@januory/dsh-gateway-agent
客户机接入插件：出站连接 deepseek-harness-gateway，桥接本机 dsh web 供门户完整操控。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @januory/dsh-gateway-agent@0.2.2Gateway Agent 以 @januory/dsh-gateway-agent 发布，当前版本为 0.2.2。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
The customer-machine access plugin for deepseek-harness-gateway.
dsh-gateway-agent is a DeepSeek Harness plugin installed in the dsh that runs on a customer machine. It opens a single outbound WebSocket to the gateway and bridges the machine's local dsh web UI over that same tunnel — so the machine needs no inbound port, port mapping, or public IP.
../../apps/gateway) running and reachable from the machine, e.g. wss://gateway.example.com/agent.dsh plugin --profile web add ./plugins/dsh-gateway-agent
(Once published, this becomes dsh plugin --profile web add @januory/dsh-gateway-agent.)
wss://<gateway-host>/agent) and the pairing code, then click 发起入网申请 (Request onboarding).The plugin persists its configuration as JSON at $DSH_HOME/dsh-gateway-agent/config.json:
| Key | Description |
|---|---|
gatewayUrl | The gateway WebSocket endpoint, e.g. wss://gateway.example.com/agent. |
pairingCode | The pairing code issued by the gateway administrator. |
dshPort | The local dsh web port to bridge (default 3080). |
Values entered in the 网关接入 UI are saved here; the plugin auto-connects on boot when gatewayUrl is already set.
The plugin runs as a dsh host plugin (Node) plus a small settings card in the browser client. On the host side it dials gatewayUrl, completes a pairing-code + HMAC challenge-response, then relays browser requests and WebSocket streams from the gateway to the machine's loopback dsh web (127.0.0.1:<dshPort>), injecting an operator cookie minted in-process via the dsh Connection service. Each relayed request is re-declared as one consistent same-origin loopback request: besides rewriting Host, the agent sets Origin (and any Referer) to http://127.0.0.1:<dshPort>, so third-party handlers that require Origin === Host — such as the plugin market's POST routes — work over the tunnel too.
See the project README for the full architecture.
Tick Settings → 网关接入 → 守护进程服务 and the machine’s dsh lifecycle (start / stop / restart) is owned by a standalone supervisor process, so the gateway portal’s machine catalog can control it remotely.
Leave it unticked if you do not need remote lifecycle control — nothing else changes.