king-bcolor/dsh-multi-tenant-projects
dsh-multi-tenant-projects adds multi-tenant Projects and Users to a single DeepSeek Harness instance: real workspace directories are bound to projects, each user gets a symlinked per-user workspace, and the Web UI is gated behind password login so several people can share one deployment without seeing each other's sessions or files, with a permission lock that pins normal-user sessions to workspace-write.
dsh-multi-tenant-projects adds multi-tenant Projects and Users to a single DeepSeek Harness instance so several people can share one deployment without seeing each other's sessions or files. Projects are bound to real workspace directories (auto-created or picked via the host's directory picker); each one-shot user logs in with a password and receives Bearer tokens with sha256 fingerprints, a TTL and instant invalidation; same-name users across projects are disambiguated by a <project>/<user> key; each user gets a real per-user workspace directory whose entries are symlinks to the project's files, re-syncable by an admin. A full-frame login gate guards the UI, normal users get a restricted UI (only their own cwd-bucketed sessions, settings and workspace switcher shadowed away, their workspace auto-connected), every normal-user session is pinned to workspace-write with /permission switching refused, and a two-layer system-prompt guard plus a per-workspace AGENTS.md baseline keep sessions inside their workspace.
Install
dsh plugin --profile web add github:king-bcolor/dsh-multi-tenant-projectsCopied verbatim from the README's install block; the README also documents installing a local checkout with dsh plugin --profile web add link:$(pwd).
Compatibility
A DSH web plugin. The README states plainly that the isolation is a soft boundary between trusted-ish teammates, not a hard security perimeter - the cwd filter is a query projection, browser tokens can be forged by a technical user, and the agent-layer isolation is prompt-level - and recommends a real boundary (reverse-proxy auth, VPN) in front of anything exposed to the internet. English README with a Simplified Chinese translation.
Details
- Repo: king-bcolor/dsh-multi-tenant-projects
- Category: Workflow & Automation
- Stars: 26
- Version: GitHub repo king-bcolor/dsh-multi-tenant-projects (26★); installed from GitHub (no npm package is documented; v-prefixed GitHub tags are referenced for pinned installs).
Alternatives
940842546/dsh-permissions · adithya-hmt/fullstack-expert · alib8b8/dsh-plugin-aflare