Plugins

Complete mobile PWA for DSH, built on dsh-mobile-gate: secure remote-access gateway plus install-to-homescreen (manifest + service worker), offline capability, touch gestures (pull-to-refresh, edge-swipe back, pinch-zoom font), agent-done push notifications, and touch-first layout — desktop unaffected.

Bridge DeepSeek Harness sessions to Cherry Studio desktops over the LAN - QR pairing, 15 cherry_* tools for agents, sessions, history and interactions (including uploading local files as attachments and reading desktop-uploaded images back as image blocks), a settings page for devices and per-workspace tool scope, and an experimental subagent that delegates the way DSH's own subagent does (Claude Code / Codex style) with the child running on a Cherry Studio agent.

Use DSH from a phone browser. Turn on phone access from the phone button in the session header (or the plugin card) and scan the QR code; the phone opens the official DSH web UI served by the desktop process, with the same sessions updating live, so you can follow a running task, reply and approve away from the computer. A gateway inside DSH (port 18765) proxies the web UI and handles the desktop login itself. One QR code works on Wi-Fi and on mobile data: turning access on also starts a free Cloudflare quick tunnel (cloudflared is downloaded from Cloudflare's GitHub releases if missing), and its address survives DSH restarts, so phones do not need to rescan. Pairing codes are one-time and expire in 10 minutes, each phone gets its own revocable credential, the header button shows when a phone is connected, and idle connections get keepalive pings. Optional push notifications go to Bark, ntfy, ServerChan, Feishu / WeCom / DingTalk group bots, Telegram or any webhook when a task finishes (after 30 seconds or more), stops with an error, or waits for an approval or an answer; they carry only the session title and status, and approval still happens in DSH. On a phone the web UI's side panels slide over the page, and it can be added to the home screen with its own icon.

Exposes any local service on a LAN address and a public cloudflared quick-tunnel domain behind one password login, with per-route open/block gates managed from the plugin settings page. Requires Python 3 and cloudflared on the machine, and reports either of them being missing or misconfigured in the settings page before you start; LAN and local access are passwordless by default, while the public tunnel requires the passcode.

Pairs two DeepSeek Harness machines with a one-time code - directly on a LAN, or across networks through an end-to-end-encrypted relay with a zero-config official default - so one agent can run tasks and exchange files on the other while each machine keeps its own files in place.

Reverse tunnel for the DSH Web GUI: exposes a `dsh --profile web` deployment at a public frp URL and switches the directory picker to the in-app browser, so a phone or remote machine can open and manage the workspace.

Browser-first, LAN-only access to the current DeepSeek Harness Web UI with one-time QR pairing, revocable devices, event-driven diagnostics, and a slot-preserving mobile layout; no companion app, cloud relay, or remote tunnel.

Remote access to running DeepSeek Harness sessions from a phone browser: scan a one-time QR code to continue conversations, answer approvals and start new tasks over Wi-Fi or a tunnel.

Connects DeepSeek Harness to the hosted Local Commander MCP server at localcmd.app via mcp-remote with browser sign-in, to read files and Git, run the checks you approve and check local services on your Windows computers. Requires a Local Commander account and the paired agent running on the Windows PC.

Adds a toggle to the DSH UI that opens the current session to a phone browser through an embedded loopback reverse proxy and a Cloudflare quick tunnel, and pushes each new tunnel address to WeChat.

LAN-only remote access for DSH: pair a phone or another PC by QR code or token to open the same web UI, with optional key-free access inside the LAN.

Cloudflare Zero Trust access for DeepSeek Harness (DSH). Access 认证、Tunnel 与 DNS 配置，无需公网 IP。

DSH remote-access authorization page that shows the current process browser-session URL as a clickable link or QR code, behind an optional authority/subnet allow-list and PIN.

Tailscale remote-access operations panel for the dsh web GUI: health checks, HTTPS entry toggle via tailscale serve, macOS proxy bypass, relay server ops, and ACL snippet generation.

Map dsh workspaces onto Discord — watch every session live, drive and steer agents, and reach the harness's own commands from anywhere, with no inbound port.

Remote access for DeepSeek Harness: open your desktop DSH web UI from a phone through your own Cloudflare relay.

IPv6 remote-access gateway for DSH: PIN-protected HTTPS reverse proxy with a Let's Encrypt certificate (DNS-01 via DuckDNS), QR scan-to-connect and a settings page, no relay in the data path. Needs a public IPv6 address (detected on Windows and Linux only, not macOS), a free DuckDNS subdomain and token, and inbound ports 8787/8788 open on the router; the AAAA record is only auto-updated when the plugin config sets ddns or tls.

Control your DSH from your phone: opens a port on the mesh/VPN interface from inside the running process, so a phone browser gets the very same instance and session list — no SSH, no second dsh. Also works from another PC, a GUI NAS, or a TV box.

Exposes a DSH Harness Desktop Web GUI to another machine's browser through a Cloudflare quick or named tunnel, an SSH reverse tunnel, or a custom command, and hands out a tokenised link to open it; a settings panel and CLI start, stop and print the link. Needs DSH Desktop 0.2.1-rc.2 or later and a cloudflared binary.

Host-side dsh plugin that pairs a phone to a dsh instance through a self-hosted relay: one outbound connection carries the session list, streaming chat, approvals, attachments and file previews to a dedicated mobile web shell, and devices pair with a one-time QR link and can be revoked from a console inside the dsh web GUI.

Phone access to the DSH web UI: LAN pairing plus remote access through your own tunnel command (e.g. cloudflared) or a fixed public URL, with automatic LAN-to-tunnel failover and dshlanpair:// deep links; the phone client is the bundled Android app (APK, Android 8+, sideloaded).

Remote access for DeepSeek Harness: expose this machine's DSH Web GUI through an SSH reverse tunnel and a QR gate — scan and enter. Requires your own Linux server with root SSH access plus nginx, openssl and qrencode; it rewrites that server's nginx config, and the QR link is a one-year login secret, so treat it like a password.

DSH Web 插件：把 DSH Web GUI 发布到 tailnet（远程入口），并把 tailnet 设备与可达性暴露为 ctx.tailscale 服务，供其他插件消费

Puts a key badge in the bottom-right corner of the dsh Web GUI that shows the port this instance is listening on and the remote-access token printed by dsh web at startup, with a copy button per value; clicking the badge rotates the key into a cross, and clicking it again or anywhere beside it collapses the panel.