dsh-full-remote

Listed in awesome-dsh-plugin · DeepSeek Harness plugin

Current release: v0.5.0 · Distributed through GitHub Releases

English | 中文

dsh-full-remote is a plugin for DeepSeek Harness. It places an authenticated reverse proxy in front of the Harness Web server, so the Web UI can be used through a public tunnel or from a device on the local network while privileged APIs such as settings, credentials, and directory browsing remain available.

New in 0.5.0

• A selectable cross-session Task cockpit for approvals, questions, plan review and session navigation; page-lifetime drafts, offline guards and no write replay.
• Negotiated Brotli/gzip, device-isolated encoded static caching, an owned upstream connection pool, activity-aware expiry and visibility-aware, non-overlapping polling.
• Keeps DeepSeek Harness 0.2.1-rc.2 compatibility and the existing authentication and loopback-only proxy-management boundary.

Measured gains — and trade-offs

Fifteen paired local HTTP rounds against the previous already-gzipped version; these are cumulative request times, not LCP or real mobile page-load measurements.

Scenario	Baseline → 0.5.0 candidate	Meaning
Cold HTML + 4 entry assets	42.08 → 25.61 ms; 415,637 → 415,534 B	−39.1% HTTP time, only 0.025% fewer body bytes
40 warm static requests	424.68 → 28.15 ms; upstream requests 40 → 0	−93.4% HTTP time, not 100% less downstream traffic
40 conditional requests	Body 0 → 0 B; headers 6,360 → 9,800 B	Both already return 304; candidate avoids upstream but adds metadata
10 synthetic dynamic JSON requests	8.82 → 10.25 ms	16.2% slower locally; no API caching
Real React components, simulated 60 s	Hidden RPCs 50 → 0; slow visible RPCs 48 → 20	Normal visible RPCs stay 50; not a battery-life claim

Full method, same-encoding controls, limits and reproduction: English benchmark · 中文完整报告.

60-second quick start

curl -fLO https://github.com/JUANWANG-BUAA/dsh-full-remote/releases/download/v0.5.0/dsh-full-remote-0.5.0.tgz
dsh plugin --profile web add ./dsh-full-remote-0.5.0.tgz
dsh --profile web

In Settings → Reverse proxy, press Start proxy, then Start Cloudflare quick tunnel and scan the generated QR code. The invite is one-time and never contains the standing access token. For a controlled network, point an existing SSH, frp, ngrok, Tailscale, or cloudflared tunnel at the proxy target shown in the panel instead.

The quick tunnel is optional and temporary, not a managed production deployment. Read Security model before exposing a listener to the Internet. For composition details, see Compatibility and composition.

Desktop control panel	Mobile workspace

Task cockpit inbox	Cockpit question form

Problem

…