dsh-plugin-files-download
DSH Web GUI 文件树每一行的下载按钮，通过经身份验证的流式 Host 路由提供
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Yingblock/dsh-plugin-files-download#8878e86ac623566d21f6a459eb24b98163f535e0Plugin Files Download 以 dsh-plugin-files-download 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Give every file row of the DSH web GUI's file tree a download button. One click saves the file under its own name, streamed from the Host — no size cap, nothing buffered in the page.
中文说明见 README.zh.md。
Files /home/me/project
├─ src/ ← directories: no control
├─ README.md ↓ ← files: download, always visible
└─ package.json ↓
| Half | File | Role |
|---|---|---|
| Host | lib/index.js | Registers GET|HEAD /api/workspace-file.download?sessionId=…&path=… inside the Connection authentication fence. Resolves the Session's workspace root the way the Remote lookups do, stats the file to reject a missing path / directory / symlink, then streams the bytes in 1 MiB windows through ctx.workspaceFiles with content-disposition: attachment and the file's own name. |
| Browser | lib/client.js | Registers one cell into the file tree's sidebar.right.files.row.actions seat. The cell is a plain <a download> pointing at that route, so the browser's own download manager owns progress, cancellation, and the saved name. |
The file tree is not reimplemented: the seat is declared by @deepseek-ai/dsh-client-ui-sidebar-files, and this package only fills it.
The mounted @deepseek-ai/dsh-client-ui-sidebar-files client bundle must declare the sidebar.right.files.row.actions seat. Stock DSH releases before that seat existed do not have it — with such a bundle this plugin's registration fails loudly in the browser-half load report instead of half-rendering. See Requires the seat for the one-file-per-package patch.
ui-sidebar-files declares the seat (see above)AbortSignal.any and WHATWG ReadableStream)The package ships prebuilt JavaScript, so installing needs no build step.
# straight from GitHub (pnpm forwards git specs unchanged)
dsh plugin --profile web add github:Yingblock/dsh-plugin-files-download
# or from a checkout / tarball
dsh plugin --profile web add /path/to/dsh-plugin-files-download
Or add the row by hand to the profile's cordis.patch.yml:
- insert:
- id: files-download
name: dsh-plugin-files-download
Restart dsh web afterwards. The browser's client boot graph is composed at startup, so a running page keeps the graph it loaded with.
Then hard-refresh the browser (Ctrl+Shift+R). Bundle HMR only applies automatically while pnpm run dev:web is running.
dsh plugin --profile web remove dsh-plugin-files-download
↓ control at its right edge, always visible (no hover needed). Directory rows show nothing.The control is a real navigation to the Host route, not a page-side fetch, so multi-hundred-MB files stream straight to disk.
The sidebar.right.files.row.actions seat belongs in the file tree's own package, because the tree owns the row it appears in. It is four small files in packages/client/ui-sidebar-files:
| File | Change |
|---|---|
src/client/slot-contract.ts (new) | Declares the seat: kind: 'single', scope: 'session', owner props { path, name } |
src/client/index.ts | The files tab body declares it: children: { 'sidebar.right.files.row.actions': { kind: 'single', scope: 'session' } } |
src/client/FilesBody.tsx | Renders it per file row: renderSlot('sidebar.right.files.row.actions', { path, name }) inside the row |
src/client/FilesBody.module.css | Row becomes display:flex; the action container is flex: 0 0 auto |
Then rebuild that one package:
tsc -b packages/client/ui-sidebar-files
pnpm --filter @deepseek-ai/dsh-client-ui-sidebar-files run bundle
Restart dsh web and hard-refresh the browser.
Why
singleand notkeyed? A keyed seat dispatches by registration key (entriesOfSlot(key).find(e => e.options.key === entryKey)), and its key domain is fixed at compile time. The file rows are a runtime set the plugin cannot enumerate, so a constant registration key would never match the tree's per-row dispatch key — the cell stays on the ledger and never renders. Onesingleseat rendered once per row, carrying the row's identity in owner props, is the correct shape.
Server side — no cookie required to see that the route sits behind authentication:
curl -s -o /dev/null -w '%{http_code}\n' \
'http://127.0.0.1:3080/api/workspace-file.download?sessionId=x&path=y'
# 401 (unauthenticated)
Statuses once authenticated:
| Case | Response |
|---|---|
| OK | 200, streamed bytes, content-disposition: attachment |
Missing sessionId/path | 400 missing sessionId or path query parameter |
| Unknown session | 404 session not found |
| Missing file | 404 |
| Not a regular file | 422 |
Client side, in the browser console:
JSON.stringify(globalThis.__DSH_FILES_DOWNLOAD__)
// {"apply":true,"registered":true,"renders":9,"version":"single-seat"}
// `renders` equals the number of file rows currently rendered.
globalThis.__DSH_FILES_DOWNLOAD__ is a read-only diagnostic object; it adds no UI and no render work.
ctx.fs's. A file the composed filesystem can read can be downloaded, including paths outside the workspace — the same authority the built-in preview uses.opacity: 0 on .actions plus an .item:hover .actions rule in the tree's stylesheet.MIT — see LICENSE.