dsh-upload-plugin

DSH PLUGIN视觉与多模态

仓库 danhcng3822f/dsh-upload-plugin

视觉与多模态 L5 · 运行验证通过 安全审查:低风险 可信度:金 可安装插件
安装这个插件

为 DeepSeek Harness 聊天输入框加上「添加图片 / 添加文件 / 已上传文件」菜单,支持 Vision 校验、按会话隔离与图片自动压缩。

一句话选型结论

按资料字段整理

dsh-upload-plugin 是视觉与多模态类的 DSH 可安装插件,验证等级 L5 · 运行验证通过,安全审查为低风险,列出 5 项功能,有可直接复制的安装命令。验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么;涉及密钥或系统权限的,建议先在隔离环境试装。

分类视觉与多模态 收录类型可安装插件 验证等级L5 · 运行验证通过 安全审查低风险
验证等级 L5 L5 · 运行验证通过
GitHub 星标 0 复刻 0 · 未关闭 issue 0
最近更新 2026-09-27 创建于 2026-09-14
README 14.4 KB 正文体量,越大说明说明书写得越细

安装

可安装插件
在 DSH 里执行,装完用 dsh plugin list 确认已挂上;标了 L4 / L5 的命令已在沙盒里真实跑通
dsh plugin --profile web add github:danhcng3822f/dsh-upload-plugin
  1. 1
    确认版本与运行环境

    兼容的 DSH 版本为 0.2.0-rc.2 等 6 个;版本不匹配时安装会报错。

  2. 2
    执行安装命令

    在 DSH 里执行上面的命令;多包仓库要注意区分具体子包名,别装错包。

  3. 3
    确认已挂载

    用 dsh plugin list 查看列表里是否出现这个插件,出现即挂载成功。

  4. 4
    试跑并检查权限

    加载后跑一个最小用例,确认它能正常工作;同时看它申请了哪些文件、命令或网络权限。

兼容 DSH 版本0.2.0-rc.2 等 6 个版本版本不匹配时安装会报错
Node.js 要求未标注来自仓库 package.json 的 engines 字段
前置依赖无需要同时安装的同级依赖
npm 包名未发布到 npm可用 npm view 查看包信息

能做什么

5 项功能
字段来自项目仓库与公开索引,中文说明由本站标注

dsh-upload-plugin:DeepSeek Harness 聊天附件上传入口

  • 加号菜单上传图片与文件
  • 按会话隔离已上传文件
  • 超 4.5MB 图片自动压缩
  • 校验模型是否支持 Vision
  • 附件卡片适配明暗主题

适用场景

视觉识别

上游标签

deepseek-harnessdshdsh-plugindsh-plugins

验证等级与安全审查

L5 · 运行验证通过
自动化流程结论,不是人工审核
验证等级L5 · 运行验证通过在 dsh 沙盒中完成安装与运行冒烟——装得上、跑得起来
安全审查低风险静态分析结论,未标注不代表已通过审查
仓库健康度活跃按仓库活跃度与最近更新时间给出
可信度金综合仓库活跃度与验证结果

上面的结论来自上游最近一次自动化验证(2026-10-08): 同一套检查会在插件发新版后重跑,页面显示的是最新一次的逐项结果。

逐项检查结果

L1 · 已找到 ✓ 通过
  • L1.0_DEFAULTED_FROM_L3 由 L3 推定 默认通过——L3 安装规范已通过(全库 L3 扫描策略)
L2 · 结构化 ✓ 通过
  • L2.0_DEFAULTED_FROM_L3 由 L3 推定 默认通过——L3 安装规范已通过(全库 L3 扫描策略)
L3 · 安装规范 ✓ 通过
  • L3.1_INSTALL_COMMAND_PARSED 安装命令已解析 方式:安装规范解析
  • L3.2_DSH_VERSION_DECLARED DSH 版本已声明 方式:DSH 版本声明
L4 · 安装已测 ✓ 通过
  • L4.1_INSTALL_EXECUTED_CONFINED 受限沙盒内执行安装 方式:沙盒安装执行
  • L4.2_INSTALL_SUCCESS 沙盒安装成功 方式:沙盒安装执行
  • L4.3_ARTIFACT_CONFIRMED 安装产物已确认 方式:沙盒安装执行
L5 · 运行已测 ✓ 通过
  • L5.1_INSTALL_PASSED_SANDBOXED 沙盒安装通过 方式:沙盒安装执行
  • L5.2_WEB_BOOT_READY Web 启动就绪 方式:Web 启动
  • L5.3_HTTP_SERVED HTTP 服务响应 方式:HTTP 请求
  • L5.4_PLUGIN_INVENTORY_ACTIVE 插件清单中已激活 方式:插件清单查询
— · 其它检查项
  • L4_0_SANDBOX 沙盒安装判定 方式:沙盒安装执行

风险详情

  • 审查结论 通过
  • 结论说明 vet 静态分析未发现可疑行为,判定为干净(clean)。
  • 风险计数 严重 0 / 高 0 / 中 0
  • 风险详情 未发现严重或警告级问题。

选择建议

装之前先看这几条
按条目字段给出的判断,不替你决定用不用

值得选的地方

  • 验证等级 L5:安装和运行都在沙盒里跑通过,装完能直接用的概率高。
  • 静态安全审查为低风险,没有发现明显可疑行为。
  • 有可直接复制的安装命令,不用自己翻文档找入口。
  • 标注了兼容的 DSH 版本(0.2.0-rc.2 等 6 个),按版本装不容易报错。
  • 列出了 5 项功能,能直接看出它解决什么问题。

先想清楚的地方

  • 没有声明 Node.js 版本要求,版本不匹配可能装不上。
  • 验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么。

更适合

  • 需要在视觉与多模态场景里给 DSH 补能力的人。
  • 想装完就能用、不想自己排依赖的人。
  • 能接受在本地装依赖、愿意自己确认权限的人。

不太适合

  • 只使用 DSH 官方内置能力、不接受第三方插件的人。

同类对比

6 个同类
同分类里挑最接近的几条,字段以各自详情页为准
插件验证等级安全审查星标兼容版本安装命令
dsh-upload-plugin当前 L5 · 运行验证通过 低风险 0 0.2.0-rc.2 等 6 个 有
open-design L4 · 沙盒安装通过 低风险 10.0 万 未标注 有
awesome-gpt-image-2 L3 · 安装规范通过 低风险 3.4 万 未标注 无
PicGo L3 · 安装规范通过 低风险 2.7 万 未标注 无
iPolloWork L4 · 沙盒安装通过 低风险 6,775 未标注 有
modlens L5 · 运行验证通过 低风险 4,207 0.2.0-rc.2 等 13 个 有

仓库档案

视觉与多模态
字段来自项目仓库与公开索引,中文说明由本站标注
作者 / 维护方danhcng3822f仓库 dsh-upload-plugin · 默认分支 main
分类视觉与多模态vision
收录类型可安装插件声明了 dsh.bundle、可用 dsh plugin add 安装的条目
开发语言TypeScript仓库主语言
许可证MIT商用或二次分发前请确认条款原文
星标 / 复刻 / issue0 / 0 / 0收录时的数值,非实时
创建 / 更新2026-09-14 · 2026-09-27最后推送 2026-09-27
本站收录2026-09-17首次进入本站目录的时间

README 全文

14.4 KB
作者原文,中文版优先;只做安全转义,不改内容

dsh-upload-plugin

A DeepSeek Harness plugin that attaches photos and files from the chat composer.

Photos reach the model as real image content. Files reach it through a Context injection block. Your own message text stays yours — nothing is pasted into your draft, and no instruction is spliced into what you send.


Why this exists

A model can only read what it is given. Out of the box, the DSH composer has no attach affordance, and the obvious workaround — write the file's path into your message and ask the model to go read it — has three failure points and pollutes your own text.

This plugin adds the affordance, and picks the shortest correct route for each kind of attachment:

Attachment How the model gets it Instruction needed?
Photo Native draft image — the image bytes ride in the message content No. The model sees the picture.
File A reference chip in your draft; a Context injection block carries the read instruction Yes, as a separate block

That asymmetry is deliberate. DSH's content-block vocabulary is text, reasoning, image, tool-call, tool-result — there is no file block — so a document cannot be handed over the way an image can, and needs the instruction path instead.


Features

Attaching

  • 📷 Add photo (/photos) — pick one or many images (.png, .jpg, .jpeg, .webp, .gif). They are admitted as native draft images, so the model receives the image itself. Nothing is typed into your composer.
  • 📄 Add file (/files) — pick one or many documents (.txt, .pdf, .json, .csv, source code, archives…). They are uploaded to the workspace and a reference chip is minted into your draft.
  • 📂 Uploaded files (/uploads) — browse everything uploaded in this session and re-reference it with one click.
  • Both [📷] and [📄] also sit directly on the composer toolbar, left of the model button, so you never have to open the + menu.
  • The /photos command and the [📷] button run the same code path, so the two entry points cannot drift apart.

The attachment rail

  • The rail draws exactly the files your live draft references, so it empties itself once you send. There is no separate plugin-side list to get out of sync.
  • Removing an attachment with ✕ deletes only that chip. Text you have already typed is preserved.
  • Photos do not appear on this rail — they are DSH's own native draft images, rendered and removed by the composer itself.

Injection: one shot per send

  • The read instruction travels as a Context injection row, the same way DSH injects its own context — it is not part of your message.
  • One shot per send. The live attachment set is handed to the host and consumed when the next turn starts, so the message after a send carries no instruction unless you attach again. There is no pending queue.
  • A file-only message also carries one invisible zero-width character. That is not decoration: DSH silently refuses to send a message with no text and no images, and the chip's serialization is what keeps an attach-then-send alive.

Model + reasoning effort

  • The composer keeps DSH's own model selector — this plugin does not take that seat over.
  • An effort button sits to its left, offering the levels the model declares on the Host plus a Custom… row.
  • Custom… adds a level. Pick one the menu does not list and the plugin writes it into that model's reasoningEfforts declaration — the same settings document the Models page owns — and then selects it. Adding a level by hand and adding it through Custom… are the same act.
  • A model that declares nothing gets its first declaration from the menu. When the Host reports no levels for the active model and its row has no reasoningEfforts, the button offers the thinking levels; picking one writes { "off": null, "": "" } into the row and then selects it. That is the only case where a declaration can be written without restating anything — the Host reported no vocabulary for that model, so no catalog spelling is in play.
  • A value outside the Host's vocabulary is refused in the menu, immediately, naming the levels that are allowed — rather than being accepted and then rejected later.
  • The list is built from the Host's own vocabulary, so it can never offer a level the Host would reject. A model whose levels come from the installed catalog reports them, so it never takes the first-declaration path and its wire spellings are never touched — see Declaring reasoning levels.

Vision declarations

  • Settings → Vision gives you one checkbox per model, grouped by provider, writing input: ["text", "image"] into that model's row. Turning one off removes the input key.
  • The page writes into the same settings document the Models page owns, addressed at exactly providers..models, so every other field of the row and the provider survives — including fields this plugin knows nothing about.
  • It reads the document back immediately before writing and sends an expectedRevision, so a concurrent edit is refused ("the configuration just changed elsewhere") rather than overwritten.
  • It subscribes to settings/document-updated for its namespace, so it stays fresh when another surface changes the document.
  • This is a declaration, not a probe. The page states that a model is declared able to read images; it never checks whether the upstream actually serves them.

Requirements

  • DeepSeek Harness with the web profile.
  • Node.js and pnpm for a source install.

Installation

From GitHub (recommended)

dsh plugin --profile web add github:danhcng3822f/dsh-upload-plugin

or with pnpm directly:

pnpm --prefix ~/.dsh/profiles/web add github:danhcng3822f/dsh-upload-plugin

DSH registers the plugin into the web profile for you — no hand-editing configuration files. Restart DSH or reload http://127.0.0.1:3080.

From a local checkout (development)

git clone https://github.com/danhcng3822f/dsh-upload-plugin.git
cd dsh-upload-plugin
pnpm install
pnpm run build
pnpm --prefix ~/.dsh/profiles/web add link:/path/to/dsh-upload-plugin

Configuration

Enabling vision for a model

For a model from a custom provider to be able to read images, its row needs the image modality:

{
"id": "claude-opus-5-thinking",
"name": "Claude Opus 5 Thinking",
"input": ["text", "image"]
}

You can write that by hand, or use Settings → Vision in the UI.

A model that does not declare vision still accepts an attached photo — the plugin only warns. Because the photo now travels as real image content, the provider refuses that turn outright rather than the model quietly ignoring an instruction.

Declaring reasoning levels

A model declared by hand in your settings carries no reasoning metadata until you declare it, and the Host reports none — which is why the effort button can be absent on a model that plainly reasons.

The first declaration is made for you. When the Host reports no levels for the active model and the model's row has no reasoningEfforts, the effort button appears and offers the thinking levels. Picking one writes this into the row and then selects the level:

{
"id": "your-model",
"name": "Your Model",
"input": ["text", "image"],
"reasoningEfforts": { "off": null, "high": "high" }
}

Only the level you picked and off are declared. A level you did not ask for may not exist on the provider, and offering it is the failure this design avoids; off is the one companion that is always safe. Custom… extends the set afterwards, exactly as it extends a declaration you wrote by hand.

You can still write the whole declaration yourself:

  • Each key is a level the menu offers; each value is the wire spelling sent to the provider.
  • off may be null, meaning supported, send no parameter — for most providers not thinking is the parameter's absence.
  • The levels the Host recognises are off, minimal, low, medium, high, xhigh, max. A level you leave out is simply not offered — Custom… can add one of them for you, using the level name as its wire spelling.
  • off is not offered as a first declaration. A declaration that names only off is refused by the provider configuration — a model needs at least one level beyond it — so the menu offers the six thinking levels instead. Pick one, and off becomes an ordinary row of the menu, because the declaration now contains it.
  • A model whose levels come from the installed catalog reports them, so its menu works from the start and nothing here rewrites its spellings.
  • A model the Host reports no levels for whose row already declares something is left exactly as it is — including reasoningEfforts: false, which declares that the model does not reason.

Troubleshooting

The effort button does not appear.
The button needs two facts, and it appears only when both hold: the Host reports no levels for the model, and the model's row declares no reasoningEfforts. If the row declares something — including reasoningEfforts: false, "this model does not reason" — nothing is offered, deliberately. If neither holds and you still see no button, the settings document could not be read, or the route serving the model has no row for it; check that the document is readable and that the model is declared under its provider.

Custom… refuses the level I typed.
The Host recognises exactly seven level names — off, minimal, low, medium, high, xhigh, max — and the declaration's keys are validated against them, so a token budget or a provider-specific name cannot be used at all. If the menu names a different reason, the model's levels come from the installed catalog: its wire spellings are the catalog's and not the level names, so declare the model's real levels in Settings first and Custom… can extend them afterwards.

I set an effort and the turn failed with "does not support reasoning effort".
The level was not in the model's declaration. This is the failure Custom… exists to prevent — it now declares a missing level before selecting it — so if you still see it, the declaration write did not land; check that the settings document is writable.

The model does not seem to see an attached photo.
Check that the model's row declares input: ["text", "image"]. Then confirm the provider actually serves image content: this plugin states a declaration, it cannot probe the upstream for you.

A message with only a file attached does nothing when I press Enter.
DSH refuses a message with no text and no images. The plugin keeps a zero-width character on the chip so this does not happen; if you have removed the chip by hand, type something or re-attach.

The instruction row appears on a message that has no attachment.
It should not. The attachment set is consumed when a turn starts; if you see this, the client's sync and the host's consumption have gone out of step — please open an issue with what you did.


Development

pnpm install     # install dependencies
pnpm test        # Vitest — 167 unit tests over the pure logic
pnpm run build   # tsc for the host half, esbuild for the browser bundle

The suite runs in a plain node environment with no DOM, so it covers the pure logic — record arithmetic, the admission planner, the effort menu, the settings read-modify-write, the injection handler — while the rendered components are exercised by hand in a running harness.


Project structure

dsh-upload-plugin/
├── src/
│   ├── types.ts                   # Shared API and data types
│   ├── instruction.ts             # The read instruction — ONE definition, shared by host and client
│   ├── index.ts                   # Host entry (Cordis plugin, web server endpoints, context injection)
│   ├── host/
│   │   ├── endpoints.ts           # Vision check, upload, list, view and ref sync
│   │   ├── file-utils.ts          # File identity and unique path resolution
│   │   ├── refs-store.ts          # Live attachment set per session (host-held, client-pushed)
│   │   ├── context-injection.ts   # Injects the instruction into the next turn via `agent/pre-step`
│   │   └── llm-modules.d.ts       # Harness contracts the host half consumes
│   └── client/
│       ├── index.ts               # Client entry (loaded into the browser)
│       ├── commands.ts            # /photos, /files and /uploads registrations
│       ├── attachment-bar.ts      # The composer rail and the lightbox viewer
│       ├── attachments.ts         # Attachment records and pure list operations
│       ├── attachment-store.ts    # Per-session record store (localStorage)
│       ├── reference.ts           # The `vision` reference source and chip minting
│       ├── ref-sync.ts            # Pushes the live attachment set to the host as the draft changes
│       ├── intake.ts              # Native image admission, shared by 📷 and /photos
│       ├── effort.ts              # Builds the effort menu from the Host's metadata
│       ├── vision-setting.ts      # Read-modify-write of one model row's `input` field
│       ├── platform-modules.d.ts  # Types for platform modules that cannot be installed from npm
│       ├── composer/
│       │   ├── attach-buttons.tsx # The 📷 and 📄 toolbar buttons
│       │   ├── effort-control.tsx # The effort button, left of the model button
│       │   └── icons.tsx          # This plugin's own glyphs
│       ├── settings/
│       │   └── vision-section.tsx # The Settings → Vision page
│       └── uploader.ts            # File picker and upload
├── lib/
│   ├── index.js                   # Compiled host bundle
│   └── client.js                  # Compiled browser bundle
├── tests/                         # Vitest unit tests
├── cordis.patch.yml               # Cordis dependency-injection configuration
├── LICENSE                        # MIT
└── package.json

License

Released under the MIT License.

常见问题

8 问
答案由本站依据条目字段整理,不引用上游原文
dsh-upload-plugin 怎么安装?

在 DSH 里执行 `dsh plugin --profile web add github:danhcng3822f/dsh-upload-plugin` 即可。

dsh-upload-plugin 的验证等级是什么意思?

L5 · 运行验证通过。在 dsh 沙盒中完成安装与运行冒烟——装得上、跑得起来

dsh-upload-plugin 安全吗?

低风险。vet 静态分析未发现可疑行为,判定为干净(clean)。

dsh-upload-plugin 装之前要先确认什么?

先看它会读写哪些文件、执行哪些命令、连接哪些网络地址;验证等级只说明装得上、跑得起来,不等于安全。涉及密钥或系统权限的,建议先在隔离环境试装。

dsh-upload-plugin 支持哪些 DSH 版本?

上游记录的兼容版本包括 0.2.0-rc.2、0.2.0-rc.1、0.1.7-rc.2、0.1.6-alpha.2、0.1.6-alpha.1、0.1.5-rc.2。

dsh-upload-plugin 用的是什么许可证?

上游标注为 MIT。商用或二次分发前请到仓库确认许可证原文。

dsh-upload-plugin 有哪些功能?

加号菜单上传图片与文件、按会话隔离已上传文件、超 4.5MB 图片自动压缩、校验模型是否支持 Vision、附件卡片适配明暗主题。

这条记录的数据可靠吗?

本站按仓库名去重后合并整理,字段以作者仓库与 npm 元数据为准;安装命令、仓库地址与 README 保持原文,带 L4 / L5 标记的安装命令已在隔离沙盒里真实跑通。

视觉与多模态
按星标排序,可作替代方案

open-design

open-design

L4 · 沙盒安装通过 10.0 万 星

awesome-gpt-image-2

awesome-gpt-image-2

GPT Image 2 / 2.5 提示词与案例库,530+ 个案例、20+ 套工业级模板与可复用 Skills,新增 2.5 同提示词对比

L3 · 安装规范通过 3.4 万 星

PicGo

PicGo

L3 · 安装规范通过 2.7 万 星

iPolloWork

iPolloWork

L4 · 沙盒安装通过 6,775 星

modlens

modlens

ModLens 是 DeepSeek Harness 的视觉插件,为纯文本模型外挂视觉能力,粘贴图片即得结构化 JSON 证据(OCR、版面

L5 · 运行验证通过 4,207 星

OpenBiliClaw

OpenBiliClaw

本地私有、开源的自进化跨平台 AI 内容发现 Agent:先理解你,再主动从 B站、小红书、抖音、YouTube、X、知乎、Reddit、微

L4 · 沙盒安装通过 3,398 星

danhcng3822f 的其它插件

1 个

插件的元信息来自作者仓库;分类、验证等级与安全结论的中文说明为中文整理,最近核验 2026-10-08。