deepseek-harness-workbench-plugin

一句话定位

为 DeepSeek Harness Web UI 增加一个三栏工作台：在不打断对话流的前提下，给浏览器端补上本地代码编辑器、伪终端、文件与 Git 面板、API 用量显示，以及一组会插入到下一步模型动作的斜杠命令。

核心能力

• 把对话页变成三栏布局：左侧对话、中间编辑器与终端、右侧文件 / Git / 用量 / Ultra Slash 面板，可拖动、折叠、记忆列宽
• 基于 CodeMirror 6 的代码编辑器，支持多语言高亮、Plain/Emacs/Vim 键位、Markdown 预览（含 Mermaid）、图片与表格预览、Git diff 查看
• 基于 xterm.js + node-pty 的本地终端，提供多标签、AI 命令辅助（Alt+I）、可配置的危险命令黑名单
• 文件树浏览、新建、重命名、删除、用本机编辑器（Cursor、VS Code 等已安装的）打开
• Git 工作面板：状态、暂存、提交（含流式 AI 提交说明）、分支切换与合并、fetch/pull/push（带安全检查）
• 用量面板：拉取官方 API 余额、累加本机已消耗金额、显示当前会话 token 用量，可钉在左侧 Settings 上方
• 一组不打断当前轮的斜杠命令：内置 /steer /new /skill /docs，并支持最多 40 条自定义 /name 快捷指令
• 自定义通知音效上传、密钥/Token 在界面与错误中的自动脱敏、中英文 UI

技术实现

• 语言: TypeScript（编译为 ES Module）
• 关键依赖: @deepseek-ai/cordis、@deepseek-ai/dsh-tools、@codemirror/*（编辑器全家桶）、@xterm/xterm + node-pty（本地终端）、@replit/codemirror-vim（Vim 键位）
• 架构模式: Cordis 插件，分宿主半（Node 侧，提供 HTTP/工具/命令注册）与浏览器半（React 客户端）双产物，通过 dsh.bundle.patch 在 dsh-web-app 之后插入节点；浏览器侧按 dsh.client.platform=web 注入到 5 个官方客户端运行时
• 入口文件: lib/index.js（宿主）+ lib/client.js（浏览器），主入口 apply(ctx) 注册 Git HTTP、5 个模型工具、Ultra Slash 命令与通知音服务

适用场景

希望在 DeepSeek Harness 网页里直接改代码、看 diff、跑命令、查用量，而不必切到本地 IDE 或额外终端的用户。尤其适合一边跟模型协作一边需要频繁操作文件与 Git 的开发者：编辑器里的选中可一键发送到聊天框，终端里的输出或最近一次返回也可作为引用 chip 投递到下一条消息。

前置依赖与兼容性

安装方式

dsh plugin --profile web add github:loadingvx/deepseek-harness-workbench-plugin

配置项

本插件无需额外配置。

可选环境变量（用于调试或迁移）：

• DSH_HOME：覆盖默认的 ~/.dsh 目录，影响 Ultra Slash 自定义命令与通知音存储位置
• DSH_WORKBENCH_DISABLE_PTY=1：强制关闭终端探测
• DSH_WORKBENCH_SKIP_PTY_PROBE=1：跳过 node-pty 启动前的可用性自检

常见问题

Q: 这个插件做什么？

A: 在 DeepSeek Harness 网页版右侧打开一个三栏工作台，提供代码编辑器（带语法高亮与多键位）、本地终端、文件树、Git 操作、API 用量面板，以及一组不在对话中途打断模型的斜杠命令（/steer、/new、/skill、/docs 和自定义命令）。

Q: 是否需要额外的配置？

A: 装上后即可使用。编辑器、终端和 Git 面板的设置会随网页保存到本地；自定义斜杠命令存到 ~/.dsh/ultra-slash/commands.json；自定义通知音存到 ~/.dsh/workbench-sounds/。可选环境变量 DSH_HOME 可改变这些文件的位置；DSH_WORKBENCH_DISABLE_PTY=1 会强制关闭终端，DSH_WORKBENCH_SKIP_PTY_PROBE=1 会跳过终端启动前的自检。

Q: 终端支持哪些 shell？

A: macOS/Linux 端会按 $SHELL 和默认路径探测 bash、zsh、sh、dash；Windows 优先使用 Git Bash，缺失时回退到系统 PowerShell。fish、tcsh、csh、ksh、mksh、cmd 和 BusyBox-as-ash 还没做覆盖测试，遇到这些 $SHELL 会被忽略并回退到已测试的 shell。

Q: 模型能直接操作 Git 吗？

A: 可以调用 5 个只读工具：git_status、git_diff、git_log、git_branch（list/switch）和 git_commit（需用户授权）。提交只能基于已暂存的内容，且不支持删除、reset --hard、clean、push 和 amend。

Q: 怎么卸载？

A: 用对应的 dsh plugin 命令移除插件并重启 dsh web 即可。本插件产生的本地文件（自定义斜杠命令、自定义通知音、列宽等设置）会保留在 ~/.dsh/ 下，删除插件不会自动清理。

Q: 装上后没看到工作台？

A: 打开一个会话（Conversation），工作台会自动出现在右侧；如果被关闭，可在头部点 Workbench 按钮重新显示。新会话无须先发消息即可看到。

上手难度

入门 — 安装即用，没有必填配置项；常用功能（编辑文件、跑终端、提交代码）都有图形入口和明确的快捷键提示（Alt+I 唤起 AI 命令、Alt+J 新开终端标签）。

已知问题与限制

• 文件大小上限 1.5 MB：超过该大小的文件不会在编辑器中打开，避免浏览器卡死
• 同一目录最多列出 400 项，过大的目录会显示截断提示
• 自定义斜杠命令最多 40 条，描述不超过 80 字符，引导文本不超过 8000 字符
• 上传自定义通知音最大 50 MB，且必须是 mp3 / ogg / wav / webm / m4a / flac 之一
• 终端支持的 shell 已覆盖 bash、zsh、sh、dash；fish、tcsh、csh、ksh、mksh、cmd 与 BusyBox-as-ash 在 $SHELL 指向它们时会被忽略并回退到已测试的 shell
• 模型工具 git_commit 必须由用户授权才执行；不会执行 push、amend、reset --hard、clean 等破坏性操作
• 网络 SSH 跳板会话下的终端未做覆盖测试

A workbench plugin for the DeepSeek Harness Web UI. After Workbench is opened in Conversation, chat stays on the left. Two columns appear on the right: the editor (syntax highlighting and smart terminal) and the side dock for files, Git, the Usage panel, and the Ultra Slash panel.

Look for these first:

• Usage — official API balance, this-machine observed spend, this-session tokens and context. Pin it above the left Settings button so you can see spend while chatting.

• Ultra Slash — slash commands that inject guidance without stopping the current turn. Manage them in the right dock; send them from the bottom group of the chat / menu.

• Smart terminal — a local PTY in the editor. Real shell lines (including pasted $ ls) run as-is. Natural language is translated by AI command assist (Alt+I or the ✨ button) and typed into the current terminal. Notes are never executed. A blacklist blocks destructive commands the assistant would otherwise type. Alt+J opens another terminal tab.

• Add to chat — hand the model anything without copying and pasting. Drag a file from the tree (or a DevTools network request) into the chat box; right-click terminal output to add the selection or recent output (with its pwd/shell context); or tap the point-and-pick button in the embedded browser and click a page element. Each lands as a reference chip in the input and rides along with your next message.

• AI commit messages — in the right-dock Source Control tab, generate a message from staged changes; the text streams into the commit box. The template is editable.

• Notification sounds — when a session finishes while you are away or is waiting on you (approval, plan confirmation, question), the workbench plays a chime. Pick one of 5 built-in Web Audio sounds or upload your own audio (mp3, ogg, wav, webm, m4a, flac, up to 50 MB); a loop reminder keeps replaying it every N seconds (default 10) until the item is handled. The master switch, sound picker, and loop interval live in the workbench Settings panel.

Contents

• Interface
• Core capabilities
• Feature list
• Usage panel
• Ultra Slash
• Smart terminal
• Workspace terminal
• AI command assist
• Capability matrix
• Release
• Installation
• Upgrade
• License

Interface

The workbench uses a three-column layout. Conversation stays on the left. The two columns on the right are the capability area: editor and smart terminal in the center; file tree, Git, Usage, and Ultra Slash on the far right. The right dock tabs are Files, Source Control, Usage, and Ultra Slash.

Core capabilities

1. Workbench layout. Three columns: Conversation on the left, editor and terminal in the center, files / Git / Usage / Ultra Slash on the right. A new session opens the workbench immediately. By default the editor is collapsed, the files sidebar is open, and usage is pinned above Settings. Columns can be resized, collapsed to icon rails, and restored. Collapse, the side-dock tab, and the usage pin are remembered globally across reload and new sessions.
2. Smart terminal. A local PTY. Real shell lines (including pasted $ ls) go straight to the terminal; natural language is translated and typed into the current shell. Notes are non-executable. A configurable blacklist blocks destructive commands the assistant would otherwise type.
3. Workspace editor. CodeMirror 6 with syntax highlighting, Plain / Emacs / Vim keymaps, Markdown edit / preview / split, image and spreadsheet previews, Git diffs, tabs, breadcrumbs, save and dirty-close guards.
4. Files. Tree browse, filter, hidden files, .gitignore marks, new / rename / delete, and open in a local editor (Cursor, VS Code, and others).
5. Git. Status, stage, commit (including streamed AI messages), fetch / pull / push with safety checks, branches, merge, restore, commit graph, git init, and model-facing git_* tools.
6. Usage panel. Official API balance, this-machine observed spend, this-session tokens and context. Open the right-dock Usage tab, or pin the panel above the left Settings button (including the collapsed icon rail). The status bar always shows the balance next to Feedback.
7. Ultra Slash panel. Slash commands that inject guidance into the next model step without interrupting the current turn. Open the right-dock Ultra Slash tab to manage them; type / in chat and pick from the bottom Ultra Slash group. Built-in: /steer, /new, /skill, /docs. Custom /name shortcuts are stored on this machine and shared by every session.
8. Status bar. Open-file tabs, balance, Feedback, version / upgrade, workspace path, branch, dirty count, editor mode.
9. Maintenance & privacy. In-UI upgrade checker, Chinese / English UI, and redaction of tokens in paths and errors.

Feature list

Workbench

• Three-column layout: Conversation | editor + terminal | files / Git / Usage / Ultra Slash
• Right-dock tabs: Files, Source Control, Usage, Ultra Slash
• Opens as soon as you create a session; no first message required
• Header Workbench button shows or hides the whole workbench
• Drag column widths; double-click a sash to reset; widths are remembered
• Collapse Conversation, editor, or the right dock into a narrow icon rail

Editor

• Multi-file tabs; save; unsaved indicator; confirm before closing dirty files
• Close all / others / left / right
• Path breadcrumbs
• Syntax highlighting: JavaScript, TypeScript, JSX, TSX, JSON, HTML, CSS, Markdown, Python, XML, YAML; other files stay plain text
• Keymaps: Plain / Emacs / Vim from the status bar; the choice persists; Emacs is the default so typing is insertion, not Vim normal mode
• Vim mode: visual selections render properly (v / V / <C-v>); :w saves, :q closes the tab, :qa closes all, :x / :wq save and close, :vs / :sp split left-right / top-bottom, :only unsplits; append ! to force (skip unsaved-change confirmation)
• Editor split: :vs / :sp splits only the editor body into two file views — the toolbar and tab bar stay single, nothing is duplicated; the split pane's tab is underlined, clicking a tab switches the focused pane's file; drag the sash to resize, :only or the "Unsplit" toolbar button merges back
• Editor → chat: a floating "Add to chat" button appears on selection; the toolbar and the tab right-click menu can add the whole file — the same official composer chip as terminal / network refs, with the file path as context
• Markdown: edit, preview, or split; GFM; http(s) and workspace-relative images; Mermaid 11 fenced blocks; workspace file links open in the editor; unsafe links are blocked
• Git working-tree diffs and commit diffs open as editor tabs
• Image preview: png, jpg, jpeg, gif, webp, avif, bmp, ico
• Table preview: csv, tsv, xlsx (UTF-8, then GB18030 if the file looks garbled). .xls is recognized but opens in an external app
• New empty file; new terminal tab (Alt+J)

File tree

• Browse, expand, open, new, rename, delete (with confirmation)
• Toggle hidden files; .gitignore ignored files are marked
• Filter by file name
• Open a file or the whole workspace in Cursor, VS Code, VS Code Insiders, VSCodium, Windsurf, Zed, or the system default (only apps that are actually installed)
• Truncation notice when a folder is too large to list in full

Git

• git init plus user.name / user.email when the folder is not a repo
• Staged / unstaged / untracked lists
• Stage, unstage, and whole-section actions
• Discard unstaged edits or delete untracked files (with confirmation)
• Open a file diff in the editor
• Commit, commit all, Ctrl+Enter
• Streamed AI commit messages; customizable template
• Fetch / pull / push. Dirty tree, behind remote, detached HEAD, and missing upstream block the unsafe click. No --force
• Pull mode: merge / fast-forward only / rebase. Push mode: normal / force-with-lease
• Switch branch, create and switch, merge (conflicts abort cleanly)
• Ahead / behind counts and remote probe
• GRAPH: commit graph, compact by default (message-only; can switch to full), copy hash, expand files, open a commit diff, drag height; compact/open and Git settings are remembered
• Conversation tools: git_status, git_diff, git_log, git_branch, git_commit (commit needs user approval; no delete / reset --hard / clean)

Usage

• Right-dock Usage tab (gauge icon). Pin it above left Settings so you can watch spend while chatting
• Official API balance; currency mark follows the API (¥ for CNY, $ for USD)
• Observed spend on this machine (top-ups do not erase it). The official key API does not return lifetime spend — this is a local running total, not the website figure
• Session tokens: input / output / cache hit / cache write / hit rate (this conversation only)
• Context occupancy
• Official usage opens the DeepSeek usage page
• Unpin to send the panel back to the right dock. Pin still works when the left rail is collapsed (compact strip: balance / spend / tokens)
• Drag height without covering the session list; double-click the handle to reset
• Status-bar balance to the left of Feedback; — (or ¥— / $—) when the balance cannot be read
• See Usage panel for where to click and what the numbers mean

Ultra Slash panel

• Right-dock Ultra Slash tab (/ icon). Chinese UI label: 插件命令
• Type / in the chat box: plugin commands sit in the bottom group, below a divider
• Built-in, cannot be renamed or deleted: /steer (inject guidance), /new (blank session; /new <text> starts the new session with that first message), /skill (save a project skill after the task), /docs (write cause and fix under docs/ after the task)
• Custom /name shortcuts send a fixed /steer payload. Fill review in the panel — do not type the slash — and /review appears in the menu
• Does not interrupt the current turn. If the model is running, the text is queued for the next model access; you do not need Stop
• Stored on this machine at ~/.dsh/ultra-slash/commands.json; every session shares the same list (at most 40 custom commands)
• See Ultra Slash for the command table and how to add your own

Status bar

• Scrollable open-file tabs
• Balance, Feedback (GitHub Issues), version (GitHub repo), upgrade entry (npm)
• Workspace path (tokens redacted), current branch, dirty file count
• Editor-mode menu

Smart terminal

• Local xterm.js PTY in the workspace directory
• Command vs. natural-language classification; pasted prompt prefixes such as $ ls still count as commands
• Multiple tabs (Alt+J); each tab has its own PTY and AI-assist state; the first terminal tab stays pinned
• AI command assist (Alt+I or the sparkle button)
• Notes / greetings / warnings written as non-executable statements
• Configurable destructive blacklist (assistant-typed only; what you type in the PTY is not blocked)
• Assist settings: separator line, one-line explanation, direct-run of real commands, custom translation prompt
• Interrupt (Ctrl+C), reconnect, copy output
• POSIX shells: bash / zsh / sh / dash. Windows: Git Bash, then Windows PowerShell. See Workspace terminal

Maintenance

• Chinese and English UI
• Dismissible upgrade notice; install command pasted into the terminal as a # comment
• Tokens, passwords, and Bearer keys are redacted in UI text and errors; URLs keep host and path

Usage panel

Open the right-dock Usage tab (gauge icon). To keep spend in view while you chat, click the pin: the panel moves above the left Settings button. Click pin again to send it back to the right dock. Pin still works when the left rail is collapsed — you get a compact strip with balance, spend, and tokens.

Drag the top handle to change height; double-click resets. The session list above stays visible. The status bar (left of Feedback) always shows the same balance; — means it could not be read.

If the panel cannot load a balance:

• No API key — fill the key environment variable in Settings
• Key rejected — check for typos or extra spaces
• Endpoint failed — click Refresh; this also happens when the network or provider is down
• Unsupported — this provider has no usable balance API

Reset observed spend only clears the local running total on this machine. It does not change the official account.

Ultra Slash

Open the right-dock Ultra Slash tab (/ icon; Chinese UI: 插件命令). These commands also appear when you type / in the chat box: they sit in the bottom group, below a divider, titled Ultra Slash.

They inject text into the next model step. The current turn is not stopped. You do not need Stop. If the model is running, the text is queued until the next model access; if it is idle, the next step starts immediately.

Built-in commands

These four cannot be renamed or deleted.

If /steer is sent with empty text, the UI tells you to write the guidance first and shows a usage example. Nothing is injected.

Default prompts

The Default prompts section of the panel lets you set a default text for /new, /skill, and /docs each (/steer stays manual and cannot be configured). Leaving a field empty uses the built-in text:

• The /new default is sent as the first message of the new session; /new <text> still uses what you type.
• The /skill and /docs defaults are injected into the next model step; text you append after the command is added after the default (e.g. /skill also log the pitfalls).

Defaults are saved on this machine in the same commands.json as the custom commands and shared by every session; they survive a page refresh.

Typing /new, /skill, /docs, or a custom command name highlights the name in the composer with the reference style (the same as DSH built-in commands and skill names), whether or not the session is running.

Custom commands

Give a short name to a /steer payload you use often. For example, fill review and a fixed paragraph; afterwards /review in chat sends that paragraph.

1. Open the right-dock Ultra Slash tab.
2. Under Custom commands, fill Command name (no slash: review becomes /review), optional Menu description, and Guidance to inject.
3. Click Add command. A success line confirms the name; you can type it in chat immediately.
4. Edit or delete a row from the same list. Delete asks for confirmation.

Rules the panel enforces (you will see a Chinese or English reason under the field if something is wrong):

• Name: start with a lowercase letter; then only letters, digits, hyphens, or underscores. Put Chinese or other languages in the guidance text, not the name.
• Do not reuse /steer, /new, /skill, /docs, or DeepSeek Harness names such as /help and /plan.
• At most 40 custom commands. Description at most 80 characters; guidance at most 8000.
• The list is stored on this machine at ~/.dsh/ultra-slash/commands.json (or $DSH_HOME/ultra-slash/commands.json) and is shared by every session. A damaged file is not overwritten — fix or delete it, then try again.

Capability matrix

Release

+ [email protected]

Maintainers publish npm with bash devops/release.sh. The script uses the existing npm login session on this machine. Credentials must not be stored in the repository.

The app market installs from GitHub (github:loadingvx/deepseek-harness-workbench-plugin). That path does not compile on the user's machine. Before every GitHub push: bash devops/build.sh, then commit lib/index.js and lib/client.js together with the source.

Installation

Prerequisites

DeepSeek Harness is installed, and dsh web can be started.

Procedure

1. Install the plugin (pin the version; do not omit @0.1.26):

dsh plugin --profile web add [email protected]

dsh plugin add is implemented with pnpm. pnpm 11 waits 24 hours after a version is published before it will pick it as latest. A bare dsh-workbench-plugin (no @version) can therefore install 0.1.0 and still exit 0. Pinning @0.1.26 requests that release explicitly.

If a pinned install is still refused as too new, add this to ~/.dsh/profiles/web/pnpm-workspace.yaml and run the command again:

minimumReleaseAgeExclude:
  - dsh-workbench-plugin

2. Restart dsh web.
3. Open http://127.0.0.1:3080, enter Conversation, and create a new session. Workbench opens on the right immediately — you do not need to send a first message. After the first turn, the header Workbench button can hide or show it.

App market / GitHub

The market command installs the GitHub tree, not the npm tarball:

dsh plugin --profile web add github:loadingvx/deepseek-harness-workbench-plugin

This only works when the default branch already contains built lib/index.js and lib/client.js. A source-only commit will fail: pnpm blocks the git-hosted prepare script unless the user adds allowBuilds. After install, restart dsh web and open Workbench as above.

Upgrade

Automatic notice

When a lower version is already installed, a dismissible notice appears at the top of the Files / Git sidebar. The upgrade description and install command are written to the workspace terminal as # comments and are not executed. Remove the leading #, press Enter, then restart dsh web.

# dsh plugin --profile web add dsh-workbench-plugin@<latest>

If the registry lookup fails, no notice is shown. Dismissing the notice skips only that latest version; a subsequent newer release will prompt again.

Upgrading from 0.1.1

Version 0.1.1 does not include the upgrade checker and will not display the notice. Install 0.1.26 manually using the command above. Later releases will prompt in the UI.

Workspace terminal

The workspace terminal is a local pseudo-terminal (PTY). AI command assist converts natural language into shell commands and writes them into the current session shell; greetings and notes are written as non-executable statements and are never executed. Shell coverage — tested and not yet tested — is summarized in the capability matrix.

Allowed shells — POSIX

Allowed shells — Windows

Path constraints

Absolute paths are accepted only under /bin, /usr/bin, or /usr/local/bin, and only for the four POSIX names in the table above (for example /bin/bash, /usr/bin/zsh). On Windows, absolute paths to the Git Bash and PowerShell executables are accepted. All other paths, including custom installs under a home directory, are ignored so that unknown programs are not executed.

Selection order

On Windows, Git Bash is probed first, followed by the system PowerShell, then the POSIX candidates below. The POSIX order is:

1. $SHELL (must be on the allowlist)
2. /bin/bash
3. /usr/bin/bash
4. /bin/zsh
5. /usr/bin/zsh
6. /bin/sh
7. /usr/bin/sh

If none of these paths are available, the terminal cannot start. Shells not yet covered by tests (fish, tcsh, csh, ksh, mksh, cmd, and BusyBox invoked as ash) are listed in the capability matrix: when $SHELL points to one of them, the value is ignored and the terminal falls back to a tested shell when available. BusyBox is treated as sh only when the operating system exposes it as /bin/sh; the name ash is not yet covered by tests.

AI command assist

Alt+J opens a new terminal tab; each tab keeps its own isolated PTY session and AI-assist state.

Alt+I (or the sparkle button in the terminal toolbar) opens the AI command assist bar of the active terminal. It translates natural-language requests into shell commands and writes them into the shell of that terminal; no separate shell is started. Greetings, warnings, and the one-line explanation preceding a command are written as non-executable statements and are never executed.

License

MIT