🤖 vncode

Agent IDE with core DSH.

A native cross-platform app plus a pack of standard dsh bundles. The plugins are plain JavaScript with zero npm dependencies; the launchers run on Windows, macOS and Linux (PowerShell on one side, plain POSIX shell on the other, and the Unix half never needs PowerShell).

Run

	Windows	macOS / Linux
Native window	scripts\run-desktop.bat	cargo build --release in app/src-tauri
Browser tab	scripts\run-web.bat	./scripts/run-web.sh

Both start npx @deepseek-ai/dsh@<pin> web and open the URL it prints: the native window loads it in a WebView2 / WKWebView / WebKitGTK window, the other in Chrome, falling back to your default browser. The URL is opened only when it names a loopback address, and the launch token is never written to a file - both rules are in SECURITY.md.

Flags: -Port <n> when 3080 is taken, -NoBrowser to start the server alone, -DefaultBrowser to skip Chrome, -Help anywhere.

The desktop shell answers the two questions worth asking while it starts: whether a DeepSeek key was found and which layer supplied it (the environment, $DSH_HOME/.credentials.yaml, or a .env), and which harness home this run will use. That is why installing a newer release over an older one is a non-event: sessions, settings and the key live in ~/.dsh, not in the folder you replaced. The key's value never leaves the shell. Details: app/README.md.

Plugins (all alpha)

Every package's own README is the reference for what it does, why it is built that way and what it touches. The exact versions are in .dsh-version.json.

Package	What it adds
dsh-vn-master	the blank master, installed last - the slot pack-wide patches go in
dsh-rightbar	the pack's own right bar: tab strip, docking panel and the sidebarRight registry (a fork of the shipped bar)
dsh-rightbar-files	the Files tab type on top of that bar
dsh-editor	text and code tabs (vendored CodeMirror 6), with a Markdown preview and Save/Create
dsh-gittree	read-only History tab: the workspace's commits as a graph rail (lanes, merges, PR chips), and the files each one touched
dsh-image	an image viewer that fits, zooms, pans, and reads the source pixel under the pointer
dsh-audio	a waveform surface: WAV/AIFF/FLAC, one track per channel, dBFS, selection and playback
dsh-media	media the agent can work with: media_probe / media_run / media_frames over a pinned, SHA-256-verified ffmpeg copy, plus the routes the video tab streams through
dsh-video	a player tab that streams and seeks any video container, with an ffprobe facts panel, chapter jumps and a one-click remux when the browser cannot decode it
dsh-diagrams	Mermaid and TikZ as tabs and six agent tools, every write validated before it is stored
dsh-pdf	PDF as a surface the agent can read and scan, plus a reader tab with thumbnails and bookmarks
dsh-skills	the Skills browser: a header button left of the zoom control opens every skill this conversation loads, with its markdown and inline editing
dsh-terminal	a real shell in a bottom dock (vendored xterm.js over the harness's own node-pty)
dsh-themes	header controls (themes incl. Nord/Monokai/Hacker, screenshot, page zoom), the Markdown paper, VN branding
dsh-ui-state	the pack's own UI state (zoom, theme, dock, column widths) remembered host-side
dsh-modal	the shared dialog surface (modals) the pack's controls use
dsh-open-in-app	Open In… patched to open the OS file browser directly

The pack used to ship its own Files panel (dsh-files, earlier dsh-focus); that was retired when the harness grew a real right Sidebar, and the installer prunes the old names so an upgrade cannot double-mount.

Security & license

• MIT - see LICENSE. Plugins are authored by vecnode.
• SECURITY.md: the threat model, the launch token, what the pack deliberately does not do, and how check-no-secrets.mjs keeps a credential out of a commit. Report a vulnerability privately, as described there.
• ARCHITECTURE.md is the deep dive; docs/ holds install, distribute, compatibility and per-host notes.