dsh-plugin-inline-image

DSH Web UI renders http(s) image links in Markdown, yet workspace files have no static route and data: URIs are blocked by the sanitizer. The practical consequence: charts produced by matplotlib or any local image can only be handed to the user as a clickable file path they must open separately. dsh-plugin-inline-image mounts a strictly sandboxed read-only route /dsh-image/:alias/... on the existing dsh web process, so an agent writes a relative link in its message and the image appears inline in the chat bubble, with no local HTTP server involved.

Security is the plugin's core contract, built on defense in depth: only GET and HEAD are accepted; every path segment is URL-decoded and checked for empty segments, dot segments, and encoded traversal; resolve plus realpath double-containment checks prevent symlink escape; an extension whitelist restricts output to common raster formats (png, jpg, webp, gif, avif, bmp, ico), with SVG rejected by default. Configuration is a single alias-to-directory mapping in cordis.patch.yml, or zero config to auto-fall back to every registered workspace.

Built for anyone who asks DSH agents to produce visual output: data analytics, chart presentation, ML experiment review. The plugin is a single-file implementation with a thorough attack-surface test suite, ships under the MIT license, and takes effect after one dsh web restart.