dsh-ssh-tunnel
用于 DeepSeek Harness 的多主机 SSH 隧道和 SSHManager 工具（项目范围授权）
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:thirsty5034/dsh-ssh-tunnel#c88da56ba30a13b62b79ec447125a446b0adc9d8Ssh Tunnel 以 dsh-ssh-tunnel 发布，当前版本为 0.4.6。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
DeepSeek Harness community plugin: multi-host SSH tunnel + SSHManager for dsh-better-sidebar.
projectPathKey = workspace cwd)SSHManager (exec, SFTP, session strategies)Does not replace global fs / subprocess with a single remote disk.
Companion: dsh-git-forge (Git credentials + push policy).
Product shape and several UX patterns are informed by open-source LiveAgent (multi-host SSH inventory, project-scoped access, sidebar tunnel management, center terminal / SFTP surfaces).
This package is a DSH-native implementation (Cordis host/client plugin, dsh-better-sidebar tab, SSHManager tool, DSH-local secret layout). It is not a git fork of LiveAgent and does not vendor LiveAgent sources. Consult LiveAgent under its own license when comparing designs.
macOS / Linux:
curl -fsSL https://raw.githubusercontent.com/thirsty5034/dsh-ssh-tunnel/main/scripts/install.sh | bash
Windows (PowerShell):
irm https://raw.githubusercontent.com/thirsty5034/dsh-ssh-tunnel/main/scripts/install.ps1 | iex
Or CLI (GitHub source until npm publish):
export DSH_HOME=${DSH_HOME:-$HOME/.dsh}
dsh plugin --profile web add "dsh-ssh-tunnel@github:thirsty5034/dsh-ssh-tunnel"
dsh --profile web --dump-config | grep ssh-tunnel
Restart DSH web after host-side changes, then hard-refresh the browser.
bash scripts/install.sh --restart
bash scripts/install.sh --from npm 0.3.6
dsh plugin --profile web add "dsh-ssh-tunnel@link:/path/to/dsh-ssh-tunnel"
dsh-plugin, deepseek-harness, dsh (required for dsh.so auto-index)Under $DSH_HOME/ssh-tunnel/ (mode 0700):
| File | Purpose |
|---|---|
hosts.json | Non-secret host metadata |
secrets.json | Passwords / PEM / passphrases (0600) |
grants.json | projectPathKey → hostIds[] |
known_hosts.json | Trusted host key fingerprints |
SSHManager action=list_hosts
SSHManager action=exec host_id=<id> command="uname -a"
SSHManager action=sftp_list host_id=<id> path=/
Session strategies: reuse_or_create (default; revives a disconnected session for that host), new, require_existing, or explicit session_id.
timeout_ms (1000–300000) applies to exec / SFTP / shell. Defaults: exec and SFTP metadata 30s, SFTP transfer 120s.
Auth is password or private key only. Keyboard-interactive / bastion-web MFA is not supported.
password / PEM / passphrase/workspace (lexical and realpath; outbound symlinks rejected)known_hosts.json; first connect / rotation prompts in the sidebar (fingerprint shown)Origin must match; session APIs require projectPathKeysecrets.json may have leakedsshTunnelzh / en on ctx.localeHost SSHManager strings stay English (model-facing).
npm test
npm run check
./scripts/sync-to-dsh.sh # requires DSH_HOME; keeps local-plugins copy
@xterm/xterm@5.5.0 + @xterm/addon-fit@0.11.0 are pinned runtime dependencies. The host serves their UMD/CSS from an allowlisted same-origin route (/dsh-ssh-tunnel/vendor/xterm.js|addon-fit.js|xterm.css); the client loads them with plain <script>/<link> tags. No CDN fallback and no module-table requirement.
MIT — see LICENSE.