Introduction

DeepSeek Harness (DSH) adopts a plugin-based architecture. Developers typically run the DSH Web interface locally for debugging and interaction. Accessing local services directly from mobile devices carries risks of port exposure or network configuration issues. DSH Remote aims to provide secure and controllable remote access to the DSH Web interface through a single plugin.

Plugin Overview

xiaoxiaohai/dsh-remote (NPM package name @musitoolbox/dsh-remote) is a plugin that provides mobile access to the DSH Web interface. It does not change DSH’s core logic; instead, it starts a managed FRPC process on macOS and, combined with a QR code pairing mechanism, bridges the local DSH Web interface to remote networks. The plugin is in Beta by default and takes effect only after explicit user authorization.

Core Features

The plugin provides the following core capabilities:

  • Explicit Opt-in: Installing the plugin does not automatically register or start a tunnel. The proxy is established only after the user manually enables it in local settings.
  • Local Settings Card: Adds a “Phone Access” card to the DSH Web settings interface. Supports QR code pairing, pausing access, rotating keys, and revoking authorization for a single device.
  • Reuse of Existing Interfaces: Directly reuses the HTTP and WebSocket interfaces of the DSH Web interface, without requiring additional protocols or application-layer components.
  • Managed Transport Layer: Uses the managed FRPC 0.70.1 transport layer and strictly limits traffic to the local DSH Web port.
  • Model-Visible Skill: The plugin registers a remote-access Skill. When the agent processes intents such as “remote access” or “pairing,” it can use this Skill to obtain step-by-step instructions for local settings, without needing to perceive external networks.
  • Self-Hosting Override: Supports overriding serviceUrl through configuration, allowing deployment of compatible self-hosted services.

Installation and Enablement

The plugin installation and enablement process is as follows:

  1. Install the plugin:
    dsh plugin --profile web add @musitoolbox/dsh-remote@beta
  1. Check the configuration:
    After installation, use the following command to confirm that the configuration has taken effect:
    dsh --profile web --dump-config

Ensure the output contains the `dsh-remote` configuration line with `enabled: false` and `autoStart: false`.
  1. Start the Web service:
    dsh web
  1. Initial connection:
    • Open DSH Web on your Mac.
    • Go to Settings → Phone access.
    • Click Enable phone access. This step registers the Mac locally and writes credentials.
    • Scan the QR code on the screen using DSH Web on your phone.
    • Confirm on the settings page that the phone appears in the Authorized phones list.

Typical Usage

  • Update the plugin:
    dsh plugin --profile web update @musitoolbox/dsh-remote@beta
  • Remove the plugin:
    Before removing it, first revoke phone authorization or pause access on the settings page, then run:
    dsh plugin --profile web remove @musitoolbox/dsh-remote

Applicable Scenarios and Notes

  • Runtime Environment: Only macOS (darwin-x64 and darwin-arm64) is supported. Windows and Linux are not supported.
  • Dependency Versions: Requires Node.js 22+ and DSH 0.1.0-rc.8+.
  • Beta Limitations: Currently in the Beta stage and does not provide a General Availability (GA) guarantee.
  • Security and Privacy:
    • The hosted service uses TLS-encrypted transport, but does not provide application-layer end-to-end encryption. This means the operator of the hosted service can inspect DSH Web traffic forwarded through the gateway.
    • The management interface (RPC) is limited to local loopback access.
    • The hosted service has no SLA, data retention policies, account recovery, or identity deletion features.
  • UI Status: The settings card currently has a Chinese interface. The English UI is not yet complete.
  • Source Code Verification: Because the plugin runs with the permissions of the DSH process, it is recommended to review the source code and license before installation.

Summary

DSH Remote solves the pain point of seamlessly accessing the local DSH Web interface from mobile devices. Through QR pairing and a managed FRPC tunnel, it provides developers with controllable remote debugging without breaking DSH’s plugin-based architecture. Before use, be sure to confirm your acceptance of its privacy model (no end-to-end encryption).