dsh-lan-access-for-windows

The DSH web CLI hard-codes a safety guard that rejects --host 0.0.0.0, so the server binds to loopback only and a phone browser simply cannot reach it. Even if you work around that, visiting the page over plain HTTP puts the browser in a non-secure context where crypto.randomUUID() is undefined; DSH's mintRpcId() calls it directly and the entire RPC layer collapses, breaking command sending, permission approvals, and build-log viewing.

dsh-lan-access resolves both problems through DSH's officially supported bundle-patch composition layer. It overrides the webserver host to 0.0.0.0 so the server listens on every interface, and injects a lightweight shim into each index.html that polyfills UUID v4 from crypto.getRandomValues() whenever the native API is missing. Once bound, DSH's own web-runtime automatically adds all local non-LAN IPv4 addresses to the /api browser-trust fence, eliminating the need for an extra --trusted-host flag.

This plugin is built for developers running DSH on a trusted home network who want full GUI control from a phone browser—sending commands, approving permission prompts, and watching build logs in real time with the same experience as the desktop. It targets the web profile exclusively, exposes no public ports or tunnels, and keeps the /api trust fence's DNS-rebinding protection fully intact.