Preface

DeepSeek Harness (DSH) runs a local Web interface featuring chat, terminal, files, and settings when in dsh web mode. A common requirement during development or troubleshooting is the ability to operate the same environment after leaving the desk. Setting up reverse proxies or opening ports manually often requires maintaining certificates and access controls.

This document introduces the community plugin @uumit-ai/dsh-uumit-remote: it integrates the UUMit tunnel within the DSH process. Without needing to install a desktop client, you can remotely access the same DSH instance running on your local machine via a UUMit-assigned application URL. This plugin is maintained by uumit-ai, open-sourced on GitHub (MIT), and is currently in Beta preview (npm beta tag).

What is this

@uumit-ai/dsh-uumit-remote is a remote access plugin designed for DSH Web. It runs inside the DSH process and connects directly to the UUMit tunnel; it does not download or launch other programs, nor does it open additional ports on the computer.

Once connected, you (and authorized individuals) can open a URL resembling https://dsh--<your-computer>.<UUMit-address-domain>/ in a browser. The resulting interface is identical to the local DSH: sessions, terminals, files, and settings are available, and settings are written back to the local computer.

Environment & Prerequisites

The requirements are as follows:

  • Usage of dsh web; DeepSeek Harness 0.2.1-rc.2 or higher. The DSH desktop application does not include a built-in Web service and does not support this plugin.
  • Node.js 22.19 or higher (consistent with DSH requirements).
  • A UUMit account is required.

The plugin interface is currently in Simplified Chinese; the sidebar entry is labeled “远程访问” (Remote Access) (or appears as a globe icon when the sidebar is collapsed).

Installation & Activation

Install under the Web profile (command from the official README):

dsh plugin --profile web add @uumit-ai/dsh-uumit-remote@beta

Restart dsh web after installation.

DSH installs plugins via pnpm, which skips versions released within the past 24 hours by default. When a new version is freshly released, @beta might still point to the previous version. To install a specific version immediately, specify the version number, for example:

dsh plugin --profile web add @uumit-ai/dsh-uumit-remote@0.1.0-beta.3

If using mirrors like npmmirror and encountering “version not found” errors, install from the official registry:

dsh plugin --profile web add @uumit-ai/dsh-uumit-remote@beta --registry=https://registry.npmjs.org/

Uninstall:

dsh plugin --profile web remove @uumit-ai/dsh-uumit-remote

The plugin is pure JavaScript, with no runtime dependencies and no build steps.

Typical Usage

  1. Open DSH locally and click Remote Access next to the Settings button at the bottom of the sidebar. The panel opens within the DSH page without popping a new window. If the entry does not appear, access <dsh web address>/uumit-remote/ as a fallback page.
  2. Click Connect to UUMit, log in to UUMit on the opened page, verify that the Connection Code in the panel matches the page, and then confirm. If the confirmation page does not open, you can generate an 8-digit pairing code on the UUMit website and enter it manually in the panel.
  3. Upon successful connection, DSH will appear under your UUMit address with the app name dsh. In Who can use (谁能用), select:
    - Only Me: Only your logged-in UUMit account;
    - Me and people I invite: Access via invite link or phone number authorization, revocable at any time;
    - Everyone: Anonymous visitors with the URL can fully operate DSH as you; the panel will require confirmation;
    - Off.
  4. Open the App URL (应用网址) from the panel in a browser on any device.
  5. When remote access is no longer needed, click Disconnect this computer (断开这台电脑), and the computer will be removed from the UUMit device list.

The DSH Agent can also assist: the plugin registers the tool uumit_remote_access (to check status, start connection, and explain the management entry). The Agent cannot modify the “Who can use” policy.

Configuration

You can override the entire configuration via id: uumit-remote in the profile’s cordis.patch.yml (omitted items will revert to defaults).

Option Default Value Description
apiBase https://api.uumit.com Platform API; environment variable UUMIT_API_BASE takes precedence. Non-HTTPS is only allowed for loopback and private network addresses.
serviceName dsh Application name registered to UUMit.
deviceName <hostname> · DSH Device name displayed on UUMit; can also use UUMIT_DEVICE_NAME.
autoConnect true Auto-online if already paired when DSH starts; will not initiate pairing alone.
home $DSH_HOME/uumit-remote Local state directory.

Testing environment variables: UUMIT_TUNNEL_INSECURE_TLS=1 skips tunnel node certificate verification; UUMIT_TUNNEL_CA_FILE specifies the node CA; UUMIT_WEB_BASE specifies the website base URL.

Security & Permissions

  • Access control is determined by the UUMit gateway; the plugin performs secondary validation on every request based on the same rules, rejecting missing or illegal requests.
  • The remote browser does not obtain DSH’s own login credentials; the plugin exchanges internal credentials locally, stores them only in memory, and attaches them to requests forwarded to DSH. After authorization is revoked, the next request from the party will be rejected.
  • The management panel only accepts requests from the local browser with DSH open; remote pages opened via UUMit cannot access this panel.
  • Device credentials are stored in $DSH_HOME/uumit-remote/credentials.json, readable only by the current user, and will not appear in logs or pages.
  • Remote visitors select directories via the in-page browser; system file dialogs will not pop up on your screen. Capabilities to open local files or applications are hidden for remote visitors.
  • Selecting Everyone means anonymous visitors can use the terminal and files as you; use this only when fully understanding the risks.

Please report security issues privately via GitHub Security Advisory; do not create public Issues.

Scenarios & Notes

This is suitable for developers who need to continue using dsh web on the same machine via mobile phones, tablets, or other computers. Pairing, invitations, and “Who can use” are managed uniformly by UUMit and the panel, eliminating the need to build your own penetration service.

Please note before use:

  • The plugin runs with the user permissions of the current DSH process; it is recommended to read the source code and MIT license before installation.
  • Currently in Beta (e.g., 0.1.0-beta.3); behavior and configuration may be adjusted before 1.0.
  • Only supports dsh web; does not support the DSH desktop version as a Web server.

The DeepSeek Harness ecosystem emphasizes “Everything is a plugin”; the community directory site is not officially affiliated with DeepSeek or High-Flyer. This article introduces a community plugin, not an official app store entry.

Further Reading