dsh-plugin-qr-connect
DeepSeek Harness (DSH) Web 插件：在“设置”上方提供一个二维码按钮，让手机通过受身份验证保护的反向代理连接到 Web 界面。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-plugin-qr-connect@0.1.3
Plugin Qr Connect 以 dsh-plugin-qr-connect 发布，当前版本为 0.1.3。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
dsh-plugin-qr-connect banner — scan to connect any device to your DeepSeek Harness web UI
English | 中文
A DeepSeek Harness (DSH) Web plugin that adds a QR-code button above the Settings button in the sidebar footer. It runs a small auth-gated reverse proxy so a phone on the same network (or the internet) can scan a QR code and open the web UI securely. It is a persistent bundle plugin (a host half plus a browser half) that loads on every boot.
dsh-plugin-qr-connect demo — click the QR button, scan, connect
sidebar.footer.action, id qr-connect) stacked
above the shipped Plugins button.http://<lan-ip>:<port>/?auth=<secret>.http://<public-ip>:<port>/?auth=<secret> (blue).node process on 0.0.0.0:<port>) validates the
secret, issues a session cookie (default 30 days), and forwards to the
loopback web UI — including WebSocket upgrades so live updates reach the phone.0 disables auto-refresh).| File | Purpose |
|---|---|
lib/index.js | Host half — runs the reverse proxy and the /__qr/* state routes. |
lib/client.js | Browser half — the QR button and the settings card. |
lib/proxy.cjs | The auth-gated reverse proxy child process (HTTP + WebSocket). |
cordis.patch.yml | Composition patch that inserts the plugin row. |
package.json | Package metadata (dsh.bundle + dsh.client manifest). |
dsh plugin --profile web add github:mervyn-teo/dsh-plugin-qr-connect
Then restart dsh web — host bundles load at boot.
Defaults live in cordis.patch.yml (port, sessionDays, refreshSeconds,
publicHost). Change them there (or in the profile's own cordis.patch.yml)
and restart, or adjust them from the settings card — edits are written to the
qr-connect settings namespace's user layer, so they survive restarts and
layer over the composition defaults. publicHost is a custom domain or IP
used for the public-internet QR code instead of the auto-detected public IP
(accepts host, host:port, or a full https:// origin; empty = auto-detect). The host half serves three same-origin routes the
browser half uses: GET /__qr/info, POST /__qr/rotate, and
GET|POST /__qr/config.
subprocess, fs, and webServer services mounted, plus the
settings service for the Settings → Plugins card (without it the card is
hidden and edits stay runtime-only).https://api.ipify.org).Local-IP and public-IP detection run in-process (no ip/curl/shell commands),
and manual secret rotation signals the proxy child over its stdin, so the host
half works on Windows, macOS, and Linux.
The proxy exposes the full agent shell to anyone who can reach the port, gated only by the 30s secret and the session cookie. Use a short session length and treat this as a trusted-network convenience, not a hardened remote-access layer.