Introduction¶
When developing agents using DeepSeek Harness (DSH), the Web UI is the common entry point. However, viewing and modifying workspace files, confirming Git changes, and temporarily opening a terminal often requires switching back and forth between the browser, editor, and terminal, which fragments the context severely.
dsh-codex-file-panel solves this problem: it centralizes the file tree, search, edit, preview, and Git review into the right panel of the Web UI, and supplements capabilities closely related to the file workflow, such as the bottom terminal. Below is an introduction in the order of features, installation, configuration, and security boundaries.
What is this?¶
dsh-codex-file-panel is a community plugin maintained by JesonChou, providing a Codex-style workspace file sidebar for the DeepSeek Harness Web UI. The “Codex” here is only used to indicate the UI interaction style; the project itself is a community-maintained third-party project and does not belong to DeepSeek or OpenAI.
The current version is 0.4.0 and the license is MIT. The project is organized according to Harness official bundle specifications, and the repository root directory itself is an installable plugin package that can be added via dsh plugin add.
Core Features¶
The verified capabilities are as follows:
- Resizable right-side file panel in Codex style, supporting responsive collapsing and layout persistence.
- Workspace file tree, filename search, text reading, and saving.
- Preview of Markdown, code, images, audio, video, and PDF; PDF resources are provided locally by the plugin.
- Git change viewing, staging, unstaging, and committing.
- Session-level multi-tab terminal, supporting offline brief keep-alive and size synchronization.
- Integration with Harness native sessions, language packs, layouts, and client module loader, with interface text covering both Chinese and English.
Environment Requirements¶
| Component | Requirements |
|---|---|
| DeepSeek Harness | 0.1.0-rc.7 series API |
| Node.js | 22 or higher |
| Development Package Manager | pnpm 11 (Repository locked to 11.21.0) |
| Runtime Interface | Harness Web UI |
The plugin relies on the node-pty native module. For Windows, macOS, and Linux, build artifacts matching the local Node.js ABI must be used; otherwise, terminal functionality will not work properly.
Installation and Enablement¶
Install from GitHub¶
To install the latest source code from the main branch:
dsh plugin --profile web add github:JesonChou/dsh-codex-file-panel
main will continue to change. For reproducible installations, audit the source code first, then pin to a tag or full commit SHA:
dsh plugin --profile web add github:JesonChou/dsh-codex-file-panel#<tag-or-commit-sha>
Git installation gets the source code, and the prepare script in the package builds lib/. pnpm 10 and above blocks dependency execution of build scripts by default. The first add might fail, and pending items will be generated in pnpm-workspace.yaml of the target profile. Authorize based on the precise package keys from the terminal output:
allowBuilds:
dsh-codex-file-panel: true
node-pty: true
After saving, re-run the same add command. Note that this authorization allows dependencies to execute native code outside the sandbox, so it should only be opened for audited source code fixed to a specific commit.
Install from Local checkout or tarball¶
If you want to check the source code locally first, you can clone and install from the root directory:
git clone https://github.com/JesonChou/dsh-codex-file-panel.git
cd dsh-codex-file-panel
corepack enable
pnpm install --frozen-lockfile
dsh plugin --profile web add .
The tarball method includes pre-built JavaScript, so you don’t need to authorize prepare for the plugin itself, but node-pty may still require native build authorization:
pnpm install --frozen-lockfile
pnpm pack --pack-destination dist
dsh plugin --profile web add ./dist/dsh-codex-file-panel-0.4.0.tgz
Verification and Startup¶
After the above steps, first use --dump-config to confirm the plugin layer is loaded:
dsh --profile web --dump-config
The output should include the # == dsh-codex-file-panel layer. After confirming it is correct, start:
dsh --profile web
Uninstall and upgrade:
dsh plugin --profile web remove dsh-codex-file-panel
dsh plugin --profile web update dsh-codex-file-panel
Users installed via main can use update; users with fixed tags/SHAs should re-run add and change the URL fragment to the target tag or commit. After updating, run dsh --profile web --dump-config again to check the combined layers.
Configuration¶
The plugin provides configurations for file transfer limits, terminal count, terminal shell, offline keep-alive time, and directory exclusions, with default values suitable for local development. For the full field list and defaults, see the repository’s docs/configuration.md; this article does not list them item by item.
Security Boundaries and Considerations¶
First, clarify the scope of capabilities: this plugin has the ability to read and write the session workspace, execute Git operations, and create native PTYs, meaning it runs with the permissions of the current dsh process. Before installation, you should check the source code and license to confirm it is acceptable before introducing it.
Server-side routes have constraints: paths cannot escape the session cwd, payload sizes are limited, and non-loopback sources are rejected. However, even so, it should only be used in a trusted local Harness environment. Two red lines:
- Do not expose the Web UI to the public internet without authentication.
- Do not assume that loopback checks after a reverse proxy equal user authentication.
If you discover a security issue, please report it privately following the repository’s SECURITY.md, and do not submit an issue publicly.
Applicable Scenarios¶
It is suitable for developers who run DeepSeek Harness locally, mainly use the Web UI in the browser, and want to complete viewing and editing workspace files, reviewing Git changes, and opening a terminal in the same interface to reduce tool switching. For teams that require reproducible installations, it is recommended to use the “fixed tag/SHA plus tarball” path and complete source code auditing before authorizing allowBuilds.
Conclusion¶
One-sentence review: dsh-codex-file-panel brings files, Git, and terminals into the right panel of the Web UI, making the development loop within the browser more complete. See the GitHub repository and configuration documentation (https://github.com/JesonChou/dsh-codex-file-panel); according to the listing info, the community plugin directory page is https://www.skillhub.cn/plugins/JesonChou/dsh-codex-file-panel. This directory is an independent community site with no official affiliation to DeepSeek, so please refer to the actual pages on the site.