DeepSeek Harness PluginManifest Valid

dsh-multi-tenant-projects

A DeepSeek Harness web plugin for project-scoped users, symlinked workspaces, login gating, and session-focused UI restrictions.

UI & ProductivityDeveloper ToolsBrowser & WebSecurity & Policy

10GitHub Stars2ForksUpdated2026-08-16

Source

Install

$ dsh plugin --profile web add github:king-bcolor/dsh-multi-tenant-projects

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded

dsh-multi-tenant-projects adds a Projects & Users administration experience to a single DSH web deployment. It binds projects to workspace directories, creates per-user symlinked workspaces, scopes normal-user session views by working directory, and provides login, workspace-write locking, and prompt-level workspace rules.

Key Capabilities

Creates projects bound to existing or auto-created workspace directories.
Creates project-scoped users with password login and token TTL/invalidation behavior.
Builds per-user workspaces whose entries are symlinks to project files.
Provides a Settings-based Projects & Users admin console.
Limits normal-user UI views to their own cwd-bucketed sessions and workspace.
Pins normal users to workspace-write mode and refuses permission switching.
Adds system-prompt and AGENTS.md workspace guard rules.

Useful For

Sharing one DSH web deployment among trusted teammates with separate project/user workspaces.
Administering project-specific users and handing off one-shot login credentials.
Reducing accidental cross-workspace access in collaborative DSH usage.

Who It Fits

DSH web administrators
Small teams sharing a DSH deployment
Developers organizing work by project and user workspace

Documented Limitations

The repository explicitly describes isolation as a soft boundary, not a hard security perimeter.
cwd filtering is a query projection and can be bypassed by a determined user.
Browser tokens may be forged by a technical user, and agent isolation is prompt-level.
The design has a single-admin model and no token-revocation UI; disabling a user invalidates that user's tokens.
Client-side changes require restarting dsh web to reach the browser.

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 2 runtime, 25 development, 5 peer, and 0 optional dependencies.

info

Dsh Bundle Declared

package.json declares DSH bundle metadata.

info

License Not Declared

GitHub did not report an SPDX license for this repository snapshot.

low

Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info

Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository: king-bcolor/dsh-multi-tenant-projects
Registry source: GitHub · dsh-plugin topic
Registry classification: Plugin
Source checked: 77dfd9e · 2026-08-26

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.