dsh-vnc-client
DeepSeek Harness 右侧边栏中的 VNC 客户端标签页：通过运行于 Host 中的 WebSocket-to-TCP bridge 连接到任意 VNC/RFB 服务器的 RFB 客户端
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:wilsonchengassistant/dsh-vnc-client#9fcc61a8cacfdf604e4702849607353ac7179235
Vnc Client 以 dsh-vnc-client 发布，当前版本为 0.1.2。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A VNC client tab for the DeepSeek Harness right sidebar.
It connects to any VNC/RFB server — not just the machine the harness runs on — through a WebSocket-to-TCP bridge that runs in the Harness Host. Servers are saved from the plugin's own page under Settings → Plugins → dsh-vnc-client.
The Remote desktop tab connected to a server
dsh plugin --profile <profile> add dsh-vnc-client
Then restart the harness. A plugin bundle is composed at boot, so the tab does not appear until the Host restarts.
To connect the sidebar guide's Remote desktop entry to a specific server, open Settings → Plugins → dsh-vnc-client, add the server, and click Test to confirm it answers before switching to it.
Saved servers in the plugin's settings
A DSH plugin is two halves in one package:
| Half | Where | What it does |
|---|---|---|
| Host | src/host/index.js | Mounts a WebSocket upgrade route and a TypertRemoteService for saving servers |
| Client | src/client/app.js | Registers the sidebar tab type, the settings seats, and the guide command |
A browser cannot open a raw TCP socket, so the Host accepts a WebSocket at
/api/vnc/bridge?target=<id> — authenticated by the same connection check the Gateway uses —
and pumps bytes to and from the VNC server. The password is never put in the URL: it travels
over the RPC channel and is resolved by the Host at connect time, so it stays out of access logs.
Servers live in vnc-client/targets.json under the Harness home, written 0600 in a 0700
directory. The list RPC reports only whether a password is set, never the password itself.
DecompressionStream emulates persistent zlib, because Tight and ZRLE keep deflate state across
rectangles and a browser has no incremental inflater. VNC authentication needs DES, which Node
dropped and WebCrypto never had, so src/client/rfb/des.js implements it.
JPEG is deliberately not advertised: a Tight JPEG rectangle cannot be painted without a separate decoder, and offering it would make the client pick an encoding it cannot draw.
node scripts/build.mjs # src/ → lib/
node --test "test/*.test.mjs"
scripts/build.mjs inlines the client's ES modules into the single factory body the harness
loads, and refuses to build a bundle containing a jsx call React would silently render as
nothing — a null props object, or children passed as trailing arguments where the runtime expects
a key. Both fail in the browser as an empty sidebar tab, far from the call that caused them.
The tests cover DES against FIPS vectors and OpenSSL, every supported encoding round-tripped through an independently written encoder, the handshake against a real socket (including one-byte-at-a-time fragmentation), the WebSocket server against Node's own client, and the built bundle's contract.
MIT — see LICENSE.