dsh-workspace-scope-selection

Usage

1. Open a conversation, click the permission chip in the composer (or run /permission), and pick Selected Workspace Write.
2. The dock bar appears above the composer. Click Edit scope.
3. Walk the directory tree — the tree starts at the session's workspace, and the breadcrumbs let you navigate up to any parent, so directories outside the workspace can be granted too.
4. Check the directories the agent may write to. Unchecking a directory removes it from the selection; a directory that is only covered by a checked ancestor shows a "via parent" mark — uncheck the ancestor to remove the whole subtree.
5. Done. The agent's next write to a selected directory succeeds without approval; anything outside the workspace and the selection still needs an approval-gated escalation, exactly like workspace-write.

The selection persists per session. Switching the session away from Selected Workspace Write keeps the selection stored, so returning to the option restores it.