dsh-filetransfer
为 DSH 网页提供原生体验的文件草稿功能：暂存文件，点击“发送”确认，渲染文件卡片并下载交付文件。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:kerlyken/dsh-filetransfer#a70265661ffe4f3c70de6af77dbf5e1c8d41b6e4Filetransfer 以 dsh-filetransfer 发布，当前版本为 0.2.5。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Native-feeling file drafts and local deliverable downloads for DeepSeek Harness Web.
Uploading is stage-only: it never calls session.prompt. The file reaches the
agent only after the user presses DSH's normal Send button.
Version 0.2.5 targets @deepseek-ai/dsh 0.1.0-rc.7 and Node.js 22.19 or
newer. DSH is a developer preview, so later releases may require a compatibility
update.
DSH 0.1.0-rc.7 has a native image block but no generic file block. This
plugin stores a compact workspace-relative <dsh-file> marker in the message
and projects it as a file card in the Web UI. The internal path is not rendered
as visible conversation text.
From the directory that should be the DSH workspace:
npx @deepseek-ai/dsh plugin --profile web add github:kerlyken/dsh-filetransfer
npx @deepseek-ai/dsh --profile web --dump-config
npx @deepseek-ai/dsh web
For reproducible installs, replace the GitHub spec with
github:kerlyken/dsh-filetransfer#<commit-sha>.
Do not install @deepseek-ai/dsh-cordis-host-runner; DSH Web already ships
the Host runner.
The included cordis.patch.yml uses these defaults:
http://127.0.0.1:3199<workspace>/bridge/inbox<workspace>/deliverableshttp://127.0.0.1:3080 and
http://localhost:3080Override the filetransfer row in the profile's cordis.patch.yml when paths,
origins, or ports differ. A later patch replaces the row's entire config, so
repeat every required setting.
The core plugin has no dependency on WeCom or any other messaging platform. Trusted local integrations can opt into the same card renderer by submitting a normal user text block containing a workspace-relative marker:
<dsh-file path="bridge/inbox/example.docx"></dsh-file>
Append the user's optional instruction on the next line. Reject files outside the configured workspace before constructing the marker.
integrations/wecom/ contains optional, dependency-free reference modules for
matching WeCom's separate text and file events. That directory is tested in CI
but excluded from the npm package and is not required by the plugin.
The upload and download server binds to 127.0.0.1, checks allowed origins,
sanitizes file names, enforces path containment, and applies an upload limit.
Do not expose port 3199 to a network without adding authentication and a
separate threat model. See SECURITY.md.
npm test
npm run pack:check
The pack check should contain the plugin, tests, documentation, and license,
but not integrations/, local configuration, inbox files, or deliverables.
DeepSeek Harness currently asks community plugins to live in standalone
repositories and use the dsh-plugin
topic. External pull requests to the official repository are not currently
accepted, so this project follows that ecosystem route.