
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
dsh-enhance-workspace
Advanced tools
DSH web plugin: enhance the workspace panel with multi-directory (multi-root) workspaces — group several directories as one workspace, pick one when starting a conversation, and edit roots in place.
一个运行在 DeepSeek Harness (DSH) 里的工作区增强插件:把「一个工作区只能放一个目录」升级为「一个工作区可以挂多个目录」(multi-root workspace),并提供管理工作区的界面。
以**标准 Cordis 插件(npm 包)**形式分发,可通过 dsh plugin add 一键安装、重启后依然生效。
~/.dsh/enhance-workspace.json,重启 DSH 后保留。dsh plugin --profile web add git@github.com:yangshen830-eng/dsh-enhance-workspace.git
dsh plugin --profile web add file:/path/to/dsh-enhance-workspace
dsh plugin --profile web add dsh-enhance-workspace
安装后重启 DSH(dsh web --profile web)即可在会话主区看到「工作区」标签页。
dsh-enhance-workspace/
├── lib/
│ ├── index.js # Host 端:多目录工作区注册表 + /enhance-workspace RPC + JSON 持久化
│ ├── registry.js # 纯领域逻辑(注册表),零依赖、可单测
│ └── client.js # Client 端:「工作区」标签页,经 RPC 调用 Host
├── tests/
│ └── registry.test.js # registry 单元测试(node --test)
├── cordis.patch.yml # dsh.bundle.patch:把 Host 端插件行 insert 进 profile
├── package.json # dsh.bundle.patch + dsh.client 声明
├── install/INSTALL.md
├── README.md
└── LICENSE
DSH 浏览器插件由两半组成,通过 npm 包的 dsh 字段声明挂载:
lib/index.js):标准 Cordis 插件,inject: ['connection'],在 apply 里用 ctx.connection.rpc.handle('/enhance-workspace', handler) 暴露私有 JSON RPC(list / create / rename / delete / setRoots)。注册表逻辑在 lib/registry.js,与 DSH 运行时解耦,便于单元测试。lib/client.js):通过 window.__ModuleLoader__.load(...) 注册 conversation.view 标签页,用 connection.rpc.call('/enhance-workspace', ...) 调用 Host。node --test tests/
sidebar.workspaces / conversation.hero.workspace)是 DSH 核心的 single 插槽,由核心的 ui-workspace 独占,独立插件无法再注入第二个实现,因此本插件以「工作区」标签页承载同等管理能力。MIT
FAQs
DSH web plugin: enhance the workspace panel with multi-directory (multi-root) workspaces — group several directories as one workspace, pick one when starting a conversation, and edit roots in place.
The npm package dsh-enhance-workspace receives a total of 0 weekly downloads. As such, dsh-enhance-workspace popularity was classified as not popular.
We found that dsh-enhance-workspace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.