dsh-workspace-write-plus

Running DeepSeek Harness on Windows hits a very specific wall: the official Workspace-Write permission tier wraps every child process in a restricted token, but Git for Windows and MSYS rely on memory-mapped files and named pipes that simply will not function under that restriction. Even git --version fails, let alone clone or push. Git is not broken; the sandbox and MSYS are incompatible.

This plugin adds a fourth tier to the permission selector: Workspace-Write++. The idea is deliberately restrained. File writes remain confined to the workspace, so you do not hand the model full disk access. But any binary that matches the allow-list (bash and pwsh by default) is exempted from the process sandbox and gets a full token, so MSYS can open the memory mappings and pipes it needs. The allow-list lives in Settings, one entry per line, and supports both bare file-name matching and glob-style path patterns for precise control. Edits take effect immediately.

It is built for Windows users who run DSH day-to-day, need Git and Shell scripts to work reliably, and want to keep the model contained without granting it complete filesystem access. Workspace-Write++ is not a shortcut to Full Access; it simply splits the sandbox granularity a half-step finer: the file boundary stays, and only the specific binaries you name are let out of the process sandbox.