iamsee123/dsh-web-terminal
Project Overview项目介绍
dsh-web-terminal is a local-terminal plugin built specifically for the DeepSeek Harness (DSH) web GUI, mounted through the cordis plugin and bundle manifest as a dual-face patch so no DSH source changes are required. The host half (lib/index.js) owns node-pty PTY sessions, a WebSocket upgrade at /api/dsh-terminal/terminal, an info route at /api/dsh-terminal/info, a terminal settings namespace, and a system-prompt announcement; the browser half (lib/client.js) injects a sidebar Terminal entry and renders a multi-tab xterm.js panel whose tabs stream I/O over the wire protocol defined in src/protocol.ts (input/resize from client, ready/output/exit from host).
Typical workflow begins by editing ~/.dsh/profiles/web/pnpm-workspace.yaml to permit esbuild and node-pty build scripts, then linking the package with pnpm add dsh-web-terminal@link:/path/to/dsh-web-terminal, appending dsh-web-terminal to dsh.profile.bundles in package.json, and restarting DSH web; alternatively a manual - insert: id: terminal row can be placed in ~/.dsh/profiles/web/cordis.patch.yml. After reload, users click the sidebar Terminal entry, open a new tab, configure shell (/bin/zsh) and cwd per session, and run interactive programs such as vim, top, or htop directly inside the GUI.
Dependencies and limits are concrete: client externals must stay limited to react family plus @deepseek-ai/* modules, while @xterm/* is bundled because the ModuleLoader has no CSS loader; the absolute [data-dsh-terminal-view] container needs its .dshTermView child at height: 100% to keep the flex chain from collapsing; the prebuilt spawn-helper binary may lose its executable bit and is repaired by pnpm run fix:spawn-helper. Every route enforces a loopback-only trust fence, yet the terminal executes commands with host-user privileges equivalent to direct shell access, and node-pty spawn is blocked inside the DSH file sandbox. License: MIT.
dsh-web-terminal 是一款专为 DeepSeek Harness(DSH) Web 图形界面设计的本地终端插件,通过 cordis 插件和 bundle 清单(双端补丁)热插拔接入,无需修改 DSH 源码。它在侧边栏注入 "Terminal" 入口,呈现一个基于 xterm.js 的多标签终端面板;每个标签页在后端通过 node-pty 启动真实 PTY 进程,并通过 WebSocket 路由 /api/dsh-terminal/terminal 双向流式传输输入、输出与调整事件,使 vim、top、htop、Ctrl-C 等交互式程序在浏览器中正常工作。
典型工作流是先在 ~/.dsh/profiles/web 中通过 pnpm add dsh-web-terminal@link:... 链接本地代码,再把 dsh-web-terminal 加入 dsh.profile.bundles,或手动在 cordis.patch.yml 中插入 id: terminal 行,重启 DSH Web 后点击侧边栏 Terminal 即可新建标签执行命令。它面向需要在 DSH Web 界面内直接调试、运行脚本或维护工作目录而不想切换终端窗口的 DSH 用户与运维人员。
依赖与限制方面,需要在 pnpm-workspace.yaml 中为 esbuild 与 node-pty 开启 build 脚本,客户端仅允许 react 家族与 @deepseek-ai/* 保持 external,@xterm/* 必须打包;node-pty 的 spawn-helper 可能丢失可执行位,可用 pnpm run fix:spawn-helper 修复。所有路由强制 loopback 同源检查,终端以宿主进程用户权限运行,等同于直接 shell 权限,使用前需注意风险。License: MIT。
请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】,检查通过再动手。
插件:dsh-web-terminal(iamsee123/dsh-web-terminal)
仓库:https://github.com/iamsee123/dsh-web-terminal
本站详情页:https://www.yhbd.top/plugins/iamsee123-dsh-web-terminal/
本站登记:类型 plugin · 归类 原生 DSH 插件 · 许可证 MIT · ⭐ 2 · 最近提交 2026-08-16 · 主语言 TypeScript
按下面顺序执行,每步先把结论告诉我,再进入下一步:
【1 兼容性检查】
① 我这边:DSH 版本、Node 版本、操作系统、当前 profile(web / desktop)。
② 读它的 README、package.json、插件 manifest,列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对,结论只写「满足 / 不满足 / 未知」三种;不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突:命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。
【2 安全性检查】
① 仓库可信度:和上面「本站登记」是否一致;star / fork 数、创建时间、最近提交,是否归档或长期停更。
② 安装脚本:逐行看 package.json 的 preinstall / install / postinstall,以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名,立刻停下来告诉我,不要继续装。
③ 依赖:列出新增依赖,标出无人维护、或与知名包拼写近似的可疑包(typosquatting)。
④ 权限与副作用:它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限(filesystem / network / shell / clipboard 等),以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限,或权限明显超出功能所需,先停下来问我。
【3 安装】
上面两步没有「不满足」和「高危项」时才执行;用官方推荐方式安装,不要自行提权。
【4 汇报】
用表格输出:检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜,也不要替我决定。
Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH:它会先核对兼容性与安全性(逐条给「满足 / 不满足 / 未知」),确认没问题再安装,有高危项会停下来问你。框内可滚动,复制到的是完整提示词;安装命令不一定准确,发给 DSH 更稳。
- Only 2 stars - very few users, little community feedback星标只有 2,几乎没人在用,遇到问题缺少社区反馈
DSH walks through these 9 checksDSH 会逐条核对这 9 项
Compatibility兼容性
- DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
- External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时(Electron / Python / Docker 等)是否齐备
- Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突:命令名、skill / tool 重名、端口占用、重复 MCP 注册
Security安全性
- Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致,是否归档或长期停更
- Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
- curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
- Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
- Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需(filesystem / network / shell / clipboard)
- Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限,以及卸载与回滚方式
Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照,不能替代安全审计。
Or use CLI install (for developers)或使用命令行安装(适合开发者)
CLI Install命令行安装
dsh plugin --profile web add github:iamsee123/dsh-web-terminal
把 iamsee123/dsh-web-terminal 加入你的 DSH 配置(web profile)即可启用。
READMEREADME
dsh-web-terminal
A local terminal plugin for the DeepSeek Harness web GUI. Adds a sidebar Terminal entry with a multi-tab xterm.js panel; every tab runs a real PTY shell on the host process via node-pty, streamed over a WebSocket route.
Features:
- Real pseudo-terminal shells — interactive programs (
vim,top,htop), Ctrl-C, resize all work - Multi-tab terminal panel with new / close / disconnect / reconnect / clear controls
- Auto-fit on panel open, window resize, and container changes
- Shell and working directory configurable (settings panel or patch yaml)
- Loopback-only trust fence on every route
- Hot-pluggable: no dsh source changes, mounts through the web profile bundle list (same dual-face plugin pattern as dsh-ssh)
Architecture
| Half | Entry | Responsibility |
|---|---|---|
| host (node) | lib/index.js (src/index.ts) |
node-pty shell sessions, /api/dsh-terminal/info route, /api/dsh-terminal/terminal WebSocket upgrade, system-prompt announcement, settings namespace (shell/cwd) |
| client (browser) | lib/client.js (src/client/index.ts) |
sidebar Terminal entry (DOM injection, self-healing), multi-tab terminal panel (React + xterm.js) |
Wire protocol (src/protocol.ts):
- client → host:
{type:"input",data},{type:"resize",cols,rows} - host → client:
{type:"ready",shell},{type:"output",data},{type:"exit",code,error?}
Security: all routes carry a loopback-only trust fence (same-origin + 127.0.0.1/localhost checks). The terminal executes commands with the host user's privileges — equivalent to direct shell access.
Install into the web profile
Option A — bundle list (recommended):
# 1) one-time: allow node-pty build scripts in ~/.dsh/profiles/web/pnpm-workspace.yaml
# allowBuilds:
# esbuild: true
# node-pty: true
# 2) add the dependency (adjust the path to your checkout)
cd ~/.dsh/profiles/web
pnpm add dsh-web-terminal@link:/path/to/dsh-web-terminal
# 3) append "dsh-web-terminal" to dsh.profile.bundles in package.json
# (the bundle's cordis.patch.yml inserts the id=terminal plugin row)
# 4) restart dsh web
Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要,完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →
esengine/DeepSeek-Reasonix
strukto-ai/mirage
chuspeeism/dashi-taskboard
Aisland-SJL/dsh-worktable
ccch1mneyyy/working-activity
zhoushoujianwork/easyeda-agent
pulseaiclub/phi
Ikalus1988/MisakaNet