dsh-rich-artifacts

中文 | English

A DeepSeek Harness (dsh) dual-face plugin that turns workspace files into chat artifacts: raster images render inline in the conversation, other files become download cards.

No more file:///... links or “the file is in output/” — when the model creates a user-facing file, it calls publish_artifact and the file is durably delivered through the chat UI.

Features

• publish_artifact tool

- path (required): workspace file to publish - title (optional): display title - display: auto (default) · inline · download

• ArtifactStore

- SHA-256 content-addressed blob storage - metadata stored separately under ~/.dsh/artifacts/v1/

• Durable session event artifact/published

- only artifact metadata enters the session log - historical sessions keep showing artifacts after reload / fork

• HTTP endpoints

- GET /api/artifacts/:id/content — inline-safe preview - GET /api/artifacts/:id/download — attachment download

• Web UI turn-tail gallery

- PNG / JPEG / WebP / GIF render inline - everything else gets a file card with a download button

• Security

- workspace containment via fs.resolve + fs.contains - final-component symlink rejection - magic-byte MIME sniffing (a .png that is actually HTML will not inline) - SVG / HTML are download-only in V0.1 - file size, image size and image-pixel limits

Install

dsh plugin --profile web add github:Inkotake/dsh-rich-artifacts

For a locked, reproducible source install:

dsh plugin --profile web add github:Inkotake/dsh-rich-artifacts#<commit>

Then restart dsh web (or the profile you installed into).

Usage

The plugin registers a system-prompt section, so the model should call the tool on its own when it creates a deliverable. You can also ask for it directly:

Create a training-loss chart, export it to CSV, and publish both files as artifacts.

The agent then runs:

publish_artifact({ "path": "output/loss.png", "display": "auto" })
publish_artifact({ "path": "output/loss.csv" })

and the turn tail shows the image inline plus a CSV download card.

Configuration

In the profile cordis.patch.yml:

- id: dsh-rich-artifacts
  name: dsh-rich-artifacts
  config:
    root: ~/.dsh/artifacts
    maxFileBytes: 104857600
    maxTurnBytes: 524288000
    maxImageBytes: 20971520
    maxImagePixels: 40000000
    inline:
      png: true
      jpeg: true
      webp: true
      gif: true
      svg: false

Build

pnpm install
pnpm run build

lib/index.js is the ESM host plugin, lib/client.js is the browser bundle (window.__ModuleLoader__.load(...)). Both are committed so source installs work without a build step.

Test

node tests/artifact-store.test.mjs

Architecture

DeepSeek Agent
     │  creates file
     ▼
Workspace File
     │  publish_artifact
     ▼
ArtifactStore ──────────────► artifact/published session event
     │                                  │
     │ (blob + metadata)                │ (artifact_id + metadata)
     ▼                                  ▼
HTTP /api/artifacts/:id/*        Session log (replayable)
     │                                  │
     └──────────────┬───────────────────┘
                    ▼
              Web UI turn-tail
              ┌─────────┴──────────┐
              ▼                    ▼
        ImageArtifact         FileArtifact

Notes

• artifact/published is a log-only event. Because the current harness has no

registration surface for out-of-repo session event types, the host adds it to KNOWN_SESSION_EVENT_TYPES at startup so persisted sessions remain loadable while the plugin is installed.

• MIME type is decided by magic bytes first; extensions are only a secondary hint.
• SVG and HTML are intentionally not inlined in V0.1.

License

MIT