dsh-relay

DeepSeek Harness (dsh) is a capable local AI-assisted dev environment, but it binds to localhost by design—walk away from your desk and you lose sessions, tool cards, approval dialogs, and workspace browsing in one breath. dsh-relay closes that gap with a Wire-Trunk architecture: a roughly 200-line, zero-build out-of-tree plugin on the home machine acts as an invisible browser, faithfully relaying the full dsh wire protocol (POST /api/* plus two downstream WebSockets) through a pure forwarding server on a public IP. The cloud side serves byte-identical wire to remote browsers, caches static assets reported in real time by the home side, and never drifts out of sync. No dsh source file is touched; the home machine opens zero inbound ports; NAT traversal is inherent.

The remote experience is indistinguishable from sitting at your local box: real-time session sync, streaming output, tool cards, approval prompts, and workspace browsing all intact. Security lives at the cloud edge—pairing codes exchanged for long-lived cookies, optional HTTPS via Caddy, per-device revocation, audit logging, and a cap of ten concurrent pairings. A built-in admin panel lets you inspect relay status, create or rotate pairing codes, kick individual devices, and review the audit trail entirely from a phone. A standard dsh patch swaps the native file-picker for an in-page directory browser, so adding a workspace works from any touch screen.

It is built for developers who treat dsh as their primary AI workflow and need that exact context in a café, on a train, or in a hotel room. A 1-core / 1 GB VPS and about fifteen minutes of setup are all it takes to carry your home workstation in your pocket.