dsh-remote-ide
SSH Remote IDE for DeepSeek Harness (DSH) — connect to a server over SSH and the IDE goes remote: the file explorer browses the server's directory tree, the editor reads/writes files over SFTP, and the terminal is a live SSH PTY. No agent installed on the server, nothing to configure remotely — just SSH.
中文版：README.zh-CN.md
Why
DeepSeek Harness is a powerful coding agent, but its web GUI works on local files. When your code, data or production box lives on a remote server, you either SSH in separately or fight with sync tools. dsh-remote-ide brings the whole IDE into the harness:
┌──────────────────────────── dsh web GUI ────────────────────────────┐
│ sidebar: [远程 IDE] → opens the right-side IDE workbench │
│ ┌─────────── conversation (kept) ────────────┬───────────────────┐ │
│ │ agent chat keeps running while you work │ REMOTE IDE │ │
│ │ │ ┌─────────────┐ │ │
│ │ │ │ remote tree │ │ │
│ │ │ ├─────────────┤ │ │
│ │ │ │ editor tabs │ │ │
│ │ │ │ (SFTP read/ │ │ │
│ │ │ │ write) │ │ │
│ │ │ ├─────────────┤ │ │
│ │ │ │ xterm SSH │ │ │
│ │ │ │ terminal │ │ │
│ │ │ └─────────────┘ │ │
│ └────────────────────────────────────────────┴───────────────────┘ │
│ │ ↑ │
│ └── dsh host process ┘ ssh2 connection pool │
└──────────────────────────────────────────────────────────────────────┘
Features
- SSH host manager — password / private-key auth (with passphrase), ProxyJump chains, import from
~/.ssh/config, connection testing. Credentials stay in ~/.dsh/dsh-remote-ide.json (0600), secrets never reach the browser.
- Remote file explorer — lazy-loading tree over SFTP with per-directory caching, refresh, inline rename/delete, new file/folder.
- Remote editor — CodeMirror 6 with language support (TS/JS/Python/JSON/HTML/CSS/SQL/XML/Markdown); open reads the file via SFTP, Ctrl/Cmd+S saves it back to the server; binary sniff and 2 MB read cap keep the editor safe.
- Remote terminal — xterm.js over a WebSocket-tunneled SSH PTY with resize, reconnect-safe input buffering and backpressure handling.
- Agent tools (roadmap) — remote read/write/exec tools so the DSH agent itself can operate the connected server.
- better-sidebar integration — when dsh-better-sidebar is installed, a "Remote IDE" tab appears in its workbench (additive; the standalone panel still works without it).
- i18n — zh / en, follows the DSH language.
Install
Requires DSH (rc.6+) with a web profile, Node ≥ 22.
dsh plugin --profile web add dsh-remote-ide
dsh web
Restart dsh web after install (host-half change). The sidebar then shows a 远程 IDE / Remote IDE entry.
From source (development)
git clone https://github.com/<you>/dsh-remote-ide.git
cd dsh-remote-ide
pnpm install
pnpm build
dsh plugin --profile web add link:$(pwd) # or link:C:\path\to\repo on Windows
dsh web
Quick start
- Open the Remote IDE panel from the sidebar.
- Add host (alias / host / port / user / auth) — or import from ~/.ssh/config.
- Click Connect. The explorer switches to the server's home directory.
- Browse, click a file to edit,
Ctrl+S to save to the server.
- + New terminal opens an SSH shell in the panel.
How it works
A dual-face DSH plugin riding only official NPM SDK packages (@deepseek-ai/dsh-*) — no dsh source changes:
- Host half (
src/index.ts, Node process): SshEngine (ssh2 connection pool, jump hosts, exec, PTY shells, SFTP CRUD), the /api/dsh-remote-ide/* REST family, and the /api/dsh-remote-ide/terminal WebSocket upgrade. Every route is loopback-fenced.
- Browser half (
src/client/, web GUI): host manager, remote explorer, CodeMirror editor, xterm terminal. The sidebar entry is DOM-injected with a self-healing MutationObserver (the shell exposes no plugin slot), following the dsh-ssh precedent.
Host process Browser (dsh web GUI)
┌──────────────────────┐ ┌──────────────────────────────┐
│ SshEngine (ssh2) │ REST/WS │ sidebar entry (DOM injection) │
│ ├─ connection pool │◄─────────►│ Remote IDE panel │
│ ├─ exec / PTY shell │ │ ├─ host manager │
│ ├─ SFTP CRUD │ │ ├─ remote file tree │
│ └─ jump hosts │ │ ├─ CodeMirror editor │
│ store ~/.dsh/…json │ │ └─ xterm terminal │
└──────────────────────┘ └──────────────────────────────┘
Security notes
- All API routes are loopback-only (127.0.0.1 / localhost + same-origin check). A LAN-exposed dsh web does not expose the remote-exec surface.
- Passwords are stored plaintext in a 0600 user file (
~/.dsh/dsh-remote-ide.json) — same model as dsh-ssh; prefer key auth.
- The browser never receives stored secrets (summaries only).
- Remote file reads are capped at 2 MB; binary files are refused with a clear error.
Roadmap
Acknowledgements
This plugin stands on the shoulders of the DSH plugin ecosystem:
- dsh-ssh (Apache-2.0) — the SSH engine architecture, WebSocket terminal protocol and DOM-injection patterns this project builds on.
- dsh-better-sidebar (MIT) — the local IDE workbench whose service API this plugin integrates with.
- ssh2 (MIT), xterm.js (MIT), CodeMirror (MIT) — the underlying libraries.
License
Apache-2.0
