donoteatme/dsh-local-link ↗★ 0
dsh-local-link
DeepSeek Harness plugin for lightweight LAN access to the current Web UI from phones, tablets, and other computers.
安装
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:donoteatme/dsh-local-link说明文档
阅读完整 README ↗Configuration
The bundled profile patch installs conservative defaults:
| Option | Default | Purpose |
|---|---|---|
listenHost | 0.0.0.0 | Listen on local interfaces; request validation still accepts only private/loopback sources. |
listenPort | 3088 | LAN gateway port. |
upstreamOrigin | http://127.0.0.1:3080 | Existing loopback Harness Web server. |
accessMode | pairing | Require a one-use invitation and device cookie. |
pairingTtlSeconds | 300 | Invitation lifetime. |
deviceTtlDays | 90 | Remembered-browser lifetime. |
diagnosticsEnabled | true | Keep the bounded local diagnostic history. |
diagnosticsMaxEntries | 15 | Maximum retained events (5–200). |
diagnosticsFile | next to stateFile | Local JSON event store; the bundled profile uses ~/.dsh/local-link/diagnostics.json. |
listenHost accepts only 0.0.0.0 or an explicit private/loopback IP literal. Public listener addresses are rejected during startup; this configuration guard complements, rather than replaces, the operating-system firewall.
trusted-lan disables per-device authorization and should be reserved for isolated development networks. pairing is the supported default because a connected Harness browser can read files, submit prompts, approve actions, and trigger commands.
The plugin never creates firewall rules. If Windows prompts for network access, allow only the Private network profile and never forward port 3088 on the router.