@wisdoverse/dsh-inline-media-viewer 1.0.1

package/CHANGELOG.md

@@ -0,0 +1,29 @@
+# Changelog
+
+## 1.0.1
+
+- Publish the plugin as `@wisdoverse/dsh-inline-media-viewer` for one-command
+  installation through the DSH plugin manager.
+- Align the bundle manifest, package metadata, and bilingual installation
+  documentation with the scoped package name.
+
+## 1.0.0
+
+- **Initial public release.** Inline image/video/audio previews in the
+  conversation tail (`conversation.chat.turnTail` projection): any media
+  path or media URL mentioned in a chat turn renders inline under that
+  turn.
+- **Workspace-confined local reads** — a path renders only when it
+  resolves inside the calling session's workspace root (`realpath` +
+  containment; no symlink escapes).
+- **Configurable ComfyUI proxy** — media URLs on the local aliases
+  (`127.0.0.1`/`localhost` on port 8188) or on the configured server
+  address are fetched server-side from the configured origin, with
+  redirects refused, a 20 s timeout, and a 48 MiB cap.
+- **Settings page** (媒体预览 / Media preview): auto-render toggle,
+  per-turn cap (1–30), max media height (160–1200 px), ComfyUI server
+  address — persisted through the DSH settings document (loopback
+  writes).
+- **Pure helpers** in a dependency-free `lib.js` with a zero-dependency
+  unit test runner (`node test.mjs`), plus README, SECURITY, and MIT
+  LICENSE.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Wisdoverse
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,166 @@
+<h1 align="center">dsh-inline-media-viewer</h1>
+
+<p align="center">
+  <strong>Inline image, video, and audio previews for DeepSeek Harness Web</strong>
+</p>
+
+<p align="center">
+  <a href="CHANGELOG.md"><img alt="Latest tag" src="https://img.shields.io/github/v/tag/Wisdoverse/dsh-inline-media-viewer-plugin?style=flat-square&amp;label=version"></a>
+  <a href="LICENSE"><img alt="License" src="https://img.shields.io/github/license/Wisdoverse/dsh-inline-media-viewer-plugin?style=flat-square"></a>
+  <a href="package.json"><img alt="Top language" src="https://img.shields.io/github/languages/top/Wisdoverse/dsh-inline-media-viewer-plugin?style=flat-square"></a>
+  <a href="#configuration"><img alt="ComfyUI support" src="https://img.shields.io/badge/ComfyUI-supported-ff6f00?style=flat-square"></a>
+</p>
+
+<p align="center">
+  <strong>English</strong> · <a href="README.zh-CN.md">简体中文</a>
+</p>
+
+Turn media paths and URLs mentioned in a DSH conversation into secure inline
+previews—without copying them out of the chat log.
+
+```text
+https://…/view?filename=frame.png  →  <img>
+exports/demo.mp4                   →  <video controls>
+audio/sound.mp3                    →  <audio controls>
+```
+
+## Contents
+
+- [Features](#features)
+- [Supported media](#supported-media)
+- [Installation](#installation)
+- [Configuration](#configuration)
+- [Security](#security)
+- [Development](#development)
+- [License](#license)
+
+## Features
+
+| Feature | Description |
+| --- | --- |
+| Inline rendering | Displays images, videos, and audio directly below the chat turn that mentions them. |
+| Workspace-safe reads | Resolves local paths with `realpath` and rejects traversal, out-of-workspace paths, and symlink escapes. |
+| ComfyUI proxy | Fetches recognized ComfyUI media URLs server-side from the configured origin, including for remote users and HTTPS pages. |
+| Bounded transfers | Limits each file or response to 48 MiB and remote requests to 20 seconds. |
+| User controls | Provides auto-render, per-turn item limit, media height, and ComfyUI origin settings. |
+
+## Supported media
+
+| Type | Extensions |
+| --- | --- |
+| Images | `png`, `jpg`, `jpeg`, `webp`, `gif`, `avif`, `bmp`, `svg` |
+| Video | `mp4`, `webm`, `mov`, `m4v`, `mkv`, `avi`, `ogv` |
+| Audio | `mp3`, `wav`, `m4a`, `aac`, `ogg`, `oga`, `flac`, `opus` |
+
+## Installation
+
+### From npm
+
+Install and activate the bundle in your Web profile:
+
+```bash
+dsh plugin --profile web add @wisdoverse/dsh-inline-media-viewer
+```
+
+Restart the Web profile after installation.
+
+### From source
+
+1. Clone the plugin into a location available to your Web profile:
+
+   ```bash
+   git clone https://github.com/Wisdoverse/dsh-inline-media-viewer-plugin.git \
+     /path/to/local-plugins/dsh-inline-media-viewer
+   ```
+
+2. Add the bundle to `profiles/web/package.json`:
+
+   ```jsonc
+   {
+     "dependencies": {
+       "@wisdoverse/dsh-inline-media-viewer": "link:/path/to/local-plugins/dsh-inline-media-viewer"
+     },
+     "dsh": {
+       "profile": {
+         "bundles": ["…", "@wisdoverse/dsh-inline-media-viewer"]
+       }
+     }
+   }
+   ```
+
+3. Rebuild or restart the Web profile.
+
+The plugin mounts its host RPC channel, client projection, and settings section
+through [`cordis.patch.yml`](cordis.patch.yml).
+
+## Configuration
+
+Open **Settings → 媒体预览 / Media preview**.
+
+| Setting | Default | Allowed values |
+| --- | --- | --- |
+| Auto-render detected media | On | On / off |
+| Maximum items per turn | `12` | `1`–`30` |
+| Maximum media height | `380 px` | `160`–`1200 px` |
+| ComfyUI origin | Empty | `http(s)://host[:port]` |
+
+Settings are stored in the DSH settings document. Writes are available only on
+loopback connections; remote browsers can read settings but cannot persist
+changes.
+
+### ComfyUI origin
+
+- Leave the field empty to use `http://127.0.0.1:8188`.
+- Accepted forms are `http://host[:port]`, `https://host[:port]`, and bare
+  `host[:port]` (`http` is assumed).
+- The default port is `8188` for HTTP and `443` for HTTPS.
+- Credentials, paths, query strings, and fragments are rejected.
+- The origin must be reachable from the DSH host process. For a containerized
+  host, use the address visible from inside the container.
+
+Local aliases (`127.0.0.1:8188` and `localhost:8188`) and the configured origin
+are recognized as ComfyUI sources. A non-empty invalid address fails explicitly
+instead of silently falling back to another target.
+
+## Security
+
+The plugin is designed as a local trust helper, not a general-purpose file or
+network proxy:
+
+- Local reads are confined to the active session's workspace and known media
+  extensions.
+- Remote reads can target only the configured ComfyUI origin; redirects are
+  refused.
+- Local files and remote responses are capped at 48 MiB.
+- Settings writes are restricted to loopback connections.
+- The browser receives media as `data:` URLs rather than filesystem paths.
+
+See [SECURITY.md](SECURITY.md) for the complete trust model and known
+limitations.
+
+## Development
+
+### Commands
+
+| Command | Purpose |
+| --- | --- |
+| `node test.mjs` | Run the dependency-free unit tests directly. |
+| `npm test` | Run the same unit test suite through npm. |
+| `npm run lint` | Syntax-check the host modules and test file. |
+
+### Project structure
+
+| Path | Responsibility |
+| --- | --- |
+| `index.js` | Host RPC channel, ComfyUI proxy, and settings registration. |
+| `lib.js` | Pure, dependency-free helpers. |
+| `client/client.js` | Turn projection, media renderer, and settings UI. |
+| `cordis.patch.yml` | Bundle mounting and integration points. |
+| `test.mjs` | Unit tests for the pure helpers. |
+
+The running Web profile serves a bundled copy. Rebuild or restart it after
+changing the source files.
+
+## License
+
+Released under the [MIT License](LICENSE).

package/README.zh-CN.md

@@ -0,0 +1,155 @@
+<h1 align="center">dsh-inline-media-viewer</h1>
+
+<p align="center">
+  <strong>为 DeepSeek Harness Web 提供内联图像、视频和音频预览</strong>
+</p>
+
+<p align="center">
+  <a href="CHANGELOG.md"><img alt="最新标签" src="https://img.shields.io/github/v/tag/Wisdoverse/dsh-inline-media-viewer-plugin?style=flat-square&amp;label=version"></a>
+  <a href="LICENSE"><img alt="许可证" src="https://img.shields.io/github/license/Wisdoverse/dsh-inline-media-viewer-plugin?style=flat-square"></a>
+  <a href="package.json"><img alt="主要语言" src="https://img.shields.io/github/languages/top/Wisdoverse/dsh-inline-media-viewer-plugin?style=flat-square"></a>
+  <a href="#配置"><img alt="支持 ComfyUI" src="https://img.shields.io/badge/ComfyUI-supported-ff6f00?style=flat-square"></a>
+</p>
+
+<p align="center">
+  <a href="README.md">English</a> · <strong>简体中文</strong>
+</p>
+
+将 DSH 对话中出现的媒体路径和 URL 安全地转换为内联预览，无需再从聊天日志中复制路径。
+
+```text
+https://…/view?filename=frame.png  →  <img>
+exports/demo.mp4                   →  <video controls>
+audio/sound.mp3                    →  <audio controls>
+```
+
+## 目录
+
+- [功能特性](#功能特性)
+- [支持的媒体格式](#支持的媒体格式)
+- [安装](#安装)
+- [配置](#配置)
+- [安全设计](#安全设计)
+- [开发](#开发)
+- [许可证](#许可证)
+
+## 功能特性
+
+| 特性 | 说明 |
+| --- | --- |
+| 内联渲染 | 在提及媒体的聊天消息下方直接显示图像、视频和音频。 |
+| 工作区安全读取 | 使用 `realpath` 解析本地路径，并拒绝目录穿越、工作区外路径和符号链接逃逸。 |
+| ComfyUI 代理 | 由服务端从配置的源站获取识别到的 ComfyUI 媒体 URL，使远程用户和 HTTPS 页面也能正常查看。 |
+| 资源限制 | 每个文件或响应最大 48 MiB，远程请求最长 20 秒。 |
+| 用户控制 | 提供自动渲染、每条消息的媒体数量、媒体高度和 ComfyUI 源站设置。 |
+
+## 支持的媒体格式
+
+| 类型 | 扩展名 |
+| --- | --- |
+| 图像 | `png`、`jpg`、`jpeg`、`webp`、`gif`、`avif`、`bmp`、`svg` |
+| 视频 | `mp4`、`webm`、`mov`、`m4v`、`mkv`、`avi`、`ogv` |
+| 音频 | `mp3`、`wav`、`m4a`、`aac`、`ogg`、`oga`、`flac`、`opus` |
+
+## 安装
+
+### 通过 npm 安装
+
+在 Web profile 中安装并启用 Bundle：
+
+```bash
+dsh plugin --profile web add @wisdoverse/dsh-inline-media-viewer
+```
+
+安装后重启 Web profile。
+
+### 从源码安装
+
+1. 将插件克隆到 Web profile 可以访问的位置：
+
+   ```bash
+   git clone https://github.com/Wisdoverse/dsh-inline-media-viewer-plugin.git \
+     /path/to/local-plugins/dsh-inline-media-viewer
+   ```
+
+2. 将插件添加到 `profiles/web/package.json`：
+
+   ```jsonc
+   {
+     "dependencies": {
+       "@wisdoverse/dsh-inline-media-viewer": "link:/path/to/local-plugins/dsh-inline-media-viewer"
+     },
+     "dsh": {
+       "profile": {
+         "bundles": ["…", "@wisdoverse/dsh-inline-media-viewer"]
+       }
+     }
+   }
+   ```
+
+3. 重新构建或重启 Web profile。
+
+插件通过 [`cordis.patch.yml`](cordis.patch.yml) 挂载宿主 RPC 通道、客户端投影和设置区域。
+
+## 配置
+
+打开 **设置 → 媒体预览 / Media preview**。
+
+| 设置项 | 默认值 | 可选范围 |
+| --- | --- | --- |
+| 自动渲染检测到的媒体 | 开启 | 开启 / 关闭 |
+| 每条消息的最大媒体数量 | `12` | `1`–`30` |
+| 媒体最大高度 | `380 px` | `160`–`1200 px` |
+| ComfyUI 源站 | 留空 | `http(s)://host[:port]` |
+
+设置值保存在 DSH 设置文档中。只有回环连接可以写入；远程浏览器可以读取设置，但不能持久化修改。
+
+### ComfyUI 源站
+
+- 留空时使用 `http://127.0.0.1:8188`。
+- 支持 `http://host[:port]`、`https://host[:port]` 和不带协议的
+  `host[:port]`（默认使用 `http`）。
+- HTTP 的默认端口为 `8188`，HTTPS 的默认端口为 `443`。
+- 不允许包含凭据、路径、查询字符串或片段。
+- 该地址必须能从 DSH 宿主进程访问。如果宿主运行在容器中，请填写容器内部可见的地址。
+
+本地别名（`127.0.0.1:8188` 和 `localhost:8188`）以及配置的源站都会被识别为
+ComfyUI 来源。非空的无效地址会明确报错，而不会静默回退到其他目标。
+
+## 安全设计
+
+本插件是本地信任辅助工具，不是通用的文件或网络代理：
+
+- 本地读取仅限当前会话的工作区和已知媒体扩展名。
+- 远程读取只能访问配置的 ComfyUI 源站，并拒绝重定向。
+- 本地文件和远程响应均限制为最大 48 MiB。
+- 设置写入仅允许回环连接。
+- 浏览器接收的是 `data:` URL，而不是文件系统路径。
+
+完整的信任模型和已知限制请参阅 [SECURITY.md](SECURITY.md)。
+
+## 开发
+
+### 常用命令
+
+| 命令 | 用途 |
+| --- | --- |
+| `node test.mjs` | 直接运行无依赖的单元测试。 |
+| `npm test` | 通过 npm 运行同一套单元测试。 |
+| `npm run lint` | 对宿主模块和测试文件执行语法检查。 |
+
+### 项目结构
+
+| 路径 | 职责 |
+| --- | --- |
+| `index.js` | 宿主 RPC 通道、ComfyUI 代理和设置注册。 |
+| `lib.js` | 无依赖的纯辅助函数。 |
+| `client/client.js` | 消息投影、媒体渲染器和设置界面。 |
+| `cordis.patch.yml` | Bundle 挂载和集成点。 |
+| `test.mjs` | 纯辅助函数的单元测试。 |
+
+运行中的 Web profile 使用构建后的副本。修改源文件后，请重新构建或重启 Web profile。
+
+## 许可证
+
+本项目采用 [MIT 许可证](LICENSE)。

package/SECURITY.md

@@ -0,0 +1,67 @@
+# Security
+
+This plugin renders media in a user's chat. It is a **local trust helper**, not
+a security boundary: the conversation content it renders is produced by the
+same session that views it. What shipping standards demand here is that the
+plugin *cannot be turned into a wider primitive* — no arbitrary local file
+exfiltration, no arbitrary SSRF, no unbounded memory use.
+
+## Local file reads
+
+- Only the session's workspace root is readable: `realpath(cwd)` + containment
+  check (`isInside`) against the resolved target. Symlink escapes, `..`
+  traversal, and out-of-workspace paths are rejected.
+- Only known media extensions are accepted (MIME map in `lib.js`).
+- Size cap: 48 MiB per file.
+- The client must supply a valid session id; the workspace root is taken from
+  that session's header, never from client input.
+
+## Remote (ComfyUI) proxy
+
+- The fetch target is always the **configured ComfyUI origin** (default
+  `http://127.0.0.1:8188`, `comfyUrl` in the `inline-media` settings
+  namespace) — never the source host. Chat content can therefore only
+  select a path/query on a server the user configured, not an arbitrary
+  host.
+- A source URL is accepted only when its host:port is a local alias
+  (`127.0.0.1` / `localhost` on port 8188) **or** matches the configured
+  origin; everything else is rejected before any network I/O.
+- The configured address is validated to a bare `http(s)://host[:port]`
+  origin: credentials, paths, queries, hashes, and odd hostnames are
+  rejected. A non-empty invalid value fails remote reads with an explicit
+  error instead of silently retargeting; an empty value uses the built-in
+  default.
+- Settings writes are loopback-only (see below), so only the local user
+  can point the proxy at another host — a remote viewer cannot retarget it.
+- `redirect: "error"` — redirects are refused.
+- 20 s timeout, 48 MiB response cap, and the response MIME must be
+  image/video/audio.
+
+## Transport
+
+- The media channel `/inline-media/read` is registered with the DSH
+  connection service (`authority: "trusted-host"`), so it runs under the same
+  browser-trust fence and session gating as DSH's own RPC surface.
+- The client renderer never receives file system paths back — only `data:`
+  URLs — so a hostile session cannot use the channel as a file oracle for
+  paths the UI already knows.
+
+## Settings
+
+- Values are normalized client-side and validated server-side against the
+  schema (autoRender boolean; displayCap 1–30; imageMaxPx 160–1200;
+  comfyUrl string ≤ 512 chars, parsed to a bare origin at use time).
+- The settings service only writes back for **loopback** connections; remote
+  browsers are read-only, so a remote viewer cannot persist state.
+
+## Known limitations
+
+- Remote (non-loopback) browsers cannot persist settings by design (DSH
+  settings writes are loopback-only).
+- ComfyUI on a non-standard host/port: set the server address in the settings
+  page. The proxy fetches only from that configured origin, so it must be
+  reachable from the DSH host process — plain `http://` for a local install,
+  `https://` behind a TLS-terminating proxy. The loopback aliases
+  (`127.0.0.1`/`localhost` on port 8188) are always accepted as source
+  origins; editing `COMFY_HOSTS`/`COMFY_PORTS` is deliberate code surgery,
+  not a configuration surface.