dsh-lan-access
中文 | English
Bind the DeepSeek Harness (DSH) Web GUI to 0.0.0.0 so other machines on the LAN can reach it — plus a crypto.randomUUID polyfill that makes the GUI fully work over plain-HTTP LAN origins — without modifying any shipped dsh code.
Features
| 🌐 LAN access | Rebind the Web GUI to 0.0.0.0 via an id-targeted config patch. No --host flag involved, so the built-in 0.0.0.0 guard never runs |
🛡️ crypto.randomUUID polyfill |
Injects a tiny script into index.html so /api RPCs work on non-secure HTTP origins (the Web API is undefined there) |
| 🔓 Remote privileged methods | Settings / credentials / agent presets work from the LAN too (allowRemotePrivileged, default on) |
| 📦 Install once, keep working | Static bundle auto-mounts into the profile and loads at DSH startup, survives restarts |
Install
One-liner (recommended)
Windows (PowerShell)
irm https://raw.githubusercontent.com/woyeshishen/dsh-lan-access/main/scripts/install.ps1 | iexmacOS / Linux
bash <(curl -fsSL https://raw.githubusercontent.com/woyeshishen/dsh-lan-access/main/scripts/install.sh)dsh plugin command
From npm
dsh plugin --profile web add @woyeshishen/dsh-lan-accessFrom GitHub
dsh plugin --profile web add github:woyeshishen/dsh-lan-accessAfter install, the plugin auto-mounts into the profile; restart DSH (or hot-reload) to activate.
Notes
- The bind host is pinned to
0.0.0.0by this plugin's patch; edit
cordis.patch.ymlif you need a different posture. --portstill works (the patch keeps the!!jsport expression).- By default privileged
/apimethods (settings/credentials/agent presets)
are reachable from trusted LAN hosts (allowRemotePrivileged: true); set
config: { allowRemotePrivileged: false }on thelan-accessrow to
restore loopback-only for them. - Uninstall:
dsh plugin --profile web remove @woyeshishen/dsh-lan-access - This plugin intentionally exposes a remote-code-execution surface to the
network — only use it on a trusted LAN.
Development
npm install
npm run build # tsc -> lib/
npm run check # type-check only
npm run check:legacy # cordis.patch.yml structure sanity check