
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
dsh-workspace-quick-create
Advanced tools
新建工作区快速创建 —— 给 DSH Web GUI 的「新建工作区」流程做的 UI 增强:
~/Documents/deepseek_projects);mkdir 并注册为新工作区,
全程不再弹出系统文件选择对话框(Codex 风格快速创建);本项目由本地脚手架 dsh-plugin-scaffold (模板版本见
package.json的scaffoldVersion)生成,host/client 双半 + Typert RPC 回环的静态插件(static-bundle)。
DSH 的工作区「添加」流程把目录选择交给两个 slot 洞:
conversation.hero.workspace.directoryFlow (新会话页的选择器)
sidebar.workspaces.directoryFlow (侧边栏工作区的 + 按钮)
原生行为由官方包 @deepseek-ai/dsh-client-ui-directory-picker-native 占据——
每次都弹 OS 文件夹选择框。本插件在同一对 slot 上以更低 priority 注册自己的
面板(single-slot 影子语义:priority 最低者渲染),于是:
<默认根目录>/<名字> → 回车或点「创建并打开」;ensure-workspace-dir:校验单个合法路径段、mkdir -p;createWorkspace({ path }) 完成注册与跳转。默认根目录保存在 <dsh-home>/storages/dsh-workspace-quick-create.json
(遵循 $DSH_HOME → ~/.dsh 的解析顺序),可在两处修改:
面板与设置页的所有控件均使用平台原语(Modal/Input/Button),自动跟随明暗主题。
dsh plugin --profile web add npm:dsh-workspace-quick-create
指定版本 / 更新:
dsh plugin --profile web add npm:dsh-workspace-quick-create@^0.1.0
安装后重启 dsh(或刷新 Web GUI)即生效;插件会出现在设置页「工作区快速创建」。
首次发布前上面的命令会 404 —— 请先用下面的本地联调方式安装。
npm install # 首次
npm run install:local # 构建 + 软链进 ~/.dsh/profiles/web
# 重启 dsh / 刷新 Web GUI 后生效
卸载(二选一):
dsh plugin --profile web remove dsh-workspace-quick-create
npm run uninstall:local
软链安装 —— 移动/删除/改名本项目前务必先卸载,避免 Profile 里留下悬空软链。
/Users/you/Documents/deepseek_projects,保存;workspaceQuickCreate)| 方法 | 入参 | 返回 |
|---|---|---|
ping | — | { ok, pong, plugin } 连通自检 |
get-config | — | { ok, root, home } 当前根目录 + Host 家目录 |
set-root | { root }(空串清除) | { ok, root } 校验 + mkdir -p + 持久化 |
ensure-workspace-dir | { name } 单个路径段 | { ok, path } join 到根目录后 mkdir -p |
名称校验:trim 后非空、≤80 字符、不含 / \ < > : " | ? * 与控制字符、
非纯点、不以点/空格结尾;中文名完全可用。输入框对 IME 组合中的回车做了防误触。
npm run typecheck # tsc --noEmit,严格模式
npm test # 双冒烟:vm 沙箱加载真实 dist 产物并断言行为(需先 build)
npm run build # dist/host.js (ESM) + dist/client.js (__ModuleLoader__ 工厂)
| 想做什么 | 改哪里 |
|---|---|
| 加 RPC 方法 | src/shared/contract.ts 的 METHODS + src/host/service.ts 加方法 |
| 改快速创建面板 | src/client/components/QuickWorkspaceFlow.tsx |
| 改设置页 | src/client/components/RootSettingsPage.tsx |
| 加文案 | src/client/i18n.ts 的 ZH/EN 字典 |
| 加样式 | src/client/styles.ts |
| 换 UI 挂点 / 用其他客户端能力 | 先读 docs/client-modules.md,按需调整两处 inject |
0.1.x-rc.7 的 slot 拓扑(conversation.hero.workspace.directoryFlow
为 single kind);若未来版本改变洞名/语义,需同步调整 src/client/index.tsx。-10)。MIT © wqy8593521
FAQs
新建工作区快速创建:默认根目录 + 免系统文件对话框(Codex 风格)
The npm package dsh-workspace-quick-create receives a total of 7 weekly downloads. As such, dsh-workspace-quick-create popularity was classified as not popular.
We found that dsh-workspace-quick-create demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.