编者按

nailing10086-zx/dsh-custom-ui

右侧文件树侧栏,可打开工作区文件;并在输入框状态行显示 DeepSeek 账户余额。

这是一个 DeepSeek Harness(DSH)插件。本站汇总其 GitHub README、安装信息、维护状态与公开安全信号。

上游未提供中文 README,当前展示仓库原始内容。

dsh-custom-ui

Custom UI plugin for DeepSeek Harness Web.

Adds a right-side file-tree sidebar, workspace file open, and a DeepSeek account balance meter in the composer stats line.

Features

  • Balance meter — shows the DeepSeek account balance in the composer stats line. The API key is resolved server-side only through the credentials seam (credentialRef from @deepseek-ai/dsh-credentials) — it never crosses the wire to the browser.
  • File tree sidebar — a right-side workspace file tree for quick navigation, with collapse/expand and a floating toggle button.
  • Workspace file open — open files/folders with the system default application (workspace-rooted; path traversal guarded).

Install

dsh plugin --profile web add dsh-custom-ui

Then restart dsh web. If installed from a local checkout instead, link it via pnpm link (or "dsh-custom-ui": "link:<path>" in the profile's package.json) and rebuild.

Requirements

  • DeepSeek Harness Web (dsh web)
  • DEEPSEEK_API_KEY configured in the harness credentials (for the balance meter; the file tree works without it)

Host routes

RoutePurpose
GET /api/custom-ui/balanceDeepSeek account balance (via DEEPSEEK_API_KEY through the credentials seam)
GET /api/custom-ui/fs/listDirectory listing (workspace-rooted)
GET /api/custom-ui/fs/openOpen a file/folder with the system default

Development

# host half (server routes)
node lib/index.js            # or run through dsh plugin dev flow

# client half (browser UI) — HMR while `pnpm run dev:web` runs in the DSH checkout
# client-plugin changes reload without a refresh only while the dev:web watcher is running

Build the client bundle with your DSH toolchain, then restart dsh web.

Security

  • The API key is resolved server-side only; the browser client never receives it.
  • File routes are workspace-rooted: resolve() + prefix check against the workspace root blocks path traversal.
  • Review lib/index.js and lib/client.js before installing if you did not clone from the official repo.

License

MIT — see LICENSE.

REPOSITORY SIGNALS

安全与安装证据

该分数只基于公开仓库元数据与本站登记的安装证据,不等同于代码安全审计。

来源可追溯

来自公开插件目录,并链接到公开 GitHub 仓库。

许可证

仓库声明 MIT 许可证。

维护活跃度

最近 180 天内有代码更新。

安装证据

尚未登记可复验的精确安装元数据,请按仓库说明手动检查。

安装生命周期脚本

已检查的包元数据未声明安装生命周期脚本。