deepseekplugins

DeepSeek Harness plugin

dsh-file-mention

Session-scoped @file/@folder mentions in the composer with Git-aware indexing, drag-drop and paste managed uploads, and validated path markers.

UI Enhancements
Jump to install

Source facts

Repository
tipoLi5890/dsh-file-mention
Latest update
Aug 19, 2026
Category
UI Enhancements
GitHub stars
1

Install

Start with a prompt that asks an agent to read the source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to read the page and repository first.

Do not install anything yet. Read this DeepSeek Harness plugin and explain what it does, which files, networks, or credentials it can access, and how to install and remove it.

Plugin page: https://deepseekplugins.org/plugins/tipoLi5890/dsh-file-mention
GitHub: https://github.com/tipoLi5890/dsh-file-mention
Plugin: dsh-file-mention
Author: tipoLi5890
Install command: dsh plugin --profile web add github:tipoLi5890/dsh-file-mention

Do not run the install command until I confirm.

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-file-mention

![Awesome DSH Plugin](https://awesome-dsh-plugin.com)

> Traditional Chinese: [README.zh.md](README.zh.md)

Secure, session-scoped @ file/folder mentions and drag-and-drop file intake for the DeepSeek Harness (DSH) Web composer.

The plugin inserts lightweight path references. It does not attach or inject file content: immediately before an agent step, the Host validates each path and adds a path-only <workspace-reference> marker. The agent then decides whether and how to inspect the target with its own tools.

Features

  • Files and folders — bare @ opens a workspace list; continue typing to

filter by basename or path.

  • Git-aware index — tracked files plus untracked non-ignored files; deleted

tracked paths are removed. Non-Git workspaces use a bounded filesystem walk.

  • Controllable index — nested .aiinclude rules can add required ignored

files with last-match-wins semantics; dirty/mtime metadata, monotonic indexVersion, and workspace invalidation keep changed files current.

  • Fast typing — one per-session index request, warm() prefetch,

single-flight loading, 30-second stale-while-revalidate, local ranking, and optional recent-path prioritization.

  • Unambiguous references — picks retain the full relative path. Paths with

spaces use @"quoted path" syntax.

  • Validated markers — agent/pre-step checks workspace confinement,

symlink-resolved location, existence, and file/directory kind without reading content.

  • Keyboard completion — arrows + Enter or Tab through the input-trigger

controller.

  • Managed drag-and-drop — streaming temp files, atomic no-clobber finalize,

per-file/session/global quotas, retention cleanup, progress, and cancellation.

  • Paste-to-upload — pasting non-image files routes them through the same

managed pipeline instead of failing in the built-in image intake; pure rail-image pastes still reach the image rail.

  • Caret-preserving insertion — uploaded @ paths insert at the caret

recorded before the upload through the frozen slash/input-insert-text contract (draftRev CAS with caret remap), falling back to append.

  • Reference tray — compact file/folder cards below the composer support copy,

reveal, single removal, and batch clear without altering surrounding text.

  • Control Center — Overview, Index, Uploads, and Output tabs expose live index

diagnostics, storage meters, ignore presets, index rebuild, and expired-upload cleanup instead of a flat settings form.

  • Candidate context — optional changed-file status labels and browser-local

recent-path history improve repeated navigation without sending history to the Host.

  • Official UI slots — the tray, Control Center, and optional Host-validated

assistant output path companion use supported DSH integration points.

  • Zero build — hand-written Host ESM and lazy-CJS browser bundle; React is

supplied by the DSH Client runtime.

Screenshots

Browse workspace files and folders

<img src="./assets/screenshots/file-mention-browse.png" alt="Browsing workspace files and folders from the at-mention menu" width="100%">

Filter and select a file

<img src="./assets/screenshots/file-mention-search.png" alt="Filtering README files from the at-mention menu" width="100%">

Configure file mentions

<img src="./assets/screenshots/file-mention-settings.png" alt="File mention settings page" width="100%">

Drag a local file into the composer

<img src="./assets/screenshots/file-mention-drag-drop.png" alt="Dragging a local file into the DSH Web composer" width="100%">

Use a managed upload from the Reference Tray

<img src="./assets/screenshots/file-mention-upload-reference.png" alt="A managed upload shown in the Reference Tray and inserted as an at-path reference" width="100%">

Installation

Requires a compatible DSH Web profile with the client input-trigger, runtime, and locale services.

dsh plugin --profile web add github:tipoLi5890/dsh-file-mention

For local development:

dsh plugin --profile web add link:/absolute/path/to/dsh-file-mention
dsh --profile web --dump-config

Restart DSH Web after install/update.

Usage

ActionResult
@Opens a shallow, ranked workspace file/folder list
@readmeFinds basename matches such as README.md
@src/maSearches the full relative path
Pick src/main.jsInserts @src/main.js
Pick docs/file with spaces.mdInserts @"docs/file with spaces.md"
Pick docs/Inserts @docs/
Arrow keys + TabAccepts the highlighted files candidate
Drop a non-image fileCopies it to managed uploads and inserts its path at the caret
Paste a non-image fileUploads it the same way and inserts its path at the caret

Outside-root browsing through @/, @~/, or @../ is intentionally not part of the picker. The Host index root always comes from the addressed session.

How it works

Host

POST /api/file-mention/index accepts { "sessionId": "..." }. The Host derives cwd from session state, builds/caches a Git or fallback index, and returns relative file/folder paths only.

POST /api/file-mention/upload?sessionId=&name= streams one raw body to a temp file, checks configured per-file/session/global quotas, atomically finalizes it under <DSH_HOME>/uploads/<sessionId>/, and returns its managed absolute path.

POST /api/file-mention/settings owns durable plugin settings. POST /api/file-mention/status returns path-free index/storage aggregates for the Control Center. POST /api/file-mention/maintenance rebuilds the addressed session index or removes uploads past their configured retention period. POST /api/file-mention/path-action validates and reveals only current-workspace or managed-upload paths via structured execFile argument arrays.

At agent/pre-step, direct user mentions are revalidated. Relative paths must remain inside session.cwd; absolute paths are marked only when they resolve inside the managed upload root. The resulting marker looks like:

<workspace-reference path="src/main.js" kind="file" />

Browser

The browser registers an @/files input source. It fetches the complete bounded index once per session, ranks locally on every keystroke, optionally uses browser-local recent-path counts as a tie-breaker, and returns a plain-text insertion outcome. Connection reset clears all index state.

Capture-phase drag handlers claim drags containing non-image files. XHR exposes progress/cancel while the official conversation.input.dock draft action appends the returned references; no textarea DOM mutation fallback is used.

Limits

LimitValue
Index entries20,000
Non-Git traversal depth32
Client menu rows40
Host/Client index freshness30 seconds
Dropped file50 MiB each
.aiinclude files50
JSON request body256 KiB
Session upload quota250 MiB (configurable)
Global upload quota2 GiB (configurable)
Upload retention7 days (configurable)

Git repositories honor .gitignore. The non-Git fallback skips hidden entries, symlinks, VCS metadata, dependencies, caches, and common build outputs.

Development

npm run check

No dependency installation or build step is required. See:

  • [Architecture](docs/ARCHITECTURE.md)
  • [Security model](docs/SECURITY.md)
  • [Host API and settings reference](docs/API.md)
  • [Development and release workflow](docs/DEVELOPMENT.md)
  • [Changelog](CHANGELOG.md)

License

[MIT](LICENSE) © 2026 dsh-file-mention contributors

Back to searchOpen GitHub repository

More related plugins

View category