DeepSeek Harness Plugin

weichengwu/dsh-web-control

Category Remote & Mobile Added 2026-11-10

Manage a LAN or Tailscale reachable dsh web instance from inside DSH. dsh web listens on loopback by default; this adds a Settings > Web access panel that detects the machine's Tailscale and LAN addresses, starts dsh web bound to the one you pick, and shows the token URL to open on a phone or another machine. Also stops and restarts it, tails the child log, persists the bind address and port, and registers two agent tools (dsh_web_control, dsh_web_config). Zero runtime dependencies. Anyone who can reach the bound address and holds the token URL gets your dsh's full privileges (files and commands); LAN mode is plain HTTP, Tailscale is encrypted by the tunnel, and the token is single-use and changes on every start.

Install

# from a prebuilt release tarball

dsh plugin --profile web add "https://github.com/weichengwu/dsh-web-control/releases/download/v0.1.0/dsh-web-control-0.1.0.tgz"

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:weichengwu/dsh-web-control

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.