@baseland/dsh-evidence
用于安全多文件上传、原生图像、本地文档检索以及支持坐标感知的文本/PDF/DOCX/XLSX/PPTX 读取的独立社区 DeepSeek Harness 插件。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Cooberped/dsh-evidence#8bc0418593b4349ab4a6987d33cc86a21399a840Evidence 以 @baseland/dsh-evidence 发布，当前版本为 0.6.0-beta.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Attach files in DeepSeek Harness and let the model actually read them.
Upload files or a whole folder from the Web composer. Parsing and indexing stay on your machine. The model searches for compact evidence and expands only the exact page, slide, line range or spreadsheet range it needs — instead of pasting whole documents into the prompt or shelling out to Python. Raster images stay on Harness' native vision path.
[!IMPORTANT] Source beta — not published to npm yet.
@baseland/dsh-evidence@betadoes not exist on npm at this time. Use the source install below.The GitHub repository stays at Cooberped/dsh-evidence. The npm package is
@baseland/dsh-evidencebecause the npm organization@cooberpedcould not be claimed.
That way, a file becomes evidence you can locate and read back on demand, instead of pasting the whole document into the prompt.
You need the DeepSeek Harness CLI with the web profile (currently tested against npm @deepseek-ai/dsh@0.1.7-rc.2), Node.js >=22.13.0, and pnpm on PATH.
DeepSeek Harness 0.1.7 or higher is required. The current code uses the …Regular icon names and pins the @deepseek-ai/dsh-* peer dependencies at 0.1.7-rc.2. On 0.1.6 and earlier, the upload icons do not match, and neither do the peer dependencies. This repository has no release tag for the older versions; if you still need to run ≤ 0.1.6, use the code from before that change, or upstream taxueseek/dsh-files.
git clone https://github.com/Cooberped/dsh-evidence.git
cd dsh-evidence
pnpm install --frozen-lockfile
pnpm build
dsh plugin --profile web add . # link this checkout into the web profile
dsh --profile web --dump-config # confirm the bundle layer is present
dsh web # restart
The install is a link to this checkout: after pulling updates, re-run pnpm install --frozen-lockfile && pnpm build and restart. Remove it with dsh plugin --profile web remove @baseland/dsh-evidence.
Once trusted publishing and the license checks before the first publish are finished, installation becomes:
dsh plugin --profile web add @baseland/dsh-evidence@beta
# restart dsh web
This is a future command. It does not work today.
Profile and plugin setup follows the official Harness plugin reference and bundle publishing guide.
AI-readable.Prompts that work well:
Index these three files first. Do not summarize them yet.
Across these files, find the definition and formula for the Q3 retention metric.
Give the source file and exact page, slide, line range, or Sheet!Range for every claim.
Compare the meeting decision with the workbook target.
If the documents do not contain enough evidence, say what is missing instead of guessing.
search_documents | read_document | |
|---|---|---|
| Use it to | find where the answer is | read what is at a place |
| Key inputs | file_paths, optional short query | file_path + coordinate/version, or offset/limit, or sheet/cell_range/list_sheets |
No query | indexes changed content and returns a compact inventory — good for "read these first" | — |
| Returns | ranked evidence blocks, each with path, format, text, coordinate and version | a paged window of the document, or one coordinate expanded exactly |
Two rules hold the loop together:
coordinate makes version mandatory, and it is checked before any content is returned. Edit the file and the old coordinate fails loudly instead of quietly reading the wrong lines.| Input | Text extracted locally | Stable coordinate | Current boundary |
|---|---|---|---|
| Text | UTF-8, UTF-16 BOM, high-confidence BOM-less UTF-16, GB18030 | line:S-E, optional chars:S-E | Other encodings and binary files are rejected |
| Text-layer extraction, page-preserving | page:N, optional local line/character range | No OCR for scanned or image-only pages | |
| DOCX | Body, paragraphs, tables, headers, footers, footnotes, endnotes | line:S-E, optional chars:S-E | No image OCR; not a pixel-faithful Word renderer |
| XLSX | Sheet inventory, cell values, ranges, row/column coordinates | quoted Sheet!A1:F40 | No formula calculation, chart/shape interpretation, or macro execution |
| PPTX | Slide-order DrawingML text and speaker notes | slide:N, optional local line/character range | No slide-image OCR, chart data, SmartArt, animation, or embedded objects |
| JPEG/PNG/WebP/GIF | Native Harness image attachment | Harness attachment identity | Needs a vision-capable model; not parsed by read_document |
The format is decided from the bytes, never the extension — an executable renamed to .pdf is rejected. Long output is paged and character-bounded, and every truncation is visible.
Composer and upload
DataTransfer.items and DataTransfer.files, so a mixed batch is not silently reduced to the first recognized file.4); one failure does not cancel the batch.uploading / AI-readable / failed states.@ candidates cover uploaded and workspace files, and are shown as workspace-relative paths rather than host absolute paths.Local retrieval
流程绩效 does not match a block containing only 绩效流程. Single characters use a bounded substring fallback; ASCII tokens such as Q3 stay whole.Exact document reads
Native vision handoff
image_url path.The bundle ships conservative defaults in cordis.patch.yml. Harness applies user profile overlays after bundle layers, so inspect the composed result before boot:
dsh --profile web --dump-config
| Setting | Default | Meaning |
|---|---|---|
maxFileBytes | 24 MiB | Maximum bytes for one document read |
uploadMaxBytes | 24 MiB | Maximum bytes for one upload body |
maxUploadBytesPerSession | 512 MiB | Session upload quota; 0 explicitly disables it |
readLimit | 2,000 in the bundled patch; schema fallback 800 | Maximum lines returned by one read_document call |
maxOutputChars | 24,000 | Base character window; narrative formats get smaller format-specific windows |
maxConcurrentUploads | 4 | Admitted upload bodies |
uploadTtlMs | 7 days | Uploaded-file retention |
retrievalEnabled | true | Enables search_documents; read_document remains available when false |
retrievalMaxFiles / retrievalMaxResults | 12 / 12 | Files per search call / evidence blocks returned |
retrievalQueryLogEnabled | false | Persist normalized model queries for local tuning |
trustedHosts | [] | Additional reverse-proxy authorities; empty means loopback only |
Less common settings and their authoritative defaults live in src/index.ts. An explicit retrievalIndexDir must be an absolute private path; ~ is not expanded.
Runtime backend. The package requires Node.js >=22.13.0 (what pdfjs-dist requires), and Node 20 reached end of life on 2026-04-30. A persistent retrieval index also needs the runtime to provide node:sqlite with FTS5 compiled in. When the startup probe finds either missing, the complete but process-local JS backend takes over. The fallback is supported and reported in tool output.
ctx.fs; when a session cwd exists, the target must stay inside the active session workspace.trustedHosts exists only for a deployment-controlled reverse proxy.
trustedHostsis not authentication. The current Harness WebServer plugin conventions cannot prove that a supplied session ID belongs to the caller. Do not expose this plugin as an unauthenticated public multi-tenant upload service. Use loopback-only self-hosting, or an authenticated proxy that also constrains session access.
| Store | Default | Contains | Lifecycle |
|---|---|---|---|
| Uploads | <session-workspace>/.dsh-filess/<storageKey>/ | Uploaded file bytes | Per-session quota, SHA-256 dedup, default 7-day TTL sweep |
| Retrieval index | $DSH_HOME/dsh-files/index | Index contents for search, coordinates, versions; queries only when explicitly enabled | Private permissions, document/query TTL, JS memory fallback when persistence is unavailable |
| Project | Public source beta, independently maintained by Cooberped |
| Currently tested against | npm @deepseek-ai/dsh@0.1.7-rc.2 with the web profile |
| Minimum version | 0.1.7 or higher. On 0.1.6 and earlier, the upload icons do not match, and neither do the peer dependencies. To run an older Harness, use the code from before that change, or upstream taxueseek/dsh-files. There is no release tag for those older versions |
| Tested with | OpenCode Go — DeepSeek V4 Flash |
| npm | Not published. The install name is @baseland/dsh-evidence@0.6.0-beta.1, under the maintainer's npm account baseland, because the npm organization @cooberped could not be claimed. GitHub remains Cooberped. Trusted publishing and the license checks before the first publish are not finished |
| Compatibility | Newer Harness source versions have not been tested separately, so compatibility is not guaranteed yet |
This is not an official DeepSeek plugin and is not affiliated with or endorsed by DeepSeek.
This repository retains the MIT-licensed git history of taxueseek/dsh-files, including attribution and the MIT notice, and is maintained independently (it has left the GitHub fork network). It is not a clean-room rewrite.
Beyond upstream upload and read_document, this repository adds local private retrieval (search_documents), version-checked coordinates, stronger upload/path/OOXML bounds, PPTX text and speaker notes, CJK-aware retrieval, and community release and governance.
pnpm install --frozen-lockfile
pnpm typecheck
pnpm test
pnpm benchmark:retrieval
pnpm license:check
pnpm package:check
pnpm release:check # everything above, for a final candidate
release:check covers type checking, both bundles, focused regression tests, dual-backend retrieval correctness, license policy, and the package publish requirements. The benchmark uses deterministic synthetic PDF/DOCX/XLSX/PPTX fixtures — real business documents, answer sets and model outputs stay outside the repository (see benchmark/README.md).
Issues and pull requests are welcome. Contributions are reviewed and merged by maintainers after required checks; GitHub does not merge community code automatically.
Fixes for Harness UI, peer, or upstream API breakage are especially welcome — the 0.1.7 icon rename to …Regular names is one example. See CONTRIBUTING.md.
Before opening a PR: read CONTRIBUTING.md and sign off commits for DCO; add focused tests for behavior changes; run the smallest relevant checks locally; keep real documents, credentials, private paths and model outputs out of Git; and record every new visual asset in assets/README.md.
Security reports follow SECURITY.md. Release ownership and provenance checks are described in RELEASING.md.
Project code and the original SVG documentation graphics are licensed under the MIT License. Upstream history and copyright notices are retained. Dependency and bundled-data notices are in THIRD_PARTY_NOTICES.md.
DeepSeek, DeepSeek Harness, OpenCode Go and other third-party names or marks belong to their respective owners and are used only to identify compatibility or a test target. Asset provenance is recorded in assets/README.md.