dsh-sidebar-frog
可弹出侧边栏 · 一个显示工件并可弹出到更大网页标签页中的 DeepSeek Harness 侧边栏。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:zengqingsong/dsh-sidebar-frog#9d64e810eae75e40382b002053382987a93d776aSidebar Frog 以 dsh-sidebar-frog 发布，当前版本为 1.3.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English · 简体中文
A sidebar for DeepSeek Harness that keeps what you keep reaching for within reach: the files the agent created or edited, and the workspace it did it in. Click a file and it opens at full panel width with an offline preview; when the sidebar feels too narrow, pop it out into its own browser tab and drag it to a second monitor. Both windows share one session, one workspace and one set of settings, live.
Forked from e2mcc/dsh-popout-sidebar (MIT, Copyright (c) 2026 Qinyun Cai). The upstream notice is kept verbatim in LICENSE, and what this fork added is listed under Credits.
/api is, and answers 401 without it.0.1.6-alpha.2 on the web profile. Installing runs no build script.| What | Why it matters | |
|---|---|---|
| 🖥️ | Pop out to a second monitor | One click moves the whole sidebar into its own browser tab. Session, workspace, settings and the divider position are shared, so the two windows never drift apart. |
| 🎨 | Markdown skins and raw HTML | Rendered Markdown can wear another platform's document typography — GitHub, WeChat, Zhihu — alongside the default, picked from this plugin's own section in Settings (the Markdown document skin row); a skin changes layout and structure only, so its colors still come from the theme and it holds in light and dark alike, and it applies to the panel, the system sidebar's document tab and the popout page at once. The raw HTML a README is built from renders too: a picture element with a dark/light source, a plain img, and the badge shape where an image sits inside a link — with relative image paths resolved against the document's own directory. |
| 🎯 | Quote the lines you mean | Select a paragraph in a rendered document and a small bar appears over it naming its source lines ("第 12–14 行"); 引用 puts that locator plus exactly those lines into the composer, and 定位 opens the file in the editor with the same lines selected. It works on headings, paragraphs, list items, quotes, tables and fenced blocks, and it resolves through nested content correctly (a list item inside a blockquote reports the line it really is on). A Markdown fence quotes as one block: its lines are not addressed individually, because splitting the highlighted markup per line would break what you copy out of it. |
| 📦 | Previews that work offline | Code, Markdown with math and diagrams, PDF, HTML, images, sortable CSV tables, Word / Excel / PowerPoint, and audio and video with HTTP Range. Every renderer is bundled — no CDN, no network call. |
| 🌳 | An artifact ledger | Files the agent wrote or edited appear on their own, including files produced indirectly by a shell command. Edited files keep their before/after hunks, and Undo lives there. |
| ↔️ | The workspace file tree | Takes over the system sidebar's own Files tab, so @-references into the composer, the context menu, per-directory refresh and deleting a single file sit where you already look. |
| ✏️ | Editing and saving in place | Markdown, plain text and CSV open in a CodeMirror editor with Ctrl+S. The save is fenced to the workspace, checked against the version you opened, and puts the file's own line endings and byte-order mark back. |
| 🌿 | A read-only Git slice | Branch, ahead/behind, and the changed / staged / untracked / conflicted lists, with a line-level diff against HEAD for any file. Read-only is a hard boundary: no staging, no commit, no checkout, no discard. |
# 1) keep DSH itself current
npm install -g @deepseek-ai/dsh
# 2) install this plugin
dsh plugin --profile web add github:zengqingsong/dsh-sidebar-frog
Then restart the DSH service and hard-refresh the browser (Ctrl/Cmd+Shift+R). The right sidebar gains five tabs — Files, Artifacts, Jobs, Usage and Git — and a permanent File tree button appears at the bottom of the left column, which is also how you get into the sidebar from a brand-new session.
To update, run the same add command again. To remove it, dsh plugin --profile web remove dsh-sidebar-frog.
To read the source, change it, and see the change in the running GUI without publishing anything, install the checkout itself rather than the repository:
git clone https://github.com/zengqingsong/dsh-sidebar-frog
cd dsh-sidebar-frog
dsh plugin --profile web add .
Then restart DSH and hard-refresh the browser, the same as above.
dsh plugin is a thin forwarder to pnpm, which it runs in the profile directory — so a relative spec like . is rewritten against the directory you invoked it from. add . from the checkout is what you want; an absolute path (add D:\src\dsh-sidebar-frog) works too. pnpm records the result as link:… in the profile's package.json, so the profile loads your working tree through a symlink instead of a copy, and an edit needs no reinstall.
Both bundle halves are generated, so the loop after changing anything under src/ is:
npm run build # regenerate src/host.js and src/client.js
npm run check:fast # assertions only, no browser
npm run check # assertions plus the real-browser suite
then restart DSH and hard-refresh the browser. The host prints the build id on startup and the popout page carries it in a meta tag, which is how you tell whether the restart took. Host changes need the process restarted; client changes need the page reloaded as well.
Nothing on this path runs a build script at install time, so pnpm never stops to ask you to approve one — that prompt belongs to git-hosted specs.
To go back to the released build:
dsh plugin --profile web remove dsh-sidebar-frog
dsh plugin --profile web add github:zengqingsong/dsh-sidebar-frog
/dsh-sidebar-frog is a standalone two-column page — preview on the left, ledger or file tree on the right, with a draggable divider. It is a normal tab, so you can drag it to another monitor, and it stays in sync with the sidebar through a storage bridge. The @ button on the popout page writes the reference straight into the main window's composer; if that window is gone, it falls back to the clipboard.write and edit calls are recorded as they happen, with the file's type, its change letter and its before/after text. Shell commands are covered too: the workspace is fingerprinted before and after bash / pwsh runs, so a chart or a report produced by a script is picked up as well. Removing an entry and undoing a change both go through the same bounded history.Shift-click reloads everything), and a context menu with copy path, copy relative path, @-reference, refresh this folder, expand/collapse all, and delete for the single row you right-clicked. Expansion state survives reloads.Enter / Esc run or cancel it. Every deletion is fenced by the host to the session workspace, which refuses the workspace root, a path outside it, a socket or a FIFO, and a locked file, and answers with its reason instead of failing silently. 清除 in the artifact ledger is deliberately a different thing: it drops the in-memory record and never touches disk.The built-in browser view that earlier versions carried has been removed. It could only show a local page through an unauthenticated route, and the product's own document preview already renders workspace HTML, so the trade was not worth a route that answered without the browser cookie.
| Setting | Default | Notes |
|---|---|---|
| Expand on load | on | Open the panel after the page loads. On the native sidebar it also opens the Files page for a brand-new session, which both expands the column and lands on the file tree. Sessions you have already used are never touched. |
| Auto refresh | on | Poll for new artifacts every two seconds while the panel is open. The popout page obeys this switch as well, and still refreshes once when you return to it. |
| File tree | on | Show the file tree on the floating panel's strip. The native sidebar does not offer this switch: the system's Files tab is this plugin's tree and always draws it. |
| Carry the panel in the system right sidebar | on | Register every view as a tab of the system right sidebar, with the file tree taking over the system's own Files kind. Switching it off hands all five kinds back and returns the panel to its floating form. Takes effect on page refresh. |
| Render system Markdown with this plugin | on | Lend the Markdown renderer to the system's document previews, so the system sidebar gets math, Mermaid and JSXGraph. Off hands it back to the built-in renderer. Takes effect immediately. |
| Render system tables with this plugin | on | Lend the table renderer for csv and tsv. The product has no table renderer of its own, so there is no trade-off here. Takes effect immediately. |
| Render system Office documents with this plugin | on | Lend the Office reader for docx, xlsx and pptx, which the system cannot display otherwise. It only affects the system sidebar; this plugin's own panel renders Office either way. |
| Default panel width | 26% | The floating panel's width when expanded, 20–85% of the window. On the native sidebar the width belongs to the system, so this is not shown. |
| Minimum panel width | 20% | The floating panel's floor, 20–60%. File names stay readable regardless, so they are never ellipsised at small window sizes. |
| Markdown document skin | Default (follows the theme) | The typography rendered Markdown wears: Default / GitHub / WeChat / Zhihu. Layout and structure only — colors come from the current theme, so a skin is right in light and dark alike. Applies to the sidebar panel, the system sidebar's document tab and the popout page together, with immediate effect. |
The plugin ships as two committed halves and needs no build at install time.
Host (src/host.js) registers its routes with the web server — the popout page, the data routes, the bundled renderer assets and the editor. It reaches webServer through a dynamic injection rather than a hard dependency, so on a profile without a web server the plugin still loads and still tracks artifacts; it simply has no routes to offer. Every data route opens by asking the connection service for a verdict, the same Host/Origin and cookie check the product applies to /api. The host also listens on the tool lifecycle: tools/result for direct write and edit calls, and tools/execute to capture the previous file contents that make undo possible, and to diff workspace fingerprints around shell commands.
Client (src/client.js) registers the five system tabs and their bodies into the keyed seats the sidebar exposes, lends the renderers to the document-preview registry, and adds the two entry points the system does not provide — the footer button and the per-tab "open in a new tab" menu item. When the registry is missing or rejects a registration, it rolls back and falls back to its own floating panel.
Cross-window bridge (src/shared/bridge.js) is the sidebar and the popout page talking through storage events. Session, settings and divider position are shared, and the @-reference request travels with a nonce and a ten-second validity window so a stale message is never mistaken for a fresh one.
0.1.5-rc.2 on the web profile, which is the profile that has a browser UI. DSH's latest tag currently resolves to 0.1.5-rc.1; the two releases publish the same files with the same contents and differ only in the version string, so either works.The host half passes dsh-plugin-verify — a full agent loop against a mock LLM, with the harness's waterfall chain watched end to end:
npx dsh-plugin-verify . --repo <dsh-checkout>
# the CLI answers, verbatim: "✅ 通过 | 捕获事件: 13 | waterfall: 7/7 | tools/result: 是"
# i.e. pass | events: 13 | waterfall: 7/7 | tools/result: yes
All seven waterfall events fire and tools/result closes cleanly, with no bare child_process spawn and no single-slot registration. The part that matters for a sidebar plugin is what the check says about the profile you are not running: the host declares no static inject, so on a headless assembly the plugin still applies and still tracks artifacts, and only the HTTP routes are missing. A static inject: ['webServer'] would have switched the whole plugin off there, waterfalls included — silently.
Four checks stand behind that, and they are independent on purpose — each one can fail for a different reason:
dsh-plugin-verify (above): 7/7 waterfall, tools/result clean, no bare child_process spawn, no single-slot registration.npm pack, then dsh plugin --profile headless add <the tarball>. pnpm installs it, the profile's dsh.profile.bundles gains dsh-sidebar-frog beside the shipped bundles, and the host logs the same build id out of node_modules rather than out of a checkout — the loop still ends 7/7. Nothing on that path runs a build script, and the only step that needs the network is the fetch.dsh --profile headless --dump-config exits 0 with the package installed — the gate awesome-dsh-plugins applies before it will list anything as verified.npm run build # rebuild src/host.js and src/client.js from src/**/*.js
npm run check # the guard suite, then the real-browser tests
npm run check:fast # the same suite without launching a browser
src/host.js and src/client.js are generated from the modules under src/, and both are committed so that an install needs no build step. Assertions live in scripts/check.js and the browser tests in scripts/browser-tests.js.
The running build is identified by a short id. The host prints it on startup and the popout page carries it in a meta tag, which is the quickest way to tell whether a restart and a hard refresh actually took:
# the log line when the process starts
# [artifacts] dsh-sidebar-frog build 00000000
Written and maintained by 曾青松 (Zeng Qingsong).
It began as a fork of e2mcc/dsh-popout-sidebar by Qinyun Cai, whose upstream license notice is preserved unchanged in LICENSE. Since then the plugin has grown an artifact ledger, the file-tree takeover of the system sidebar, the offline preview and Office readers, editing and saving, the read-only Git slice, and the renderers lent back to the system — most recently, Markdown document skins, raw HTML (<picture> and badge image links), source-line quotes taken straight from a selection, plus the fix for "open in the system sidebar" failing because the plugin could not read the current session.
The bundled renderers are third-party work, used under their own licenses, with their texts kept under src/vendor/: pdf.js, MathJax, Mermaid, JSXGraph, CodeMirror, docx-preview, JSZip, SheetJS and the PowerPoint renderer.
MIT — including the original upstream copyright notice.
Guangzhou Polytechnic University
Developed and maintained at Guangzhou Polytechnic University (gzpyp.edu.cn) by 曾青松 (Zeng Qingsong).
| Line numbers in the preview | off | Show the source line number of every top-level block in a gutter down the left edge of a rendered document — the answer to "which line is this?" without leaving the reader. Multi-line blocks show their range (12–18). The numbers are stamped on the blocks when the document is rendered, so they are the file's real lines and always agree with what "Quote / Locate" reports for a selection. Off by default: it is chrome added around a document. |
| Line numbers in the editor | on | CodeMirror's own line-number column, in the panel's editor and the popout page's alike. Turning it off buys back a little width on a narrow panel. The switch is applied to a running editor, so the cursor position, the undo history and any unsaved draft survive the flip. |
| Popout preview width | 80% | The preview's share of the split on the popout page, 20–80%. Dragging the divider adjusts it temporarily. |