dsh-fileview
用于远程浏览器的图形界面文件查看器/编辑器：/dsh-fileview HTTP 端点 + 拦截工作区文件链接的客户端覆盖层
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Dawn388887/dsh-fileview#2f0e6d09361347a2e947df2468eabae71de0b71dFileview 以 dsh-fileview 发布，当前版本为 1.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 简体中文
A DeepSeek Harness (DSH) plugin that lets remote browsers (devices reaching the DSH Web UI over LAN or VPN) view, edit, and browse workspace files directly in the GUI.
DSH keeps its native workspace opener privileged and loopback-only. In DSH 0.1.2, file links call ctx.remote.session.openWorkspacePath({ path }); on a remote page, that native operation cannot open a desktop application for the remote device. This plugin wraps that Remote method on non-loopback pages and opens the requested path in a browser overlay backed by path-allowlisted HTTP endpoints. Loopback pages continue to use the native OS opener.
DSH 0.1.2 exposes remote.session.openWorkspacePath as a configurable, getter-only own property. Assignment does not replace it, so the client records the complete property descriptor and installs its wrapper with Object.defineProperty.
{ path } request opens the in-GUI viewer and returns a successful Remote result.AbortSignal unchanged to the native method.The client dependencies used to obtain this API are declared in package.json as @deepseek-ai/dsh-api-session-controller and @deepseek-ai/dsh-client-connection.
config.roots is the required read/write path allowlist (absolute directories; subpaths allowed, everything else receives 403). config.writeRoots optionally narrows saves to a subset. When no root is configured, the Host plugin safely registers no routes; it never falls back to a machine-specific directory or the whole disk.
- insert:
- id: fileview
name: dsh-fileview
inject: [webServer] # wait for webServer before registering routes
config:
roots:
- 'D:\workspace'
- 'C:\Users\me\projects'
writeRoots: # optional: only allow saves under D:\workspace
- 'D:\workspace'
Restart dsh web after changing the composition or Host code. Client-only client.js changes take effect after rebuilding/reloading the client plugin as required by your DSH installation and refreshing the page.
config.roots means no file routes are registeredv1.1.0 targets DSH 0.1.2 and its ctx.remote.session.openWorkspacePath contractv1.0.0 workspaces.openPath interception is not used on DSH 0.1.2node test/fileview-smoke.mjs
node test/fileview-client-test.mjs
fileview-smoke.mjs: 34 portable offline Host checks (mock request/response, temporary fixtures, no server), covering meta/file/dir endpoints, pagination, CRLF preservation, binary sniffing, allowlist/traversal rejection, same-origin handling, UTF-8 boundaries, GB18030 refusal, UTF-16LE/BE round-trips, large files, and router shape.fileview-client-test.mjs: portable offline client regression for the DSH 0.1.2 Remote descriptor wrapper, remote interception, loopback delegation, and exact descriptor restoration.If this plugin saves you time or a headache, a coffee is appreciated:
MIT © 2026 Dawn388887