],
+      apply(ctx) {
+        pluginContext = ctx
+        try {
+          ctx.effect(() => {
+            const style = document.createElement('style')
+            style.dataset.plugin = 'workspace-extra-folders'
+            style.textContent = `.${DIALOG_CLASS}{width:max-content;min-width:min(380px,calc(100vw - 32px));max-width:min(680px,calc(100vw - 32px))}`
+            document.head.append(style)
+            return () => style.remove()
+          }, 'dsh-extra-folders: dialog width')
+
+          ctx.slots.inject('contextMenu.icon', () => ctx.slots.register({
+            name: 'contextMenu.icon',
+            key: ICON_KEY
+          }, FolderGlyph))
+
+          registerWorkspaceAction(ctx)
+
+          ctx.slots.inject('shell.overlay', () => ctx.slots.register({
+            name: 'shell.overlay',
+            id: 'workspace-extra-folders.dialog',
+            order: 20
+          }, OverlayHost))
+        } catch (error) {
+          // A deployment without this plugin's slots must keep its boot.
+          console.error('dsh-extra-folders: client half could not install', error)
+        }
+      }
+    }
+  }
+})

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: extra-folders
+      name: dsh-extra-folders

package/icon.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64" role="img" aria-label="Workspace extra folders">
+  <rect width="64" height="64" rx="14" fill="#1f6feb"/>
+  <path d="M14 22.5c0-1.38 1.12-2.5 2.5-2.5h10l4 4h17c1.38 0 2.5 1.12 2.5 2.5v18c0 1.38-1.12 2.5-2.5 2.5h-31A2.5 2.5 0 0 1 14 44.5v-22Z" fill="#ffffff" fill-opacity="0.92"/>
+  <path d="M32 31v10M27 36h10" stroke="#1f6feb" stroke-width="3.2" stroke-linecap="round"/>
+</svg>

package/index.js

@@ -0,0 +1,350 @@
+/**
+ * Workspace extra folders — Host half.
+ *
+ * Attach additional writable directories to ONE workspace. The list is durable
+ * per canonical workspace path, is managed only from the Web UI (the model has
+ * no write path), and is granted per capability call by wrapping
+ * `ctx.sandboxPolicy.resolve()`: the resolved policy carries the calling
+ * Session's workspace folders in `additionalWritableRoots`, which the shared
+ * `writableRoots()` derivation in `@deepseek-ai/dsh-sandbox` turns into the
+ * allow-list used by BOTH the filesystem fence and the Seatbelt/bwrap/Landlock
+ * profiles. Sessions in other workspaces never see them.
+ *
+ * The UI talks to this half over a loopback route fenced by
+ * `ctx.connection.requestRejection()`, the same authenticated-peer check the
+ * `/api` routes use: a local process without a live browser Peer is refused.
+ *
+ * Failures travel back as stable CODES, never as English sentences: the Client
+ * half owns every user-visible sentence, so one workspace's error text cannot
+ * arrive in the wrong language.
+ *
+ * The plugin contributes NO prompt text of its own. DSH's sandbox-policy note
+ * already renders `Additional writable directories: [...]` from the resolved
+ * policy, so a second note would only duplicate tokens. The policy note is
+ * projected as a tail entry of the session history and de-duplicated while the
+ * list holds, so adding or removing a folder changes the tail only. It never
+ * rewrites the system prompt or an earlier prefix, which keeps the provider's
+ * prefix cache intact.
+ *
+ * @module dsh-extra-folders
+ */
+
+import { readFileSync, realpathSync, statSync } from 'node:fs'
+import { mkdir, rename, writeFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, isAbsolute, join, resolve as resolvePath } from 'node:path'
+
+/** Cordis plugin name. */
+export const name = 'workspace-extra-folders'
+
+/** Loopback JSON route the Client half calls. */
+const ROUTE = '/extra-folders'
+/** Durable state format. */
+const STATE_VERSION = 1
+/** Bound on a request body; the route only carries two paths. */
+const MAX_BODY_BYTES = 64 * 1024
+
+/** The Harness home that owns plugin state. */
+function dshHome() {
+  const configured = process.env.DSH_HOME
+  return typeof configured === 'string' && configured !== '' ? configured : join(homedir(), '.dsh')
+}
+
+/** An error carrying a code the Client half translates. */
+function fail(code) {
+  const error = new Error(code)
+  error.code = code
+  return error
+}
+
+/** Canonical identity of a path, tolerant of a path that disappeared. */
+function canonical(path) {
+  try {
+    return realpathSync(path)
+  } catch {
+    return resolvePath(path)
+  }
+}
+
+/** Whether a path is an existing directory. */
+function isDirectory(target) {
+  try {
+    return statSync(target).isDirectory()
+  } catch {
+    return false
+  }
+}
+
+/**
+ * Validate a directory grant the way the sandbox will: it must exist, be a
+ * directory, and be spelled as its own physical path. `additionalRoot()` in the
+ * sandbox rejects symlinked grants, so accepting one here would only fail later,
+ * on every confined call.
+ * @param target - candidate directory from the folder picker.
+ * @returns the physical path to store.
+ */
+function physicalDirectory(target) {
+  let stats
+  try {
+    stats = statSync(target)
+  } catch {
+    throw fail('missing')
+  }
+  if (!stats.isDirectory()) throw fail('notDirectory')
+  const physical = realpathSync(target)
+  if (physical !== resolvePath(target)) throw fail('symlink')
+  return physical
+}
+
+/**
+ * The durable per-workspace folder lists plus their write path.
+ * @param ctx - plugin context, used for diagnostics only.
+ */
+function createStore(ctx) {
+  const file = join(dshHome(), 'extra-folders.json')
+  let workspaces = read()
+
+  function read() {
+    /** The pre-rename state file, read when the current one does not exist. */
+    const legacyFile = join(dshHome(), 'workspace-extra-folders.json')
+    for (const candidate of [file, legacyFile]) {
+      try {
+        const parsed = JSON.parse(readFileSync(candidate, 'utf8'))
+        const source = parsed?.version === STATE_VERSION && typeof parsed?.workspaces === 'object' && parsed.workspaces !== null
+          ? parsed.workspaces
+          : {}
+        const result = {}
+        for (const [workspace, list] of Object.entries(source)) {
+          if (workspace === '' || !Array.isArray(list)) continue
+          const folders = [...new Set(list.filter((entry) => typeof entry === 'string' && entry !== ''))]
+          if (folders.length > 0) result[workspace] = folders
+        }
+        return result
+      } catch (error) {
+        if (error?.code !== 'ENOENT') ctx.logger?.warn?.(`dsh-extra-folders: cannot read ${candidate}: ${String(error)}`)
+      }
+    }
+    return {}
+  }
+
+  async function persist() {
+    await mkdir(dirname(file), { recursive: true })
+    const temporary = `${file}.${process.pid}.tmp`
+    await writeFile(temporary, `${JSON.stringify({ version: STATE_VERSION, workspaces }, null, 2)}\n`, 'utf8')
+    await rename(temporary, file)
+  }
+
+  const foldersFor = (workspace) => (Array.isArray(workspaces[workspace]) ? [...workspaces[workspace]] : [])
+
+  return {
+    list: foldersFor,
+    existing: (workspace) => foldersFor(workspace).filter(isDirectory),
+    missing: (workspace) => foldersFor(workspace).filter((folder) => !isDirectory(folder)),
+    async add(workspace, target) {
+      const physical = physicalDirectory(target)
+      if (physical === workspace) throw fail('self')
+      const current = foldersFor(workspace)
+      if (current.includes(physical)) throw fail('duplicate')
+      workspaces = { ...workspaces, [workspace]: [...current, physical] }
+      await persist()
+      return physical
+    },
+    async remove(workspace, target) {
+      const absolute = canonical(target)
+      const current = foldersFor(workspace)
+      const index = current.indexOf(absolute) !== -1 ? current.indexOf(absolute) : current.indexOf(target)
+      if (index === -1) throw fail('unknown')
+      const next = current.filter((_, position) => position !== index)
+      const updated = { ...workspaces }
+      if (next.length === 0) delete updated[workspace]
+      else updated[workspace] = next
+      workspaces = updated
+      await persist()
+      return absolute
+    },
+    count: () => Object.keys(workspaces).length,
+    stateFile: file
+  }
+}
+
+/** One workspace's attached folders, plus the ones whose directory vanished. */
+function summarize(store, workspace) {
+  return { workspace, folders: store.list(workspace), missing: store.missing(workspace) }
+}
+
+/**
+ * Extend the shared sandbox policy per call. Every enforcing family (filesystem
+ * fence, one-shot bash, terminal) resolves its policy through this one service,
+ * so this wrapper is the whole grant: folders are merged into
+ * `additionalWritableRoots` only for a Session whose immutable cwd is that
+ * workspace, and only while the folders still exist on disk.
+ * @param policy - the mounted `sandboxPolicy` service.
+ * @param existing - folders that currently exist for one canonical workspace.
+ * @returns a disposer restoring the original method.
+ */
+function installGrant(policy, existing) {
+  if (policy === null || typeof policy !== 'object' || typeof policy.resolve !== 'function') return () => {}
+  const original = policy.resolve
+  const ownDescriptor = Object.getOwnPropertyDescriptor(policy, 'resolve')
+  const resolveWithFolders = function resolveWithWorkspaceFolders(request = {}) {
+    const resolved = original.call(this, request)
+    const cwd = request?.session?.header?.cwd
+    if (typeof cwd !== 'string' || cwd === '') return resolved
+    const folders = existing(canonical(cwd))
+    if (folders.length === 0) return resolved
+    const configured = resolved.additionalWritableRoots ?? []
+    const extras = folders.filter((folder) => !configured.includes(folder))
+    if (extras.length === 0) return resolved
+    return { ...resolved, additionalWritableRoots: Object.freeze([...configured, ...extras]) }
+  }
+  policy.resolve = resolveWithFolders
+  return () => {
+    if (policy.resolve !== resolveWithFolders) return
+    if (ownDescriptor !== undefined) Object.defineProperty(policy, 'resolve', ownDescriptor)
+    else delete policy.resolve
+  }
+}
+
+/** Whether a path is a workspace the sidebar lists (tolerant of a missing registry). */
+function isRegisteredWorkspace(ctx, workspace) {
+  const registry = ctx.get('workspaceRegistry')
+  if (registry === undefined || typeof registry.list !== 'function') return true
+  try {
+    const wanted = canonical(workspace)
+    return registry.list().some((entry) => canonical(entry.path) === wanted)
+  } catch {
+    return true
+  }
+}
+
+/** Read one bounded JSON body. */
+function readJsonBody(request) {
+  return new Promise((resolve, reject) => {
+    const chunks = []
+    let size = 0
+    request.on('data', (chunk) => {
+      size += chunk.length
+      if (size > MAX_BODY_BYTES) {
+        reject(fail('tooLarge'))
+        request.destroy()
+        return
+      }
+      chunks.push(chunk)
+    })
+    request.on('end', () => {
+      const text = Buffer.concat(chunks).toString('utf8').trim()
+      if (text === '') {
+        resolve({})
+        return
+      }
+      try {
+        resolve(JSON.parse(text))
+      } catch {
+        reject(fail('badBody'))
+      }
+    })
+    request.on('error', reject)
+  })
+}
+
+/** Write one JSON response. */
+function sendJson(response, status, value) {
+  const body = JSON.stringify(value)
+  response.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'content-length': Buffer.byteLength(body),
+    'cache-control': 'no-store'
+  })
+  response.end(body)
+}
+
+/**
+ * Register every Host contribution.
+ * @param ctx - Host plugin context.
+ */
+export function apply(ctx) {
+  const store = createStore(ctx)
+
+  // 0.2.2-alpha.2 added `additionalWritableRoots`; earlier lines cannot honor an extra
+  // root at all. Say so instead of installing a menu that grants nothing.
+  const policy = ctx.get('sandboxPolicy')
+  if (policy !== undefined && !('additionalWritableRoots' in policy)) {
+    ctx.logger?.error?.(
+      'dsh-extra-folders: this DSH build has no additionalWritableRoots on its sandbox policy, '
+      + 'so extra folders cannot be granted. Requires DSH >= 0.2.2-alpha.3.'
+    )
+    return
+  }
+
+  ctx.inject(['sandboxPolicy'], (scope) => {
+    scope.effect(() => installGrant(scope.sandboxPolicy, (workspace) => store.existing(workspace)), 'dsh-extra-folders: sandbox grant')
+  })
+
+  ctx.inject(['webServer'], (scope) => {
+    scope.effect(() => scope.webServer.register({
+      kind: 'prefix',
+      path: ROUTE,
+      handler: (request, response) => {
+        void (async () => {
+          const connection = ctx.get('connection')
+          if (connection !== undefined && typeof connection.admit === 'function') {
+            const admission = connection.admit(request)
+            if (admission !== null && typeof admission === 'object' && 'rejection' in admission) {
+              response.writeHead(admission.rejection)
+              response.end(admission.rejection === 401 ? 'unauthorized' : 'forbidden')
+              return
+            }
+          }
+          if (request.method !== 'POST') {
+            sendJson(response, 405, { error: 'unknown' })
+            return
+          }
+          let payload
+          try {
+            payload = await readJsonBody(request)
+          } catch (error) {
+            sendJson(response, 400, { error: error?.code ?? 'unknown' })
+            return
+          }
+          const endpoint = new URL(request.url ?? '/', 'http://127.0.0.1').pathname.slice(ROUTE.length + 1)
+          const workspaceInput = typeof payload?.workspace === 'string' ? payload.workspace : ''
+          if (workspaceInput === '' || !isAbsolute(workspaceInput)) {
+            sendJson(response, 400, { error: 'notWorkspace' })
+            return
+          }
+          const workspace = canonical(workspaceInput)
+          if (!isDirectory(workspace) || !isRegisteredWorkspace(ctx, workspace)) {
+            sendJson(response, 409, { error: 'notWorkspace' })
+            return
+          }
+          try {
+            if (endpoint === 'list') {
+              sendJson(response, 200, summarize(store, workspace))
+              return
+            }
+            if (endpoint !== 'add' && endpoint !== 'remove') {
+              sendJson(response, 404, { error: 'unknown' })
+              return
+            }
+            const target = typeof payload?.path === 'string' ? payload.path.trim() : ''
+            if (target === '') {
+              sendJson(response, 400, { error: 'missing' })
+              return
+            }
+            if (endpoint === 'add') {
+              const added = await store.add(workspace, target)
+              sendJson(response, 200, { ...summarize(store, workspace), added })
+              return
+            }
+            const removed = await store.remove(workspace, target)
+            sendJson(response, 200, { ...summarize(store, workspace), removed })
+          } catch (error) {
+            sendJson(response, 400, { error: error?.code ?? 'unknown' })
+          }
+        })()
+      }
+    }), 'dsh-extra-folders: loopback route')
+  })
+
+  ctx.logger?.info?.(`dsh-extra-folders: ${store.count()} workspace(s) carry attached folders (${store.stateFile})`)
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Workspace folders",
+    "description": "A workspace has one writable directory by default, so writing anywhere else asks for approval again and again. This plugin adds more directories from the workspace row's menu. Attached directories are writable for that workspace's sessions by both the file tools and the shell. Sessions in other workspaces don't get that grant."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "工作区多文件夹",
+    "description": "工作区默认只有一个可写目录，写到别处要一次次点授权。这个插件让你在工作区行的菜单里多加几个目录，加进来的目录对这个工作区的会话可写，文件工具和 bash 都认。别的工作区的会话没有这份授权。"
+  }
+}

package/package.json

@@ -1,6 +1,58 @@
 {
   "name": "dsh-extra-folders",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Attach extra writable folders to one workspace, granted per session, not profile-wide.",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "workspace",
+    "multi-root",
+    "folders",
+    "writable",
+    "sandbox",
+    "permissions"
+  ],
+  "author": "kingOfSoySauce",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kingOfSoySauce/dsh-extra-folders.git"
+  },
+  "homepage": "https://github.com/kingOfSoySauce/dsh-extra-folders#readme",
+  "bugs": {
+    "url": "https://github.com/kingOfSoySauce/dsh-extra-folders/issues"
+  },
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "assets/approval.png",
+    "assets/menu.png",
+    "assets/dialog.png",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "dsh": ">=0.2.2-alpha.3 <0.3"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true
+    }
+  }
+}