dsh-web-lan

DeepSeek Harness binds its webserver to 127.0.0.1 by default, which means your phone, tablet, or a laptop across the office simply cannot reach the console. dsh-web-lan opens the service to your LAN with a single command, then puts a password gate in front of it: unauthenticated callers get only the login page while API and WebSocket endpoints return 401; once logged in, the session is treated as loopback so every local-only feature (settings, credentials, agent presets) works for you.

The plugin also ships several targeted patches: it fixes the missing crypto.randomUUID on plain-HTTP origins that would otherwise break the entire /api layer; it forces the in-browser isLoopback flag to true so the Settings to Plugin Config tab stops rendering blank on LAN pages; and it adds a LAN Access card in Settings where you can rotate the password on the fly with instant, persistent effect.

On the security side, sessions use HttpOnly + SameSite=Strict cookies, a per-IP rate limit kicks in after five consecutive failures with a 30-second lock, and changing the password immediately invalidates every other active session. This plugin is ideal for anyone who wants to monitor or operate DeepSeek Harness from a phone or tablet on the same network without reaching for an SSH tunnel.