dsh-inline-media-viewer
DeepSeek Harness Web 对话中的持久化内联图像、视频和音频预览，支持受工作区限制的本地读取和可配置的 ComfyUI 代理。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Wisdoverse/dsh-inline-media-viewer-plugin#56f98287b2d0ed2c57a4ded7747c30ad4c70f260Inline Media Viewer 以 dsh-inline-media-viewer 发布，当前版本为 1.0.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Inline image, video, and audio previews for DeepSeek Harness Web
English · 简体中文
Turn media paths and URLs mentioned in a DSH conversation into secure inline previews—without copying them out of the chat log.
https://…/view?filename=frame.png → <img>
exports/demo.mp4 → <video controls>
audio/sound.mp3 → <audio controls>
| Feature | Description |
|---|---|
| Inline rendering | Displays images, videos, and audio directly below the chat turn that mentions them. |
| Workspace-safe reads | Resolves local paths with realpath and rejects traversal, out-of-workspace paths, and symlink escapes. |
| ComfyUI proxy | Fetches recognized ComfyUI media URLs server-side from the configured origin, including for remote users and HTTPS pages. |
| Bounded transfers | Limits each file or response to 48 MiB and remote requests to 20 seconds. |
| User controls | Provides auto-render, per-turn item limit, media height, and ComfyUI origin settings. |
| Type | Extensions |
|---|---|
| Images | png, jpg, jpeg, webp, gif, avif, bmp, svg |
| Video | mp4, webm, mov, m4v, mkv, avi, ogv |
| Audio | mp3, wav, m4a, aac, ogg, oga, flac, opus |
Clone the plugin into a location available to your Web profile:
git clone https://github.com/Wisdoverse/dsh-inline-media-viewer-plugin.git \
/path/to/local-plugins/dsh-inline-media-viewer
Add the bundle to profiles/web/package.json:
{
"dependencies": {
"dsh-inline-media-viewer": "link:/path/to/local-plugins/dsh-inline-media-viewer"
},
"dsh": {
"profile": {
"bundles": ["…", "dsh-inline-media-viewer"]
}
}
}
Rebuild or restart the Web profile.
The plugin mounts its host RPC channel, client projection, and settings section
through cordis.patch.yml.
Open Settings → 媒体预览 / Media preview.
| Setting | Default | Allowed values |
|---|---|---|
| Auto-render detected media | On | On / off |
| Maximum items per turn | 12 | 1–30 |
| Maximum media height | 380 px | 160–1200 px |
| ComfyUI origin | Empty | http(s)://host[:port] |
Settings are stored in the DSH settings document. Writes are available only on loopback connections; remote browsers can read settings but cannot persist changes.
http://127.0.0.1:8188.http://host[:port], https://host[:port], and bare
host[:port] (http is assumed).8188 for HTTP and 443 for HTTPS.Local aliases (127.0.0.1:8188 and localhost:8188) and the configured origin
are recognized as ComfyUI sources. A non-empty invalid address fails explicitly
instead of silently falling back to another target.
The plugin is designed as a local trust helper, not a general-purpose file or network proxy:
data: URLs rather than filesystem paths.See SECURITY.md for the complete trust model and known limitations.
| Command | Purpose |
|---|---|
node test.mjs | Run the dependency-free unit tests directly. |
npm test | Run the same unit test suite through npm. |
npm run lint | Syntax-check the host modules and test file. |
| Path | Responsibility |
|---|---|
index.js | Host RPC channel, ComfyUI proxy, and settings registration. |
lib.js | Pure, dependency-free helpers. |
client/client.js | Turn projection, media renderer, and settings UI. |
cordis.patch.yml | Bundle mounting and integration points. |
test.mjs | Unit tests for the pure helpers. |
The running Web profile serves a bundled copy. Rebuild or restart it after changing the source files.
Released under the MIT License.