BundleProductivity / Notesv0.1.1Developer Preview

DSH Notes Export

A DeepSeek Harness tool Bundle that exports a conversation as Markdown to a configured Notes workspace or, without credentials, sends it to a public demo service to render a local PNG.

137 repository starsMIT (dsh-plugin package) Updated Aug 14, 2026

Review snapshot

Manifest
Passed
Install
Not tested
Runtime
Not tested

Static compatibility snapshot dated 2026-08-14; install and runtime remain independent checks.

Install / upstream documentation

Install the pinned release deliberately

This bundle uses an upstream-documented installation path pinned to the reviewed release. Read the linked README and inspect the source before you install it.

See GitHub README

Upstream command · profile web

dsh plugin --profile web add @zhaoolee/dsh-notes@0.1.1

The pinned README documents installation of @zhaoolee/dsh-notes and explicitly says to use 0.1.1 or later because 0.1.0 aborts on first tool use with DSH 0.1.0-rc.6. This catalog fixes the documented package at 0.1.1; AgentPlugin.net has not run it.

Source: Pinned upstream README at 90ca5f7

Plugin brief

What DSH Notes Export adds to DeepSeek Harness

DSH Notes Export is a DeepSeek Harness plugin that gives the agent a notes_export_conversation tool. In its configured write mode, the tool turns a conversation into Markdown and creates a new note or updates an existing note in the current account’s Notes workspace. The source documents optional folder, starred, and pinned values, and says a title is taken from the first Markdown heading. This can be useful for preserving a discussion as a formatted note, but the agent is handling the full supplied Markdown rather than an inherently minimal summary, so users need to decide what conversation content is suitable to export.

The default behaviour without user credentials is the critical privacy boundary. The reviewed README says the plugin falls back to the anonymous export API at https://notes.fangyuanxiaozhan.com. It sends the conversation content there to render a Smartisan-style long-image PNG, then saves that PNG locally and returns the file path and URL. The project says the anonymous route does not retain content in an account workspace and cannot write to the note list. That is not the same as keeping the content on the user’s machine: the conversation is transmitted to a public demo service. Do not use this fallback for secrets, private work, credentials, personal data, or undisclosed customer information.

For controlled writes, the README requires a Notes API base URL plus either a stable Bearer token or username/password that requests a token. Configuration can come from the plugin configuration or environment variables. When a base URL is set without credentials, the plugin is documented to fail explicitly instead of silently falling back. The source also says the obtained username/password token stays in memory rather than being written to disk. Those claims describe intended behaviour at the pinned commit; users should still host or trust the service endpoint and validate their own deployment’s access controls.

This is a DSH Bundle with a narrow tool-registration patch: the pinned package declares dsh.bundle.patch and the patch inserts the @zhaoolee/dsh-notes row as notes-export. The package is version 0.1.1. The upstream README specifically warns that version 0.1.0 can abort a session during first tool use under DSH 0.1.0-rc.6, which is why this listing does not recommend it. No AgentPlugin.net install, live export, account write, public-demo request, or permission verification has been performed. Test first with non-sensitive text and a disposable note workspace.

Evaluation workflow

Evaluate DSH Notes Export with clear boundaries

01

Before invoking the tool, choose the mode intentionally. For any private conversation, configure a self-hosted or otherwise trusted NOTES_API_BASE_URL and a token or username/password. Verify that the base URL is the intended service and that the target account is not shared. Do not leave configuration absent and assume the export is local: the documented anonymous fallback sends content to the public demo renderer.

02

Write the first line of the Markdown as a clear heading, because the README says it becomes the note title. Decide whether this is a create or update operation and preserve the returned note_id when an existing note should be updated. If folder, starred, or pinned values are omitted on update, the source says existing values are retained. Review the final Markdown for accidental secrets, copied terminal output, or private prompts before the agent calls the export tool.

03

In anonymous image mode, inspect both outputs. The tool returns an exported-image action, a demo-server image URL, and a local absolute PNG path. The README says the PNG is written to a random private subdirectory of the system temporary directory, using POSIX 0700 directory and 0600 file permissions where supported. That does not make a public-server upload disappear; clean up local temporary images according to your platform’s retention policy and avoid sharing the returned remote URL if the content is sensitive.

04

When testing updates, be ready for concurrency. The source says its write logic uses expectedUpdatedAt optimistic concurrency, reloads after a 409 conflict, and retries up to four times. That is a useful implementation note, not a substitute for checking the resulting note. Open the returned URL in the intended workspace, confirm title and body, and verify that the tool did not export an unintended account or use the public fallback.

Verification ledger

Evidence, not installation claims

Manifest

Passed

Pinned package.json declares dsh.bundle.patch → ./cordis.patch.yml. The patch inserts id notes-export with package @zhaoolee/dsh-notes.

Checked Aug 14, 2026

Install

Not tested

AgentPlugin.net did not install @zhaoolee/dsh-notes@0.1.1 into a DSH profile.

Runtime

Not tested

No configured account export or anonymous public-demo image export was performed.

Source or manifest review can be recorded while Install and Runtime remain not-tested. Treat these as separate verification layers.

Execution surface

Prepare, build, and code-execution review

  • prepare

    not recorded

    No review record is available for this execution surface. Inspect the upstream repository before running it.

  • build

    not recorded

    No review record is available for this execution surface. Inspect the upstream repository before running it.

  • code execution

    notice recorded

    The Bundle exposes an agent-callable export tool. Agent-generated Markdown can contain more context than the user intended to preserve.

  • network

    review recorded

    Without configured account credentials, the documented fallback sends conversation content to the public demo service https://notes.fangyuanxiaozhan.com for image rendering. Treat this as an external disclosure risk.

  • configuration

    review recorded

    Configured credentials can create or update notes in the current account workspace. Verify the endpoint, account, token scope, and exported Markdown before use.

  • lifecycle script

    notice recorded

    The package prepack script runs a TypeScript build. Source installs or package publication should be treated as a build step.

Third-party code can execute during dependency preparation, build, or runtime. Read the upstream source and its changes before use.

Declared scope

Capabilities and prerequisites

Capabilities

  • Expose a notes_export_conversation tool to an agent
  • Create or update Markdown notes in the configured current-account workspace
  • Export an anonymous rendered PNG when no account configuration is present
  • Set folder, star, pin, and one of six documented image themes

Prerequisites

  • A DeepSeek Harness profile with the target package installed
  • A configured Notes API URL plus token, or username and password, for cloud write mode
  • A self-hosted or trusted Notes service for sensitive conversations
  • A review of the public-demo fallback before any anonymous export

Frequently asked questions

DSH Notes Export FAQ

What does DSH Notes Export do?

It gives a DeepSeek Harness agent a notes_export_conversation tool that can create or update Markdown notes in a configured Notes workspace, or render a conversation as a PNG in anonymous fallback mode.

What happens if I do not configure credentials?

The pinned README says the plugin sends the conversation to https://notes.fangyuanxiaozhan.com’s anonymous export API to render an image. It cannot write a note to an account workspace in that mode.

Is the anonymous fallback private because the PNG is saved locally?

No. A local PNG is also returned, but the conversation content is first transmitted to the public demo service for rendering. Do not use this mode for sensitive content.

How can I use a controlled note workspace?

Configure NOTES_API_BASE_URL plus NOTES_API_TOKEN, or a username and password, as described in the upstream README. Use a service and account whose access controls you have reviewed.

Why does this listing pin version 0.1.1?

The source README warns that 0.1.0 aborts a session on first tool use with DSH 0.1.0-rc.6 and explicitly instructs users to use 0.1.1 or higher. The package manifest at the reviewed commit is 0.1.1.

Has AgentPlugin.net tested a Notes export?

No. The Bundle patch was inspected statically, but no DSH installation, credential flow, account write, conflict retry, or anonymous demo-server export was run.