@crosery/dsh-drop
将文件拖放或粘贴到 dsh Web 中，并通过统一预览栏查看；保留原生图像，仅在发送时添加文件引用。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Crosery/dsh-drop#37eaafc0137a09d78197c812cb32197a73f8663e
Drop 以 @crosery/dsh-drop 发布，当前版本为 0.1.3。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English · 中文
Drag or paste files into DeepSeek Harness Web. Images and files share one preview rail; your draft stays clean. File paths are appended only when you send.
Requires DSH Web from the 0.1.1 train or later (verified against 0.1.1-rc.2, 0.1.2-rc.1, 0.1.2-alpha.5, 0.1.3-alpha.2, 0.1.5-rc.1, 0.1.5-rc.2, 0.1.5-alpha.1 and 0.1.5-alpha.2), pnpm on PATH and an even Node major supported by DSH (CI: 22.19 / 24). Install the prebuilt release, then restart the profile:
dsh plugin --profile web add https://github.com/Crosery/dsh-drop/releases/latest/download/dsh-drop.tgz
The tarball includes both compiled halves, so installation does not run a plugin build. For a pinned install, replace latest/download with download/v0.1.3. The repository also ships the built halves, so dsh plugin --profile web add github:crosery/dsh-drop installs with no build approval; prefer the tag-pinned tarball for reproducibility. Do not install a second copy if your local patch already mounts @crosery/dsh-drop.
dsh plugin --profile web remove @crosery/dsh-drop
Restart after removal too. Source builds and release procedure.
| Input | Delivery | Preview |
|---|---|---|
| PNG / JPEG / WebP / GIF | Native image attachment; existing model, size and count validation | Thumbnail and image lightbox |
| Other images | File reference | Image element, if the browser supports it |
| Video / audio | File reference | Native browser playback, codec-dependent |
| File reference | Browser PDF viewer, when available | |
| Markdown / code / logs / CSV / HTML | File reference | Escaped text, first 64 KiB; HTML is not executed |
| Office / iWork / archives / unknown files | File reference | Filename, size and format badge; no in-page document renderer |
| Folders | Skipped with a notice | No recursive upload |
A non-image file becomes an @path, not a new model content block. The model must explicitly use a file tool to read it; a large log costs only a path until then. This plugin adds no model tool. It complements DSH Viewer, which displays files from the model back to you.
A browser File does not expose its OS path. If the transfer also carries a local file:// hint, the Host compares size and modification time (2-second tolerance) and reuses a matching regular file. Unrepresentable reference paths fall back to staging. Metadata matching is a heuristic, not byte identity or a permission check.
Otherwise bytes stream into $DSH_HOME/drops/YYYY-MM-DD/. Completed copies publish without overwriting another drop, including concurrent uploads. Edits to a copied file do not update the original. For a dependable workspace reference, use the composer's @ completion. A remote agent must be able to read the Host path; this plugin does not synchronize files to remote workspaces.
Namespace crosery-drop in $DSH_HOME/settings.yaml; settings changes apply live.
| Key | Default | Meaning |
|---|---|---|
| maxBytes | 536870912 (512 MiB) | Maximum bytes per staged file; must be positive. |
| keepDays | 30 | Retention by date directory; 0 disables pruning. |
Cleanup runs at activation and when retention changes. It deletes expired date-named directories, including manually added contents inside them; other names and loose files are untouched. Removing a card does not delete the staged copy.
No third-party upload service, analytics, automatic execution or archive extraction. Staging is a Host write endpoint: names are reduced to one segment, size is bounded, simple cross-site POSTs are refused, and no CORS access is granted. This is not authentication. Keep DSH loopback-only or behind authenticated access; do not expose its host authority to untrusted users. Same-origin plugins can act with the page's authority.
SVG remains inside an image element, HTML is escaped text, and PDF blobs are forced to application/pdf. Preview UI does not offer top-level blob navigation. The default retention is not secure erasure. See development and security boundaries.
npm ci
npm run typecheck
npm test
npm run build
npm run check
npm run check:dist
This repository is self-contained and uses public pinned dependencies, not a sibling checkout. AGENTS.md routes contributors to the paired development, PR, release and compatibility docs. Four workflows cover CI, deterministic PR review, gated Release and scheduled upstream drift detection.
MIT, including the original project icon and synthetic demo assets. Source originated in Crosery's plugin workspace; this is its standalone distribution repository.