dsh-randomuuid-polyfill

by lehmaning

GitHub ↗

1 UI 增强github收录于 08-23

在不安全源（纯 HTTP）上补装 crypto.randomUUID 的 dsh 客户端插件

dsh client plugin that installs crypto.randomUUID on insecure origins (plain HTT

安装

$ dsh plugin --profile web add github:lehmaning/dsh-randomuuid-polyfill

GitHub 源码安装：首次需按提示配置 allowBuilds 构建授权后重试

安装与环境配置指引、插件开发教程见 DSH 中文社区文档 ↗

安装即在你的机器上以你的权限运行第三方代码——它可读写文件、使用凭据、访问网络，DSH 的工具审批不会为插件代码加沙箱。「检测到 manifest」仅代表发现 dsh.bundle / dsh.plugin 清单，不构成兼容性或安全审查；安装前请审阅源码，不熟悉的插件先在不含密钥的环境试用。

A DeepSeek Harness client plugin that installs crypto.randomUUID when the page is not a secure context.

Why

crypto.randomUUID is gated to secure contexts (HTTPS, or localhost). When the dsh web UI is served over plain HTTP on a LAN address, every client RPC throws:

TypeError: crypto.randomUUID is not a function

The workspace picker ("open folder") is the first place most people hit it, because choosing a workspace issues a listDirectory RPC. The root cause is upstream: AbstractApiClient.mintRpcId() in packages/host/apiproxy/src/fetch/client.ts calls crypto.randomUUID() unconditionally, and the composer's browserDraftAttachment() in packages/client/ui-conversation/src/client/service.ts does the same.

This plugin restores the missing API at boot, backed by crypto.getRandomValues (available on insecure origins), so the UI works over plain HTTP without waiting for an upstream fix.

Install

Build and install the package into the harness environment, then start the web UI:

pnpm build
npm install <path-to-this-package>
npx @deepseek-ai/dsh web

The harness discovers the plugin from the dsh manifest field and injects the client bundle at boot (immediately: true).

Alternatives

Open the UI at http://localhost:3080 (SSH tunnel into the host) — localhost is a secure context, so nothing is needed.
The proper fix lives in the source: use a crypto.getRandomValues-based UUID in mintRpcId / browserDraftAttachment. A patched fork is available at Lehmaning/deepseek-harness on the fix/randomuuid-secure-context branch.