
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
dsh-chat-tick-rail
Advanced tools
dsh web UI plugin: in-session message navigation rail (one tick per user message, viewport marker, click to jump)
dsh-chat-tick-rail 是专为 deepseek-harness web 界面设计的会话内快速导航刻度条插件(Codex / ZCode 风格)。
在对话滚动区左缘叠加一列精简刻度线:每条用户/指导轮次对应一个刻度,视口位置滑动指示器(Marker)随阅读位置实时追踪;鼠标悬停或键盘聚焦刻度时显示带轮次编号与模型思考提要的浮层预览,点击即可平滑跳转到对应消息。
turn-error 节点并将出错刻度标红,悬停预览即时展示报错原因,长排错任务一目了然。#3/12)、用户问题开头、思考提要以及关联的工具执行徽标(如 [🔧 2 edit,bash])。compaction 节点,在截断处绘制极简虚线分界线。transform: translate3d 与 will-change: transform,大幅提升 120Hz 高刷下的拖拽与滚动流畅度。Esc 键自动取消固定。data-chat-anchor-key 进行会话节点定位,向上滚动加载更早历史消息时,Pinned 状态和刻度高亮保持绝对精准。▲),点击即可平滑直达顶部。ArrowUp / ArrowDown(或 ArrowLeft / ArrowRight)在刻度间切换,Home / End 切换至首尾,Enter / Space 触发跳转。Alt + ArrowUp / Alt + ArrowDown 快速在上一个/下一个用户提问间穿梭;使用 Alt + Home / Ctrl + Home 一键直达会话顶部。role="navigation"、role="button" 及视口贴近项的 aria-current="step" 状态。--dsw-alias-* 设计系统 Token,原生支持 body[data-ds-dark-theme]。[图片]、[代码]、[附件] 多模态占位预览;视口过窄(< 360px)或移动端自动折叠。| 快捷键 | 作用范围 | 说明 |
|---|---|---|
Alt + ArrowUp | 全局 | 快速跳转至上一条用户消息 |
Alt + ArrowDown | 全局 | 快速跳转至下一条用户消息 |
Alt + Home / Ctrl + Home | 全局 | 快速平滑滚动至会话顶部并触发加载更早历史 |
Escape | 全局 / 导轨聚焦 | 关闭当前 Pinned 浮层预览 |
ArrowUp / ArrowDown | 刻度聚焦 | 在各个刻度之间切换焦点并预览 |
Home / End | 刻度聚焦 | 快速移动至会话起点(并加载更早历史) / 终点 |
Enter / Space | 刻度聚焦 | 跳转至当前聚焦的轮次并固定预览 |
# 在 deepseek-harness 仓库根目录下执行
# 从 npm 安装
pnpm dsh plugin --profile web add dsh-chat-tick-rail
# 或从本地源码目录安装(开发调试)
pnpm dsh plugin --profile web add ../dsh-plugins/dsh-chat-tick-rail
# 启动或重启 web 服务
pnpm dsh --profile web
卸载插件:
pnpm dsh plugin --profile web remove dsh-chat-tick-rail
| 文件 | 说明 |
|---|---|
cordis.patch.yml | bundle patch:向组合树注入插件配置 |
lib/index.js | Node 宿主端入口(浏览器插件无需服务端操作) |
lib/client.js | 纯客户端浏览器半边:零依赖的 vanilla DOM 闭包模块 |
test/rail-layout.test.cjs | 覆盖视口计算、键盘交互、动态压缩与流式检测的单元测试 |
DOM 契约依赖:
[data-conversation-scroll]:对话滚动容器[data-chat-flow]:消息列根节点[data-chat-flow-kind="user" | "steering" | "command-input"]:用户侧消息轮次[data-chat-flow-kind="assistant" | "assistant-step"]:模型侧思考与回复内容[data-chat-anchor-key]:各轮次的稳定锚点 KeyMIT
FAQs
dsh web UI plugin: in-session message navigation rail (one tick per user message, viewport marker, click to jump)
The npm package dsh-chat-tick-rail receives a total of 0 weekly downloads. As such, dsh-chat-tick-rail popularity was classified as not popular.
We found that dsh-chat-tick-rail demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.