@yin52133/dsh-luban-image-paste

Authenticated image paste, drop, clipboard capture, workspace storage, and DSH session injection for Windows and Ubuntu.

Features

• Focusable Web drop zone for Ctrl+V image paste and file drag-and-drop.
• Workbench page registration and paste/drop source routing are covered by client contract tests; multi-file input skips invalid or oversized entries.
• luban-img CLI capture with fixed PowerShell, wl-paste, or xclip commands; commands use argument arrays, shell: false, a timeout, and bounded output.
• PNG, JPEG, and WebP magic-byte validation with a default 10 MiB upload limit.
• Atomic YYYYMMDD-<slug>-<n>.<ext> publication under a canonicalized workspace attachment directory, with runtime directory-identity and SHA-256 checks.
• Optional dynamic sharp resize. With compression: true, a missing peer, decode failure, or unverifiable size bound fails closed before persistence.
• Real DSH AgentRegistry injection in Markdown or absolute-path form, limited to live, top-level sessions in the configured workspace.
• Authenticated recent-image previews, reference-safe manual deletion, and TTL cleanup that always retains attachments referenced by a session. Recent responses are server-bounded by recentLimit.

Installation

Install the authentication boundary and this plugin in the same DSH profile:

dsh plugin --profile web add @yin52133/dsh-luban-auth @yin52133/dsh-luban-image-paste

Install the optional resize capability when compression is enabled:

pnpm add sharp

Keep the internal DSH WebServer on loopback and access the profile through the @yin52133/dsh-luban-auth sidecar. The authenticated route is /luban-image-paste.

Configuration

- insert:
    - id: luban-image-paste
      name: @yin52133/dsh-luban-image-paste
      config:
        workspaceRoot: .
        attachDir: .luban/attachments
        maxBytes: 10485760
        maxSidePx: 2000
        compression: true
        compressionQuality: 82
        retainDays: 14
        recentLimit: 50
        cleanupIntervalMinutes: 60
        injectStyle: markdown
        clipboardTimeoutMs: 10000

attachDir must be a child of workspaceRoot; absolute paths, .., ., and symlink escapes are rejected. Runtime operations stop if the canonical directory is replaced. Cleanup only removes indexed files inside this directory; startup also removes stale, unindexed plugin-generated crash artifacts after a grace period. Referenced files are retained regardless of age.

Treat attachDir as plugin-owned storage and do not place manually named files inside it; orphan recovery recognizes the plugin's dated filename scheme.

The current recent strip renders original image payloads rather than generated thumbnails. recentLimit bounds the list on the server; lower it for workspaces with many images near maxBytes to bound browser transfer and memory use.

Set compression: false only when dimension enforcement is not required. With compression enabled, sharp is required so the service can decode and verify maxSidePx before storing an image.

The CLI reads credentials from environment variables so secrets never appear in the process argument list. CLI and Web API requests have a 10-second deadline covering both headers and response bodies. CLI JSON is capped at 64 KiB, Web JSON at 1 MiB, and remote error bodies are never copied to the terminal:

$env:LUBAN_SESSION_COOKIE = 'luban_session=...'
$env:LUBAN_CSRF_TOKEN = '...'
luban-img capture --session '<dsh-session-id>' --style markdown

On Ubuntu, install wl-clipboard for Wayland or xclip for X11. The CLI does not invoke a shell and does not probe any other program.

Demo

Sign in at /luban-auth/login, open 鲁班工作台 → 图片与附件, enter an optional DSH session id, focus the drop zone, and press Ctrl+V. The recent-image card shows the stored relative path, preview, resize status, and reference count. A referenced card cannot be deleted; Clean expired removes only unreferenced attachments older than retainDays.

For CLI capture, copy an image, export LUBAN_SESSION_COOKIE and LUBAN_CSRF_TOKEN from the authenticated session, then run luban-img capture. The CLI sends x-luban-csrf on both upload and injection writes.

Compatibility

Tested with DeepSeek Harness 0.1.2-rc.1, Cordis 4.0.2, React 18, and Node.js ^22.19.0 or >=24.0.0. The DSH peer range is ^0.1.2-rc.1; injection uses the current AgentRegistry.get and identified user-message APIs. Dormant sessions, subagent-owned sessions, and sessions from another workspace are rejected; this plugin does not reconstruct the host-owned model/tool composition for cold resume.

Platform Support

The host service and Web UI are shared across Windows and Ubuntu. CLI clipboard capture uses powershell.exe with STA mode on Windows, wl-paste on Wayland, and xclip on X11. macOS and other platforms fail with E_PLATFORM_UNSUPPORTED instead of running an unspecified command.

License

MIT. See THIRD-PARTY-NOTICES.md for peer/runtime notices.