dsh-annotation-plugin

Quote selected assistant text into your next request — a standalone plugin for DeepSeek Harness.

This plugin ships both halves of the feature in one npm package:

• Host half (dsh.bundle + cordis.patch.yml): an annotation plugin that records quotes as log-only session events (annotation/added / annotation/removed), exposes a Typert Remote (record / list / discard), and materializes pending quotes into the model-facing message batch at agent/pre-step.
• Browser half (dsh.client): a quote button on each assistant message and a floating, collapsible pending-quote card above the composer.

Install

Requires a DeepSeek Harness profile that composes @deepseek-ai/dsh-base (the official base layer provides session, agent, web and the client runtime).

From npm (recommended)

dsh plugin --profile  add dsh-annotation-plugin

The published package ships prebuilt artifacts, so nothing builds at install time.

From GitHub

A git install fetches sources, not built artifacts — the package's prepare script (tsdown) builds lib/ after checkout, and pnpm refuses to run a git dependency's prepare until you explicitly allow it. The first add fails and dsh prints the exact package key to allow:

dsh plugin --profile  add github:you/dsh-annotation-plugin
# → pnpm refuses to run the prepare script; copy the package key it prints
#   into the profile's pnpm-workspace.yaml, then re-run the add:

# 
/pnpm-workspace.yaml
allowBuilds:
  dsh-annotation-plugin: true

dsh plugin --profile  add github:you/dsh-annotation-plugin   # re-run

That allowance is permission to execute the package's code on your machine at install time, outside any sandbox the agent runs under. Only allow packages whose source you trust, and pin a commit so a later push cannot silently change what runs:

dsh plugin --profile  add github:you/dsh-annotation-plugin#

If you would rather not ask users for the allowance, install the npm build instead (or distribute a tarball from — neither needs any build permission).