dsh-table-attach
将非图片文件（xlsx/csv/pdf/zip…）粘贴或拖放到 DSH 网页编辑器中：文件会保存到会话工作区，并插入一个 @reference。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:yybukn/dsh-table-attach#02246642068df431282cb5fc8c09d39985706983Table Attach 以 dsh-table-attach 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Paste or drag tables & documents (.xlsx, .csv, .pdf, .zip, …) into the
DSH web composer. The file is saved into the current session's workspace and an
@reference is inserted at the caret, so the agent reads the real file.
The official DSH composer only accepts images (PNG/JPG/WebP/GIF) on paste/drop. This plugin adds non-image file attachments.
⌘C a file, then paste) and drag-and-drop.<workspace>/attachments/
(auto-renamed with a -1/-2… suffix on name clashes).@reference: e.g. @attachments/report.xlsx (quoted as
@"attachments/my report.xlsx" when the name contains spaces) — matching the
host's @-mention grammar so the agent can read the file..exe, .dll, .sh, .js, …), and path-traversal-proof file names.Currently distributed from GitHub (npm publishing pending):
dsh plugin add github:yybukn/dsh-table-attach
For local development:
dsh plugin --profile web add /path/to/dsh-table-attach
.xlsx / .csv / .pdf / .zip … into the composer, or copy a
file and paste it into the composer.@attachments/<file>.Pasting table cell text (copied out of Excel) is treated as ordinary text and passes through untouched; it is not converted into a file.
lib/index.js) registers a Typert Remote service
tableAttach.saveFile(agent, payload). It validates the payload, keeps the
path inside the session workspace, de-duplicates file names and writes with
0o644. It runs as a cordis plugin (no build step — plain ESM + zod).lib/client.js) is a web bundle. It intercepts
paste/dragenter/dragover/drop at the document level before the
conversation plugin's handlers, base64-encodes the file, calls the host
remote, and inserts the @mention into the composer (which is a
Lexical contenteditable — insertion goes through
execCommand("insertText"), the same beforeinput path the editor itself
uses)..exe, .dll, .app, .sh, .js, .jar, …) are
blocked.dsh-table-attach/
├── lib/
│ ├── index.js # host: cordis plugin + Typert Remote service
│ └── client.js # browser: interception, upload, composer insertion
├── cordis.patch.yml # loader entry for the host bundle
├── dsh.plugin.json # plugin manifest
└── package.json # exports ./client for the web platform
The host runs in the DSH harness (Node); the client runs in the web GUI. When
installed from npm the host's peer deps (@deepseek-ai/cordis,
@deepseek-ai/dsh-typert-protocol, zod) resolve from the profile's shared
dependency closure. A local link: install outside the profile needs those
deps made resolvable (e.g. node_modules symlinks into the app bundle) — these
are not part of the package and are git-ignored.