dsh-media-inline-preview

In DSH chat sessions, media files produced by agents have historically appeared only as bare paths or raw JSON specs, forcing users to manually locate and open them in a file manager. dsh-media-inline-preview solves this: once installed, it requires zero configuration. When a session references or produces images, videos, or audio, the agent automatically invokes img_serve or media_serve and emits an inline fence, rendering a playable card or player directly within the chat message.

The plugin covers three fence types—img, video, and audio—using mutually exclusive extension sets to determine media kind and prevent bare JSON bodies from mis-triggering across categories. If playback fails, it automatically retries with a cache-busting parameter; a second failure gracefully degrades to an error card so the conversation flow is never interrupted.

On the security side, every route enforces a per-request browser trust fence: the Host must be loopback or a LAN IP sampled at startup, cross-site requests are rejected outright, and an Origin header must match the Host. Workspace file access is further guarded by realpath symlink-escape detection, an extension whitelist, and 128 MiB / 2 GiB size caps. It is well suited for developers who want to preview media files inline within local or LAN DSH sessions while maintaining strict security boundaries.