GitHubJiKe/dsh-markdown-preview

In-chat preview for produced files in DeepSeek Harness Web.

By default, clicking a produced-file chip in the DSH Web GUI hands the file to the operating system's default application (open on macOS → Xcode for many extensions). This plugin takes over the produced-files row and makes the click render the file right in the conversation — Markdown is rendered with markdown-it + highlight.js server-side, images preview inline, and any other text file shows as plain text. The old behaviors stay one click away: open in the system app, or reveal in the folder.

Features

• Click a produced-file chip → inline preview, no native app, no new tab.
• Markdown rendered properly (GFM tables, fenced code, blockquotes, links, hard line breaks) with syntax highlighting in code fences (highlight.js common languages).
• Image preview (PNG / JPEG / GIF / WebP) as data URLs — no extra route.
• Plain-text fallback for every other text file; binary files are sniffed and refused with a clear message.
• Panel header with file size, copy content, open in system app, and collapse.
• 1 MiB cap for text / 4 MiB for images, with an explicit truncation notice.
• Keeps the stock experience: chips, "+ N files", and "Show in folder" still behave as before, and inline code-mentions of produced files stay clickable.

Install

dsh plugin --profile web add dsh-markdown-preview

Restart dsh web. Requires pnpm on PATH (dsh plugin forwards to pnpm) and DSH >= 0.1.0-rc.6.

Usage

Nothing to configure. After restart, any turn that produced files shows the familiar produced-files row; clicking a chip toggles the preview panel.

How it works

• Host half (lib/index.js): registers a /preview RPC channel on ctx.connection with the loopback trust authority (the same DNS-rebinding / cross-site fence the /api surface uses). read returns the file — Markdown rendered to escaped HTML (markdown-it with html:false, safe-link policy), images as base64 data URLs, other text capped at 1 MiB with a binary NUL-byte sniff. open proxies the stock host.openPath so the native-app action is exactly the official one.
• Client half (lib/client.js): a standard dsh.client bundle. It owns the deliverables conversation-event kind and the conversation.chat.turnTail slot (the official ui-deliverables row is disabled by this bundle's patch; its prompt section and the chatFileMentions service are re-provided here), so the replacement is behavior-compatible, not a DOM hack.
• Rendering happens on the host, keeping the browser bundle thin and dependency-free.

Compared to similar plugins

Plugin	Shape	Difference
dsh-markdown-preview (this)	produced-files row takeover	Click-to-preview exactly where the official row is, zero extra surface
dsh-file-explorer	right-side file-tree panel	global panel, not the chat row
dsh-file-mentions	backtick-path mentions + tail chips	collects paths from reply text; official row wins when present
dsh-md-preview	render tool + web drawer	drawer/HTML export, not the chat row
dsh-web-preview	side web-preview panel	run/annotate projects, not produced files

Security notes

• The channel is loopback-only and behind the connection trust fence.
• Markdown is rendered with html:false; raw HTML in a document is escaped, and links are limited to http(s)/mailto/# by markdown-it's default validateLink.
• Preview caps and binary sniffing prevent accidental memory/UI abuse; the preview is read-only (no write endpoint).

Uninstall

dsh plugin --profile web remove dsh-markdown-preview

Development

git clone https://github.com/GitHubJiKe/dsh-markdown-preview.git
cd dsh-markdown-preview
npm install          # markdown-it + highlight.js for the host half
dsh plugin --profile web add file:$(pwd)
# restart dsh web; the profile symlinks your working copy, so edits to
# lib/ apply after another restart (client bundles are scanned at boot)

License

MIT