dsh-intranet-browser

The stock dsh-browser-playwright plugin ships with a strict SSRF guard that blocks every localhost, private, and LAN address, so DeepSeek Harness simply cannot open a local dev server or an internal service page for you to debug. dsh-intranet-browser removes that url-guard while keeping only the essential checks: http(s) scheme validation, rejection of embedded credentials, and a default blocklist of cloud metadata endpoints (Azure IMDS, Aliyun 100.100.100.200, Tencent, and more), making local and intranet pages reachable again.

On the safety side, every intranet_ tool call is routed through a ctx.approval gate (per-call by default) and denied fail-closed when unapproved; a route-level handler enforces the metadata blocklist on all sub-requests, so even an already-approved page cannot redirect or script its way onto a cloud metadata endpoint. The plugin spins up a fully independent Playwright instance with its own service name, its own profile directory (default ~/.dsh/intranet-edge-profile), and its own window, so it coexists cleanly alongside the original browser_ tools without any profile or lock conflict.

The toolset covers page opening, accessibility snapshots, screenshots, clicks, form filling, scrolling, history navigation, multi-tab management, and an opt-in JS evaluator, all with hot-reloadable configuration. It is aimed at developers who want the AI to assist with debugging local dev servers, intranet admin panels, or LAN-hosted services inside DeepSeek Harness; under the Full-access session preset the approval prompts are automatically skipped, matching the trust level of shell and file tools.