A LAN password gate for the Web UI: phones and tablets on the same network log in with a shared key and see the same sessions in real time, with a built-in randomUUID polyfill for plain-HTTP origins.
Install
# from npm (prebuilt)
dsh plugin --profile web add dsh-lan-pass
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:x2802490130-prog/dsh-lan-pass
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).
README
This plugin publishes its README in Chinese only.
DSH 局域网密码门禁：让手机/平板在同一局域网内通过密码访问本机的 DSH Web UI（http://电脑IP:3080）。
- 手机打开地址 → 输入访问密钥 → 进入完整 UI，会话/输入输出与电脑实时同步（同一后端，天然同屏）
- 本机（localhost/127.0.0.1）访问永不拦截，无感知
- 内置
crypto.randomUUIDpolyfill（HTTP 非安全上下文必需，替代 dsh-web-lan-access 的作用） - 登录页移动端自适应
安装
```bash dsh plugin --profile web add link:/path/to/lan-pass ```
配置（密码）
默认密钥：deepseekyyds —— 装完即用，无需任何配置。
⚠️ 默认密钥是公开的，等于没上锁！请尽快改成你自己的：
- 环境变量
DSH_LAN_PASSWORD，或 - 编辑
%USERPROFILE%\.dsh\.credentials.yaml，加一行：
```yaml DSH_LAN_PASSWORD: 你的新密钥 ```
- 重启 dsh 生效。使用默认值时启动日志会打印警告。
启动（关键）
```bash dsh web --host 0.0.0.0 ```
并放行防火墙（管理员 CMD）：
``` netsh advfirewall firewall add rule name="DSH Web 3080" dir=in action=allow protocol=TCP localport=3080 ```
手机浏览器打开 http://<电脑局域网IP>:3080（ipconfig 查看 IPv4），输密钥即可。
安全边界（如实说明）
- 门禁校验在服务端完成：Cookie 为 HMAC 令牌，HttpOnly
- 但 webServer 无全局中间件，未认证设备理论上仍可直呼 /api/ 接口*（进不了 UI）。仅建议在可信家庭局域网使用；跨不可信网络请改用反向代理方案（如 dsh-mobile-gate + HTTPS）
- 密钥走明文 HTTP，别用重要密码，建议 8 位以上随机串
License
MIT
Links
More in this category
toby-bridges/api-relay-audit★ 861
Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.
SeaOf0/dsh-redteam-model★ 646
Authorized-security DSH collection: nine work modes (redteam coordinator, pentest, code audit, binary analysis, attack-defense, AV evasion, incident response, cloud security, CTF solving) and fifteen runtime plugins, managed from a settings page with one-click deploy, install, update and uninstall.
howmp/dsh-pentest★ 559
Authorized pentest mode for DeepSeek Harness — exploration chain, assets and findings with a Web view.
PerryLink/dsh-auto-review★ 212
Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
NanmiCoder/dsh-auto-mode★ 164
Adds an Auto permission preset between Workspace Write and Full access: routine work stays in the official workspace-write sandbox while the current session model reviews escalation and destructive calls, granting one exact wider access once, asking when the intent is ambiguous, and denying critical paths.
PerryLink/dsh-permission-rules★ 115
Claude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.
Community comments
Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.