dsh-remote 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-remote contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,81 @@
+# dsh-remote
+
+Remote-access assistant for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH).
+
+The harness Web GUI intentionally listens on `127.0.0.1` only — the CLI rejects `--host 0.0.0.0` for safety (the GUI has no auth and the agent executes code). That means remote access is a **tunneling workflow**, and this plugin makes it copy-paste easy:
+
+- **`/remote` slash command** — prints the exact commands for this instance
+- **Settings → 远程访问 (Remote Access)** — live port, LAN IPs, trusted hosts and command blocks with copy buttons
+- Covers the three supported paths: SSH local forward (`ssh -L`), keepalive (`autossh`), reverse tunnel (`ssh -R`, NAT-friendly), and reverse-proxy access with `--trusted-host`
+
+## Install
+
+```bash
+npm install dsh-remote
+```
+
+Add a row to your profile `cordis.yml` (or `cordis.patch.yml`):
+
+```yaml
+- id: dsh-remote
+  name: dsh-remote
+```
+
+## Usage
+
+### From the chat
+
+Type `/remote` (optionally `/remote user@host`):
+
+```
+/remote root@9.134.186.191
+```
+
+Output:
+
+```
+## dsh-remote — remote access
+
+Web GUI: http://127.0.0.1:3080
+
+### Tunnel from your PC (recommended — harness stays loopback)
+ssh -N -L 18080:127.0.0.1:3080 root@9.134.186.191
+autossh -M 0 -N -L 18080:127.0.0.1:3080 root@9.134.186.191
+
+### Reverse tunnel (remote pushes out; NAT-friendly)
+ssh -N -R 3080:127.0.0.1:3080 root@9.134.186.191
+
+### Direct web access behind a reverse proxy (add auth yourself!)
+dsh --profile web --port 3080 --trusted-host <your-public-host>
+```
+
+Run the `ssh -N -L ...` line on your PC, then open **http://127.0.0.1:18080** in the browser. Because the browser origin stays loopback, the harness `/api` trust fence accepts it with no extra flags — and the connection is SSH-encrypted and authenticated.
+
+### From the settings page
+
+Settings → 远程访问 shows the same information, plus the machine's LAN IPs, with one-click copy per command. Entering `user@host` regenerates the commands with that target.
+
+## Configuration
+
+| Key | Type | Default | Meaning |
+| --- | --- | --- | --- |
+| `localPort` | int | 18080 | Local port used by the generated `ssh -L` / `autossh` commands (the PC side) |
+
+```yaml
+- id: dsh-remote
+  name: dsh-remote
+  config:
+    localPort: 20080
+```
+
+## Why not just bind 0.0.0.0?
+
+The harness deliberately refuses `--host 0.0.0.0` (`error: --host 0.0.0.0 is intentionally not supported yet for safety: it would expose remote code execution to the network`). The GUI has no authentication, and the agent can execute code in the sandbox — binding every interface would hand remote code execution to anyone on the network. Tunnels (SSH or an authenticated reverse proxy) are the supported way, and that is what this plugin automates.
+
+## Browser page
+
+Settings → 远程访问 (Remote Access). The page fetches `GET /dsh-remote/info` from the harness `webServer` service (same-origin JSON route).
+
+## License
+
+MIT

package/README.zh.md

@@ -0,0 +1,81 @@
+# dsh-remote
+
+为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（DSH）打造的**远程接入助手**插件。
+
+Harness 的 Web GUI **刻意只监听 `127.0.0.1`**——CLI 直接拒绝 `--host 0.0.0.0`（安全设计：GUI 无鉴权、Agent 能执行代码，绑全网等于把远程代码执行暴露给网络）。所以远程访问本质上是个**隧道工作流**，这个插件把它变成"复制粘贴"：
+
+- **`/remote` 斜杠命令** —— 直接打印本实例的精确隧道命令
+- **设置 → 远程访问** —— 实时端口、局域网 IP、trusted hosts 与带一键复制的命令块
+- 覆盖三条官方支持的路径：SSH 本地转发（`ssh -L`）、保活（`autossh`）、反向隧道（`ssh -R`，NAT 友好）、反向代理直达（`--trusted-host`）
+
+## 安装
+
+```bash
+npm install dsh-remote
+```
+
+在你的 profile `cordis.yml`（或 `cordis.patch.yml`）里加一行：
+
+```yaml
+- id: dsh-remote
+  name: dsh-remote
+```
+
+## 用法
+
+### 聊天里
+
+输入 `/remote`（可选带 `/remote user@host`）：
+
+```
+/remote root@9.134.186.191
+```
+
+输出：
+
+```
+## dsh-remote — remote access
+
+Web GUI: http://127.0.0.1:3080
+
+### Tunnel from your PC (recommended — harness stays loopback)
+ssh -N -L 18080:127.0.0.1:3080 root@9.134.186.191
+autossh -M 0 -N -L 18080:127.0.0.1:3080 root@9.134.186.191
+
+### Reverse tunnel (remote pushes out; NAT-friendly)
+ssh -N -R 3080:127.0.0.1:3080 root@9.134.186.191
+
+### Direct web access behind a reverse proxy (add auth yourself!)
+dsh --profile web --port 3080 --trusted-host <your-public-host>
+```
+
+在你 PC 上跑 `ssh -N -L ...` 那行，然后浏览器打开 **http://127.0.0.1:18080**。因为浏览器源仍是 loopback，harness 的 `/api` 信任围栏直接放行、无需任何额外参数——且连接走 SSH 加密认证。
+
+### 设置页
+
+设置 → 远程访问：同样的信息 + 本机局域网 IP，每个命令一键复制；输入 `user@host` 可按目标重新生成命令。
+
+## 配置
+
+| 键 | 类型 | 默认 | 含义 |
+| --- | --- | --- | --- |
+| `localPort` | int | 18080 | 生成的 `ssh -L` / `autossh` 命令里的本机端口（PC 侧） |
+
+```yaml
+- id: dsh-remote
+  name: dsh-remote
+  config:
+    localPort: 20080
+```
+
+## 为什么不能直接绑 0.0.0.0？
+
+Harness 刻意拒绝 `--host 0.0.0.0`（报错原文：`intentionally not supported yet for safety: it would expose remote code execution to the network`）。GUI 没有登录鉴权，而 Agent 能在沙箱里执行代码——绑全网 = 把远程代码执行交给网段里任何人。隧道（SSH 或带鉴权的反向代理）才是官方支持的方式，这正是本插件自动化的东西。
+
+## 浏览器页面
+
+设置 → 远程访问。页面通过 harness 官方 `webServer` 服务拉取 `GET /dsh-remote/info`（同源 JSON 路由）。
+
+## License
+
+MIT

package/lib/client.js

@@ -0,0 +1,121 @@
+// dsh-remote — remote-access assistant for DeepSeek Harness (Client half).
+//
+// Settings → 远程访问 (Remote Access): shows the live port, LAN IPs, trusted
+// hosts and the exact SSH tunnel / reverse-tunnel / reverse-proxy commands,
+// with a copy button. Data comes from the host half's JSON endpoint
+// (GET /dsh-remote/info) served by the official `webServer` service.
+import * as React from 'react'
+
+export const name = 'dsh-remote'
+
+async function fetchInfo(target) {
+  const q = target ? '?target=' + encodeURIComponent(target) : ''
+  const res = await fetch('/dsh-remote/info' + q)
+  const data = await res.json().catch(() => ({}))
+  if (!res.ok) throw new Error((data && data.error) || 'HTTP ' + res.status)
+  return data
+}
+
+export function apply(ctx) {
+  const slots = ctx.get('slots')
+  if (slots === undefined) return
+
+  function RemotePage() {
+    const [info, setInfo] = React.useState(null)
+    const [error, setError] = React.useState('')
+    const [target, setTarget] = React.useState('')
+    const [copied, setCopied] = React.useState(false)
+
+    const refresh = (t) => {
+      fetchInfo(t || '')
+        .then(setInfo)
+        .catch((err) => setError(String((err && err.message) || err)))
+    }
+
+    React.useEffect(() => {
+      refresh('')
+    }, [])
+
+    const copy = (text) => {
+      if (navigator && navigator.clipboard) {
+        navigator.clipboard
+          .writeText(text)
+          .then(() => {
+            setCopied(true)
+            setTimeout(() => setCopied(false), 1500)
+          })
+          .catch(() => {})
+      }
+    }
+
+    const block = (title, code) =>
+      React.createElement(
+        'div',
+        { key: title, style: { display: 'flex', flexDirection: 'column', gap: '6px' } },
+        React.createElement('div', { style: { fontSize: '13px', fontWeight: 600 } }, title),
+        React.createElement('code', {
+          style: {
+            display: 'block',
+            padding: '8px 10px',
+            borderRadius: '6px',
+            border: '1px solid rgba(128,128,128,0.35)',
+            fontSize: '12px',
+            whiteSpace: 'pre-wrap',
+            wordBreak: 'break-all',
+          },
+        }, code),
+        React.createElement('button', { onClick: () => copy(code), style: { alignSelf: 'flex-start' } }, '复制'),
+      )
+
+    if (error)
+      return React.createElement('div', { style: { color: '#e06c75', padding: 16 } }, error)
+    if (!info)
+      return React.createElement('div', { style: { padding: 16, opacity: 0.6 } }, '加载中…')
+
+    const c = info.commands || {}
+    const lan = Array.isArray(info.lanAddresses) ? info.lanAddresses : []
+    const trusted = Array.isArray(info.trustedHosts) ? info.trustedHosts : []
+
+    return React.createElement(
+      'div',
+      { style: { padding: '16px', display: 'flex', flexDirection: 'column', gap: '14px' } },
+      React.createElement('div', { style: { fontWeight: 600 } }, '远程访问（dsh-remote）'),
+      React.createElement(
+        'div',
+        { style: { display: 'flex', gap: '16px', flexWrap: 'wrap', fontSize: '13px' } },
+        React.createElement('span', null, 'Web GUI: ', React.createElement('code', null, info.url)),
+        React.createElement('span', null, '端口: ', React.createElement('code', null, String(info.port))),
+        lan.length
+          ? React.createElement('span', null, '局域网: ', React.createElement('code', null, lan.join(', ')))
+          : null,
+        trusted.length
+          ? React.createElement('span', null, 'trusted hosts: ', React.createElement('code', null, trusted.join(', ')))
+          : null,
+      ),
+      React.createElement('div', { style: { fontSize: '12px', opacity: 0.75 } },
+        '跨机器访问请用 SSH 隧道。harness 默认只监听 127.0.0.1，这是官方安全设计（GUI 无鉴权，--host 0.0.0.0 被刻意拒绝）。可选：输入 user@host 生成具体命令。',
+      ),
+      React.createElement('div', { style: { display: 'flex', gap: '8px' } },
+        React.createElement('input', {
+          value: target,
+          onChange: (ev) => setTarget(ev.target.value),
+          placeholder: 'user@remote-host（可选）',
+          style: { flex: 1 },
+        }),
+        React.createElement('button', { onClick: () => refresh(target) }, '生成'),
+      ),
+      c.localForward ? block('本机 → 远程（ssh 本地转发，推荐）', c.localForward) : null,
+      c.localForwardAuto ? block('autossh 保活版本', c.localForwardAuto) : null,
+      c.reverseForward ? block('远程 → 本机（反向隧道，NAT 友好）', c.reverseForward) : null,
+      c.trustedFlag ? block('反向代理直达（需自行加鉴权）', c.trustedFlag) : null,
+      copied ? React.createElement('div', { style: { fontSize: '12px', opacity: 0.7 } }, '已复制 ✓') : null,
+    )
+  }
+
+  slots.inject('settings.section', () =>
+    slots.register(
+      { name: 'settings.section', id: 'dsh-remote', order: 40, label: () => '远程访问' },
+      () => React.createElement(RemotePage, null),
+    ),
+  )
+}

package/lib/index.js

@@ -0,0 +1,124 @@
+// dsh-remote — remote-access assistant for DeepSeek Harness (Host half).
+//
+// The harness Web server intentionally binds loopback only (the CLI rejects
+// --host 0.0.0.0 for safety: the GUI has no auth and the agent executes code).
+// This plugin does not fight that design — it makes the supported paths easy:
+//   • a `/remote` slash command that prints the exact tunnel commands,
+//   • a JSON endpoint (GET /dsh-remote/info) the settings page consumes.
+// Commands cover local-forward (ssh -L), keepalive (autossh), reverse tunnel
+// (ssh -R, NAT-friendly) and reverse-proxy (with --trusted-host) guidance.
+import { networkInterfaces } from 'node:os'
+import z from '@deepseek-ai/schemastery'
+
+export const name = 'dsh-remote'
+
+// The web server is the hard dependency: its live port feeds every command.
+export const inject = ['webServer']
+
+/** Optional deployment tuning. */
+export const Config = z.object({
+  /** Local port used by the ssh -L / autossh commands generated for the PC side. */
+  localPort: z.number().int().min(1).max(65535).default(18080),
+})
+
+/** Non-loopback IPv4 addresses of this machine (empty when none are up). */
+function lanAddresses() {
+  const out = []
+  for (const addrs of Object.values(networkInterfaces())) {
+    for (const addr of addrs ?? []) {
+      if (addr.family === 'IPv4' && !addr.internal) out.push(addr.address)
+    }
+  }
+  return out
+}
+
+export async function apply(ctx, config) {
+  const port = ctx.webServer.port
+  const url = `http://127.0.0.1:${port}`
+  const lan = lanAddresses()
+
+  const webStartup = ctx.get('webStartup')
+  const trustedHosts =
+    webStartup && Array.isArray(webStartup.trustedHosts) ? webStartup.trustedHosts : []
+
+  const buildCommands = (target) => {
+    const remote = target && target.trim() ? target.trim() : '<user@remote-host>'
+    return {
+      localForward: `ssh -N -L ${config.localPort}:127.0.0.1:${port} ${remote}`,
+      localForwardAuto: `autossh -M 0 -N -L ${config.localPort}:127.0.0.1:${port} ${remote}`,
+      reverseForward: `ssh -N -R ${port}:127.0.0.1:${port} ${remote}`,
+      trustedFlag: `dsh --profile web --port ${port} --trusted-host <your-public-host>`,
+    }
+  }
+
+  const info = (target) => ({
+    port,
+    url,
+    lanAddresses: lan,
+    trustedHosts,
+    commands: buildCommands(target || ''),
+  })
+
+  // ── /remote slash command ────────────────────────────────────────────────
+
+  const commands = ctx.get('commands')
+  if (commands !== undefined) {
+    commands.register({
+      name: 'remote',
+      description:
+        'Show remote-access tunnel commands for this harness instance. Optional argument: user@host for the ssh tunnel target.',
+      handler: (invocation) => {
+        const target = (invocation.rawInput || '').trim()
+        const i = info(target)
+        const remote = target || '<user@remote-host>'
+        const lines = [
+          '## dsh-remote — remote access',
+          '',
+          `Web GUI: ${i.url}`,
+          ...(lan.length ? [`LAN IPs: ${lan.join(', ')}`] : []),
+          ...(trustedHosts.length ? [`trusted hosts: ${trustedHosts.join(', ')}`] : []),
+          '',
+          '### Tunnel from your PC (recommended — harness stays loopback)',
+          `ssh -N -L ${config.localPort}:127.0.0.1:${port} ${remote}`,
+          `autossh -M 0 -N -L ${config.localPort}:127.0.0.1:${port} ${remote}`,
+          '',
+          '### Reverse tunnel (remote pushes out; NAT-friendly)',
+          `ssh -N -R ${port}:127.0.0.1:${port} ${remote}`,
+          '',
+          '### Direct web access behind a reverse proxy (add auth yourself!)',
+          `dsh --profile web --port ${port} --trusted-host <your-public-host>`,
+          '',
+          'Note: --host 0.0.0.0 is intentionally rejected by the harness for safety.',
+        ]
+        return { kind: 'text', text: lines.join('\n') }
+      },
+    })
+  }
+
+  // ── JSON endpoint for the settings page ──────────────────────────────────
+
+  const webServer = ctx.get('webServer')
+  if (webServer === undefined) return
+  const sendJson = (res, status, body) => {
+    res.statusCode = status
+    res.setHeader('Content-Type', 'application/json; charset=utf-8')
+    res.end(JSON.stringify(body))
+  }
+  const disposeRoute = webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote/info',
+    handler: async (req, res) => {
+      const query = (req.url || '').split('?')[1] || ''
+      const match = query.match(/target=([^&]*)/)
+      let target = ''
+      try {
+        target = match ? decodeURIComponent(match[1]) : ''
+      } catch {
+        target = ''
+      }
+      sendJson(res, 200, info(target))
+    },
+  })
+  // Route is not fiber-bound: retain the disposer so stop/update never leaks.
+  ctx.effect(() => disposeRoute, 'dsh-remote.routeDispose')
+}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "dsh-remote",
+  "version": "0.1.0",
+  "description": "Remote-access assistant for DeepSeek Harness: /remote command and a settings page that print the exact SSH tunnel / reverse-tunnel / reverse-proxy commands for this instance (harness intentionally binds loopback only).",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "remote",
+    "ssh",
+    "tunnel",
+    "plugin"
+  ],
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib"
+  ],
+  "license": "MIT",
+  "dsh": {
+    "client": {
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6",
+    "@deepseek-ai/cordis": "^4.0.1"
+  }
+}