DeepSeek Harness Plugin

buger-gif/dsh-remote-huaweicloud-devbridge#dsh-plugin

Category Remote & Mobile Added 2026-11-07

Remote control for DeepSeek Harness over an outbound Huawei Cloud DevBridge tunnel: a sidebar seat and a standalone control page start and stop the tunnel and show its public URL, QR code and logs. The plugin's own gateway stays on 127.0.0.1, checks a rotatable access token or HMAC session cookie, rate-limits failures and strips external identity headers before forwarding to DSH, so no inbound port is opened. The tunnel is off by default; tokens and state stay under ~/.dsh. Requires a Huawei Cloud account and devbridge CLI v0.2.x. The relay terminates TLS and can see plaintext HTTP — this is access control, not end-to-end encryption.

Install

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:buger-gif/dsh-remote-huaweicloud-devbridge#path:/dsh-plugin

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.