dsh-lan-access

中文 | English

Bind the DeepSeek Harness (DSH) Web GUI to 0.0.0.0 so other machines on the LAN can reach it — plus a crypto.randomUUID polyfill that makes the GUI fully work over plain-HTTP LAN origins — without modifying any shipped dsh code.

Features

🌐 LAN access	Rebind the Web GUI to 0.0.0.0 via an id-targeted config patch. No --host flag involved, so the built-in 0.0.0.0 guard never runs
🛡️ crypto.randomUUID polyfill	Injects a tiny script into index.html so /api RPCs work on non-secure HTTP origins (the Web API is undefined there)
🔓 Remote privileged methods	Settings / credentials / agent presets work from the LAN too (allowRemotePrivileged, default on)
📦 Install once, keep working	Static bundle auto-mounts into the profile and loads at DSH startup, survives restarts

Install

One-liner (recommended)

Windows (PowerShell)

irm https://raw.githubusercontent.com/woyeshishen/dsh-lan-access/main/scripts/install.ps1 | iex

macOS / Linux

bash <(curl -fsSL https://raw.githubusercontent.com/woyeshishen/dsh-lan-access/main/scripts/install.sh)

dsh plugin command

From npm

dsh plugin --profile web add @woyeshishen/dsh-lan-access

From GitHub

dsh plugin --profile web add github:woyeshishen/dsh-lan-access

After install, the plugin auto-mounts into the profile; restart DSH (or hot-reload) to activate.

Notes

• The bind host is pinned to 0.0.0.0 by this plugin's patch; edit cordis.patch.yml if you need a different posture.
• --port still works (the patch keeps the !!js port expression).
• By default privileged /api methods (settings/credentials/agent presets) are reachable from trusted LAN hosts (allowRemotePrivileged: true); set config: { allowRemotePrivileged: false } on the lan-access row to restore loopback-only for them.
• Uninstall: dsh plugin --profile web remove @woyeshishen/dsh-lan-access
• This plugin intentionally exposes a remote-code-execution surface to the network — only use it on a trusted LAN.

Development

npm install
npm run build     # tsc -> lib/
npm run check     # type-check only
npm run check:legacy   # cordis.patch.yml structure sanity check

License

Apache-2.0