@softspark/dsh-file-preview
DeepSeek Harness 的对话内只读文件预览：包含经会话授权的主机 Remote 和用于清理内容的浏览器模态窗口，以一个配置文件包的形式安装。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:softspark/dsh-file-preview#f42f4981bcf189ade05ccde9b3cf54438c96b2b1File Preview 以 @softspark/dsh-file-preview 发布，当前版本为 2.0.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Read-only file preview inside a DeepSeek Harness conversation. Click a file the agent produced or mentioned and it opens in the browser, instead of launching a desktop application.
Works on the published harness. No patch, no fork, no modified checkout.
0.1.2-rc.1 support through its Session Remote opener and immutable host event snapshots.Version 2 requires DSH 0.1.2-rc.1. Keep plugin 1.0.0 when using DSH 0.1.1-rc.2.
Without it, opening a file from a conversation hands the path to the host operating system. That is the wrong gesture when the harness runs on a remote machine, in a container, or when the file is a diff you want to glance at without leaving the page.
0.1.2-rc.1pnpm for the profile plugin managerdsh plugin --profile web add @softspark/dsh-file-preview --save-exact
Restart DSH. The package registers both of its rows itself.
| Kind | Formats | Bound |
|---|---|---|
| Text and code | .txt .md .json .yaml .toml .csv .ts .js .py .go .rs .sql and more | 1 MiB |
| Markup | .html .svg, sanitised to an allowlist | 1 MiB |
| Images | .png .jpg .gif .webp | 8 MiB |
| Documents | .pdf | 8 MiB |
Anything else reaches the harness's own opener untouched, exactly as before the plugin was installed.
Every conversation file-open in DSH 0.1.2 reaches remote.session.openWorkspacePath({ path }). The browser half wraps its getter while preserving the native request, cancellation signal, and caller context. Removing the package restores the original descriptor.
If a future harness stops exposing that method, the plugin refuses to mount rather than silently swallowing clicks.
A preview must not become an arbitrary host-file read. Authorization is computed on the host from session facts alone: a file is readable when it sits inside the addressed session's workspace, or when that same session produced it through a successful write or edit. Failures never carry file bytes, and both refusal grounds return the same code so a rejection cannot be used to probe for a file's existence.
Full model in kb/reference/security.md and SECURITY.md.
| Document | Purpose |
|---|---|
| Architecture | The two halves and the interception seam |
| Security model | Authorization, bounds, sanitization |
| Setup | Install and confirm |
| Common issues | Why a preview refuses or does not open |
| Release SOP | How a version ships |
| Post-release SOP | Registry provenance, browser behavior, and authorization checks |
See CONTRIBUTING. pnpm run verify is the gate.
Apache-2.0. See LICENSE and NOTICE.
See CHANGELOG.md for the full release history.