dsh-plugin-ssh-manager

Manage DSH instances running on multiple machines (multi-IP) from a single
DSH terminal, connected through SSH tunnels.
在一台终端上通过 SSH 隧道管理多台机器（多 IP）上的 DSH。

• Each configured remote host gets an ssh -N -L tunnel from this machine to
  the remote DSH web server (127.0.0.1:<remotePort> on the remote side).
• Every host is assigned a stable local port (21300–21399 by default, or a
  port you pin), so the remote console is always reachable at
  http://127.0.0.1:<localPort>.
• Hosts can auto-connect on startup and auto-reconnect with backoff.
• Two surfaces: a sidebar quick menu (远程 DSH) that lists hosts and
  opens the remote console in one click, and a full management page under
  Settings → SSH 隧道主机 (add / edit / delete / connect / disconnect).
• A model tool ssh_manager is registered too, so the agent itself can
  list / status / connect / disconnect / open tunnels on request.

Install / 安装

Install into a dsh profile (the profile this app runs, usually web):

dsh plugin --profile web add github:ljh220300-eng/dsh-plugin-ssh-manager

or with plain pnpm inside the profile directory:

pnpm -w add github:ljh220300-eng/dsh-plugin-ssh-manager

For local development use a path spec instead
(dsh plugin --profile web add file:F:/work/dsh-plugin-ssh-manager).

After installing, restart the app (host half loads at boot) and refresh the
page (client half). The dsh plugin command reconciles the
dsh.profile.bundles layer list for you automatically.

Authentication / 认证

• Key (推荐 / recommended) — ssh-agent (default) or an explicit
  identity file. Requires the key on the ssh agent or at the given path;
  first use of a remote host auto-accepts its host key
  (StrictHostKeyChecking=accept-new). In the settings form, 选择文件 /
  Choose file imports a private key straight from your file system — the
  content is uploaded to the local plugin store
  ($DSH_HOME/plugins/ssh-manager/keys/, one file per unique key content,
  mode 0600) and the path field is filled for you; the file is removed
  again when its last host is deleted. Typing a host-side path manually
  still works.
• Password (密码) — supported through an SSH_ASKPASS wrapper that the
  plugin generates next to its config; the password is stored in
  $DSH_HOME/plugins/ssh-manager/hosts.json (file mode 0600) and passed to
  ssh via environment only — it never appears in process command lines.
  OpenSSH ≥ 8.4 (SSH_ASKPASS_REQUIRE) is required; on older clients switch
  to key auth.

Configuration / 配置

• Registry: $DSH_HOME/plugins/ssh-manager/hosts.json
  (~/.dsh/plugins/ssh-manager/hosts.json unless DSH_HOME is set).
• One record per remote host:

{
  "name": "lab-01",
  "sshHost": "192.168.1.10",
  "sshPort": 22,
  "sshUser": "root",
  "authMethod": "key",
  "identityFile": "C:\\Users\\me\\.ssh\\id_ed25519",
  "passphrase": "",
  "remoteHost": "127.0.0.1",
  "remotePort": 3080,
  "localPort": null,
  "autoConnect": true
}

• remotePort is the port the remote DSH web server listens on
  (dsh web defaults to 3080; the desktop app picks its own — check the
  remote machine's GUI URL).
• remoteHost is the bind address to reach on the remote side through ssh;
  keep 127.0.0.1 when DSH runs on the ssh host itself.
• Passphrase-protected keys are supported: passphrase is answered through
  the same SSH_ASKPASS mechanism as passwords (environment only).

Requirements / 依赖

• An OpenSSH client (ssh) on this machine — Windows ships it as an
  optional feature (设置 → 可选功能 → OpenSSH 客户端); the plugin also
  probes C:\Windows\System32\OpenSSH\ssh.exe and /usr/bin/ssh.
• No additional npm dependencies; it runs against the packages the dsh
  profile already provides (@deepseek-ai/dsh-tools,
  @deepseek-ai/dsh-home-paths).

License

MIT