dsh-monaco

The Harness browser plugin channel delivers exactly one file per plugin, and Monaco Editor is a multi-file distribution that simply does not fit that constraint. dsh-monaco closes that structural gap: it mounts the full monaco-editor package under a host HTTP route (default /monaco), so your plugin can embed a real code editor in the page with no CDN and no third-party origin at runtime.

Security is the most deliberate part of the design. Every request path is resolved, collapsing dot-dot first, and then containment-checked against the distribution root, catching even percent-encoded escape attempts. Unknown paths and read failures both return the same 404 so the browser cannot enumerate files; only GET and HEAD are served, everything else gets 405; unrecognised extensions are answered as application/octet-stream to prevent the browser from executing content as script.

It is aimed at Harness plugin developers who need syntax highlighting and IntelliSense in their in-page UI but want the editor to stay entirely local to the operator machine. Point MonacoEnvironment at /monaco and you have full language support; Monaco web workers are left for the consumer to mount, and without them the language services run on the main thread, which is sufficient for most plugin use cases.