⌂
Stay in Session
A compact Artifacts action lives in the DSH Session header—no detached viewer or file-hunting detour.
Session-native DSH plugin · v0.1
Every deliverable. Back in context.
Preview reports, webpages, images, and PDFs without leaving the current DeepSeek Harness Session—and see exactly where each file came from.
Local-first · live index · explainable provenance · sandboxed preview
Market researchdocs/report.md● EXACT SOURCE
Competitive landscape
38automated tests
20×stable e2e reruns
3 levelsof source confidence
0 uploadslocal-first by design
The post-generation experience
Files stop being loose ends.
Artifact Harbor turns the current Session into the place where Agent work arrives, stays inspectable, and keeps its source context.
↻
See files arrive
Create, edit, rename, and delete events update through a bounded, debounced workspace index.
◎
Trace the source
Session, Turn, and Tool Call attribution is labelled exact, temporal, or unknown instead of overstating certainty.
▣
Preview safely
Markdown, HTML, images, SVG, and PDF open in place with strict limits and isolated active content.
◇
Inspect metadata
Review relative path, MIME, size, modified time, SHA-256, and Git status beside the content.
⌁
Keep it local
No cloud sync, public sharing, content upload, or artifact telemetry is part of the product.
Native to the workflow
From tool call to trusted preview.
The browser asks only for a Session and relative path. The Host owns workspace resolution, indexing, provenance, and the preview boundary.
DSH Sessioncurrent conversation
→
Artifact Harbor Hostdiscover · attribute · sanitize
→
Session previewcontent + source context
Honest by construction
A preview is a trust boundary.
Agent-created content is still untrusted. Historical proximity is still not causality. The product keeps both facts visible.
The browser never chooses an absolute workspace root, and unknown provenance remains explicitly unknown.
✓
Workspace-containedCanonical paths, symlink checks, bounded discovery, and relative-only APIs.
✓
Active content isolatedHTML and SVG are sanitized, served with strict CSP, and rendered in an empty sandbox.
✓
Attribution stays explainableExact events, temporal proximity, and unknown history are visibly different states.
Install from source
Dock it in an isolated profile.
Build a reviewable tarball, install it through the normal DSH plugin command, and open a Session with a registered Workspace.
Validated against DeepSeek Harness 0.1.1-rc.2 and Node.js 22.19+ or 24+.
$ git clone https://github.com/bleakbelladonnals/dsh-artifact-harbor.git
$ cd dsh-artifact-harbor
$ corepack enable
$ pnpm install --frozen-lockfile
$ pnpm build && npm pack --ignore-scripts
# Install into the DSH Web profile
$ dsh plugin --profile web add "$PWD/dsh-artifacts-0.1.0.tgz"
$ dsh web