@xiaosenho/dsh-plugin-remote-access
为 DeepSeek Harness Web UI 提供经身份验证的局域网和 frpc 隧道访问
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:xiaosenho/dsh-plugin-remote-access#40cee2c77fd56b0920b1f0ed96c44e94165e9b22Plugin Remote Access 以 @xiaosenho/dsh-plugin-remote-access 发布，当前版本为 0.1.4。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
@xiaosenho/dsh-plugin-remote-access is an installable bundle for the DeepSeek Harness Web profile. It adds a Remote Access settings section, starts LAN access or an frpc tunnel on demand, and produces authenticated links for controlling the full Web UI from another computer, tablet, or phone.
Install from npm:
dsh plugin --profile web add @xiaosenho/dsh-plugin-remote-access
Install a local checkout:
dsh plugin --profile web add ./dsh-plugin-remote-access
Pin a commit when installing from a Git repository:
dsh plugin --profile web add github:xiaosenho/dsh-plugin-remote-access#<commit>
A Git install runs this package's prepare build. pnpm initially refuses an unapproved dependency build; follow the dsh diagnostic, allow the package in the Web profile's pnpm-workspace.yaml, then repeat the install:
allowBuilds:
'@xiaosenho/dsh-plugin-remote-access': true
This permission lets the dependency execute build code on the host. Install only trusted source and pin a commit. An npm release or tarball containing lib/ needs no Git prepare permission.
dsh --profile web and open Settings > Remote access.The token in the link is an access credential. The first request exchanges it for an HttpOnly, SameSite=Strict cookie and removes the token from the address bar. Disabling, re-enabling, or changing an active configuration revokes the old link.
The host must provide an frpc executable compatible with the server's frps version. In Settings, enter its absolute path or use the file button to select the local executable. The plugin resolves frpc from PATH by default; frpcPath in the Web profile remains the deployment fallback and the other process limits are configured there:
- id: remote-access
config:
listenPort: 3081
frpcPath: /opt/homebrew/bin/frpc
processGraceMs: 3000
frpcStartupTimeoutMs: 500
frpcOutputMaxBytes: 32768
requestMaxBytes: 16384
Select Tunnel in Settings and provide:
frps control hostname or IP.frps.bindPort, commonly 7000.server.token: the same token configured as [auth].token on the server.https://dsh.example.com.remotePort, such as 203.0.113.10:18080.Domain mode creates an HTTP-type frpc proxy with customDomains. Public HTTP can use frps.vhostHTTPPort directly. For public HTTPS, terminate TLS at a server-side reverse proxy or load balancer and forward to the frps HTTP vhost; this plugin does not present the local Web UI as a TLS origin. IP + port mode creates an frp TCP proxy and sets remotePort, so users open http://<public-ip>:<remote-port> without DNS. The frps allowPorts policy must permit that port. Direct IP mode is HTTP-only; use Domain mode with a trusted certificate for HTTPS.
The plugin also installs a browser-side crypto.randomUUID() compatibility method when an HTTP origin provides crypto.getRandomValues() but not randomUUID(). This keeps Harness workspace RPC calls usable on ordinary LAN HTTP pages without changing the DeepSeek Harness repository.
401 at the authenticated proxy.server.token is a secret Harness setting. It is written only to a 0600 TOML file in a random private directory and never appears in argv, browser responses, or access links.pnpm install
pnpm run typecheck
pnpm run test
pnpm run build
pnpm pack creates a prebuilt archive installable with dsh plugin --profile web add ./xiaosenho-dsh-plugin-remote-access-0.1.3.tgz.