CooStack/dsh-code-review

Name: CooStack/dsh-code-review
Author: CooStack

Plugin插件 Native原生 ⭐ 7 GPL-3.0 Approval & Security审批与安全 Dev Workflow开发与代码工作流 UI & Themes界面与主题

适用于 DeepSeek Harness 的 Codex 风格代码审查侧边栏及安全单轮撤销插件

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

This is a native community-built web plugin for DeepSeek Harness (DSH), built exclusively to support turn-by-turn review of code changes made by DSH agents. To install the prebuilt version from GitHub, you can run the command dsh plugin --profile web add github:dsh-plugins/dsh-code-review#main in your terminal, then restart your DSH Web profile to complete the plugin installation. For local development, you can clone the repository and install it via dsh plugin --profile web add file:./dsh-code-review, and remove it later with the remove subcommand if needed. It natively integrates with DSH’s conversation system, utility slots, settings system and UI primitives to avoid replacing core DSH components.

After installation and restarting your DSH Web profile, you can access the review feature directly from the conversation header after an agent completes a turn with code changes. All completed turns with recorded changes will show a “Changes” utility entry in the header, which you can click to open the review sidebar. You can search the workspace-relative file tree, inspect unified diffs with syntax highlighting, jump between changed files, or open the source file directly in your workspace. The divider between the diff and file tree is draggable, and your size preference is saved for future sessions.

This plugin is licensed under the GPL-3.0-only open source license, and does not include any telemetry, credential flow, or background network service, so it does not send any user data to external servers. It stores reversible change snapshots under the ${DSH_HOME:-~/.dsh}/code-review/ directory on your local machine, and its undo feature follows a conservative safety policy to avoid overwriting newer work. Undo will not run while an agent is active, preflights every file against recorded content, and rejects conflicts instead of causing accidental data loss. You can customize syntax colors for light and dark themes, and adjust font settings via the DSH plugin settings panel.

这是一个专为 DeepSeek Harness (DSH) 开发的社区原生代码审查插件，用于逐回合审查代码变更，支持Codex风格变更摘要、可调整大小的差异侧边栏、工作区相对文件树、语法高亮和安全撤销功能。你可以通过dsh命令行工具从GitHub源完成安装，安装后需要重启DSH Web配置文件才能让插件生效，本地开发版本也可以通过指定本地文件路径添加安装。

插件面向需要在DSH对话中逐轮审查代码变更的开发者，完成代理任务后，你可以在对话头部找到「变更」入口打开审查面板，也可以从对话摘要节点直接点击变更文件打开侧边栏。你可以在面板内搜索文件树、查看统一差异对比，也可以直接打开工作区中的源文件，侧边栏大小可拖拽调整，布局会根据窗口宽度自动适配。

本插件采用GPL-3.0许可证开源，不包含遥测、凭据流转或后台网络服务，不会收集用户隐私数据。撤销功能采用保守安全策略，仅在代理空闲时执行操作，会对文件内容预校验避免覆盖新修改，变更快照存储在DSH的本地数据目录中。你可以在DSH设置面板中自定义字体、明暗主题语法配色，所有配置都会持久保存。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】，检查通过再动手。

插件：dsh-code-review（CooStack/dsh-code-review）
仓库：https://github.com/CooStack/dsh-code-review
本站详情页：https://www.yhbd.top/plugins/coostack-dsh-code-review/
本站登记：类型 plugin · 归类 原生 DSH 插件 · 许可证 GPL-3.0 · ⭐ 7 · 最近提交 2026-09-11 · 主语言 JavaScript

按下面顺序执行，每步先把结论告诉我，再进入下一步：

【1 兼容性检查】
① 我这边：DSH 版本、Node 版本、操作系统、当前 profile（web / desktop）。
② 读它的 README、package.json、插件 manifest，列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对，结论只写「满足 / 不满足 / 未知」三种；不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突：命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。

【2 安全性检查】
① 仓库可信度：和上面「本站登记」是否一致；star / fork 数、创建时间、最近提交，是否归档或长期停更。
② 安装脚本：逐行看 package.json 的 preinstall / install / postinstall，以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名，立刻停下来告诉我，不要继续装。
③ 依赖：列出新增依赖，标出无人维护、或与知名包拼写近似的可疑包（typosquatting）。
④ 权限与副作用：它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限（filesystem / network / shell / clipboard 等），以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限，或权限明显超出功能所需，先停下来问我。

【3 安装】
上面两步没有「不满足」和「高危项」时才执行；用官方推荐方式安装，不要自行提权。

【4 汇报】
用表格输出：检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜，也不要替我决定。

Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH：它会先核对兼容性与安全性（逐条给「满足 / 不满足 / 未知」），确认没问题再安装，有高危项会停下来问你。框内可滚动，复制到的是完整提示词；安装命令不一定准确，发给 DSH 更稳。

Pre-install check安装前体检Compatibility · Security兼容性 · 安全性 1 warning1 项注意

Only 7 stars - very few users, little community feedback星标只有 7，几乎没人在用，遇到问题缺少社区反馈

DSH walks through these 9 checksDSH 会逐条核对这 9 项

Compatibility兼容性

DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时（Electron / Python / Docker 等）是否齐备
Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突：命令名、skill / tool 重名、端口占用、重复 MCP 注册

Security安全性

Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致，是否归档或长期停更
Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需（filesystem / network / shell / clipboard）
Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限，以及卸载与回滚方式

Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照，不能替代安全审计。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin --profile web add github:dsh-plugins/dsh-code-review#main

把 CooStack/dsh-code-review 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

6.6 KB · 缓存于 2026-09-11 19:40:29 · 6.6 KB

@dsh-plugin/dsh-code-review

A community DeepSeek Harness Web plugin for reviewing code changes turn by turn — Codex-style change summary, resizable diff sidebar, workspace-relative file tree, syntax highlighting, and guarded undo.

English | 简体中文

A community DeepSeek Harness Web plugin for reviewing code changes turn by turn. It adds a Codex-style change summary, a resizable diff sidebar, a workspace-relative file tree, syntax highlighting, and guarded undo for safe iteration in a shared workspace.

This is an independent community plugin. It is not an official DeepSeek product and does not imply DeepSeek endorsement.

dsh-code-review change review sidebar

Highlights

Turn-level review — See added and removed line totals, open a completed turn from the conversation, and jump between changed files without leaving the chat.
Code and file tree together — Inspect the selected unified diff on the left and a searchable, workspace-relative file tree on the right. The inner divider is independently draggable and persisted.
Large, practical sidebar — Resize the review sidebar beyond the shell's former 520px cap. The layout collapses the left navigation when a narrow window needs the space and restores it when the review closes.
Parent and child aggregation — Changes recorded by ordinary subagents and workflow children are projected into the parent review. All agents write to the same workspace immediately; no artificial merge step is introduced.
Syntax-aware diffs — Plugin-owned Shiki highlighting tokenizes complete old and new files before mapping tokens back to diff rows, so multiline comments and strings keep their grammar state.
Light and dark palettes — Configure syntax, diff, gutter, and omitted-line colors separately for light and dark themes.
Font control that does not surprise you — Type to move the best matching font candidate to the top of the menu. A font is applied only after clicking a candidate or pressing Enter. System font families can be loaded on demand through Chromium Local Font Access.
Guarded undo — Undo uses recorded before-and-after snapshots, resolved sandbox policy, filesystem version guards, and exact same-file content chains. Ambiguous, stale, or active-agent changes are refused instead of overwritten.
Native DSH integration — Uses DSH conversation nodes, session utility slots, settings plugin cards, theme events, and the DSH Menu primitive rather than replacing the host shell.

Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要，完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →

渲染基于仓库 CooStack/dsh-code-review 的 README.md。在 GitHub 查看原文 →