dsh-remote-workspaces

Working on remote servers is often a chore: clone a directory locally, edit, push back, then switch to a terminal for logs and build scripts. dsh-remote-workspaces removes that friction entirely. Once a remote directory is opened as a first-class workspace, every file read, write, search, and shell command in DeepSeek Harness is routed to the remote host over SSH in real time. There is no mirroring, no sync step, and local workspaces keep their full sandbox behavior untouched.

The plugin centers on transparent tool routing and policy-aware execution. File I/O goes over SFTP, grep and glob invoke ripgrep on the remote host, and bash or pwsh commands are dispatched via ssh2 exec. Routing follows the session, not the path string, so every command in a remote workspace lands on the correct host while local sessions retain the native sandbox. Harness write policies (read-only, workspace-write, danger-full-access) apply to remote operations as well, destructive actions require explicit approval, and credentials are encrypted at rest with AES-256-GCM, never exposed to the browser.

A built-in multi-machine registry lets you manage SSH host aliases, ports, keys, and passwords across multiple hosts, with one-click import from ~/.ssh/config and a connection test before use. Engineers who debug across cluster nodes, edit code inside remote containers, or simply want their AI agent to execute commands on a remote box without context switching will find that this plugin makes remote development feel as seamless as working locally.