dsh-plugin-remote-access

By default, DeepSeek Harness Web listens only on the loopback interface, so the full UI is reachable exclusively from the host machine. The moment you need to operate it from a phone, tablet, or another computer on the same network, you lack a secure yet convenient path.

The plugin adds a Remote Access section to the settings panel with two connection modes. In LAN mode you pick a local port and open the resulting link from any device on the same network. In tunnel mode you point the bundled frpc client at an frps server and expose the service through a domain or a public IP with a dedicated port. Every access link carries a one-time token; the first request exchanges it for an HttpOnly, SameSite=Strict cookie and strips the token from the address bar, reducing the chance of accidental credential exposure.

Security-wise, the primary Web server stays loopback-only and the control API accepts requests only from the loopback socket. Remote browsers must go through a separate authenticated proxy that rewrites upstream requests to loopback, isolating the external attack surface architectically. This plugin is ideal for developers and power users who need to drive the full DeepSeek Harness Web UI from another workstation, a tablet, or a phone while keeping the local server unexposed.