Locked read-only sessions for DeepSeek Harness — start without choosing a workspace; once chosen, the session stays read-only forever (approval-gated file reads, no shell).
Install dsh-no-workspace
dsh plugin --profile web add github:Syhz-666/dsh-no-workspace