Plugins

Mobile remote-control suite: bundle plugin with native sidebar entry and admin drawer, self-healing bearer-token gateway over LAN/Tailscale, Android app (sessions/approvals/questions/goals), /fs/* file transfer (Range resume, 2GB upload), latency-based multi-server auto-switch, offline chat cache.

Native SSH remote development for DSH: remote workspaces, mirrored sessions, terminal and file access, approvals, and a DSH UI. Requires DSH Desktop 0.2.1-rc.2 and a remote host running Linux or macOS.

Exposes the local DSH web GUI to one chosen CIDR range only (Tailscale by default) instead of binding 0.0.0.0: the proxy listens on addresses inside that range, rejects peers outside it, and admits clients by either a tokenised URL or a 4-12 character alphanumeric access code. Remote pages can be forced into a phone layout without changing the local UI, and the official appearance, font size, transcript view, code view and performance settings can be stored in the plugin config and re-applied on every remote page load.

A minimal phone remote control for DeepSeek Harness: the phone page carries only the instruction you send and the AI's final conclusion, while tool calls, file access, sub-agent dispatch, and reasoning traces stay on the computer, reachable over LAN, Tailscale, or a Cloudflare tunnel with a QR code, link, and password for each route.

Remote development launcher for DeepSeek Harness: provisions dsh on a remote host via SSH (or a local WSL distro) and connects from the local client, with LLM credentials proxied through a reverse tunnel so they never leave the local machine. Ships as both a standalone CLI and a dsh plugin with a session panel, /remote-explorer slash command and remote_* agent tools.

Lifecycle management UI for the llm-pi-ai model provider: create, edit, delete, enable and disable providers with custom headers and AES-GCM-encrypted API keys; uninstall-safe restore of parked providers, remote model discovery with batch write, smart routing with five strategies, union/intersection composites, per-model connectivity tests, and request observability.

⭐ Drag-and-drop uploads of any file or whole folders, anywhere in the window; remote-safe — bytes go straight into the session workspace on the server, so a DSH deployed on a remote machine works exactly like localhost.

Composer and sidebar helpers in one plugin, each switchable in Settings: a git Changes panel, Turn rollback, Resume after an AIProxy outage, Project memory (notes per project that later chats read, off by default), a Task board (kanban board of chats by their live state), Assistant (one lasting chat named Damon that sets reminders with dsh scheduled tasks and reads your other chats; it changes a chat only after an approval) with Assistant callouts, Assistant always free (long steps go to background subagents) and Assistant news from chats (off by default), Remote computers (another Mac's dsh over Tailscale, off by default), 11 extra UI languages and Automatic updates.

Remote access for the DSH Web GUI: LAN QR access, cloudflared quick tunnels, and frp reverse proxying via your own server, with a built-in auth portal.

Phone and remote access to the DSH Web UI: scan a LAN QR code, or reach your PC from anywhere through a self-hosted relay server you run yourself instead of a cloudflared tunnel. Per-device credentials that pair, list, and revoke individually, and several PCs sharing one relay with automatic failover.

Remote development over SSH: pick a directory on a registered machine as the session workspace and the file, shell, bash, and search tools run on the remote host — the agent works there with the same local tools, and no extra model-facing tools are added.

Phone access to DSH over a self-hosted relay (WSS via your own TLS-terminating proxy): bundle plugin with bridge supervisor and QR login, a native Android app, and server-side device revocation.

Identity-gated Tailscale access to the Web GUI with dsh still bound to loopback: a 127.0.0.1 proxy published by `tailscale serve` admits a request only when the Tailscale login it stamps is allowed, with an optional per-device allowlist, so the privileged /api methods behind the loopback check — Settings, Models, Plugins — answer without dsh being told to trust a remote host.

Multi-device DSH network: sidebar topology, peer health, delegation, file transfer and node management over TLS, LAN and public tunnels. DSH spawns its mesh server (127.0.0.1:8124) detached at startup and restarts it if it exits, and the server always answers LAN discovery on UDP 0.0.0.0:8129. Once a peer is paired, the default ACL lets it read, search and write files under ~/Code, read session history and logs, and delegate tasks to your DSH sessions; shell_run, channel messages, remote desktop and repair stay off until you allow them. If SakuraFrp is installed it reads that launcher's account token (or SAKURA_TOKEN) to query api.natfrp.com tunnels. Its /api/dsh-mesh routes are guarded only by a loopback peer-address check.

Git panel for the DSH web GUI with a commit graph, branch filters, working-tree status, per-commit diffs, stash, merge-conflict handling, remote sync and repository settings.

HarmonyOS development suite for DSH: a right-sidebar HiLog inspector (live stream with level/logger/text filters) and an ArkUI Inspector (screenshot pick, collapsible component tree, node properties with search, box model), two tree sources — the DevEco debug channel (declared padding/margin/border and custom component names) and the uitest accessibility tree — an .ets viewer with ArkTS syntax highlighting, DevEco Studio/CLT toolchain and device management, plus the harmony_ui_tree agent tool. 21 remote methods, 82 unit tests.

Requires the phone app, not just this plugin: the phone half is a separate APK and must be installed first — download it from https://github.com/Zoragyx/dsh-phone-pair/releases — otherwise the computer side has nothing to pair with. This package is the computer half: it enables the upstream remote-web-ui pairing plugin with a Cloudflare quick tunnel and a fixed relay subdomain, so one scan keeps the phone connected from anywhere.

Translates DSH's private remote protocol into a versioned REST API (chat, sessions, files, devices) for trusted clients such as the Android app dsh-companion, plus a Phone-settings panel inside the DSH WebUI settings: five cards in the main list (remote access, public tunnel, devices, trash, app download) and an Advanced settings group holding authorized roots, image reading and plugins.

Multi-machine, multi-agent orchestration and control plane for DSH: discovers Agents and workspaces across devices, routes tasks by machine, repository, capability, and load to local or remote Agent runtimes, streams progress and results, forwards approvals, and recovers durable tasks after disconnections.

Two-way WeChat bridge for DeepSeek Harness via the iLink protocol: bind your personal WeChat with a QR scan and chat with a local DSH agent from the chat box (text, images, voice-to-text, files); a web settings panel handles binding/start/stop/status, project-session binding continues the conversation on desktop, proactive wechat_notify pushes include throttling, and the pure-Node daemon runs on Windows/macOS/Linux.

Use Kimi Code as the DSH agent loop over ACP, with approvals, slash commands, and local/remote (ssh+tmux) session attach.

SSH remote-execution plugin for DeepSeek Harness — ProxyJump chain, SFTP filesystem, subprocess and PTY over ssh2

Remote host tunnel manager: runs dsh web on a remote Linux server (systemd supervision, no root needed) behind an auto-reconnecting SSH tunnel; allocates and registers remote ports on the server, multi-user safe, with an audit view.

Secure remote access for the official Web UI: authenticated LAN/tunnel gateway with QR + HMAC one-time pairing, per-device sessions and revocation, mDNS discovery, and a fork_session tool.