DeepSeek Harness (DSH) adopts a plugin-based architecture, and dsh-remote/plugin is its host plugin. The core problem it solves is: how to use a phone to remotely issue commands to a locally running DSH process, view streaming output, approve tool calls, and directly answer questions, without requiring complex network configuration.
This plugin runs inside the DSH process and is responsible for establishing the connection with the relay, managing sessions and commands, forwarding approval requests, and displaying the pairing entry in the status bar.
Core Features¶
The plugin mainly provides the following capabilities:
1. Remote operation: Operate DeepSeek Harness remotely from a phone.
2. Command delivery and interaction: Send commands, view streaming output, and directly answer questions.
3. Approval forwarding: Forward host tool-call approval requests to the phone.
4. Host wake: Keep the host awake until the task finishes, preventing sleep.
5. Secure communication: Payload-level end-to-end encryption; the relay only transmits encrypted data and supports zero-knowledge relay.
Installation and Activation¶
The plugin is installed into a specified profile using the dsh plugin command. After installation, the Harness process must be restarted for the plugin to take effect, because HMR (hot module replacement) only updates configuration files and does not reload core code.
The installation command is as follows:
dsh plugin --profile web add @dsh-remote/plugin
Desktop users need to replace --profile web with --profile desktop.
After installation is complete, the Harness process must be restarted.
Ecosystem and Usage Flow¶
This plugin is the primary component of the DSH remote-control ecosystem and must be used together with other components:
* Relay: Provides the WebSocket communication channel.
* Official mini program: The WeChat mini program “Black Whale Remote Control”, used for QR code pairing, session management, and interaction.
Pairing flow:
1. A pill icon appears in the DSH status bar on the host.
2. Open the WeChat mini program “Black Whale Remote Control”.
3. Scan the QR code in the status bar.
4. The address in the pairing QR code comes from the host-side configured serverUrl; the mini program does not require the address to be filled in manually.
Configuration and Notes¶
Installation Methods¶
Installation from npm is recommended:
dsh plugin --profile web add @dsh-remote/plugin
Developers can also build and install from source:
pnpm install
pnpm build
node scripts/install-to-profile.mjs
Note: Installing from source creates a symbolic link. In that case, using dsh plugin add will result in an error. Do not mix the two methods.
Security Design¶
The plugin follows a strict security design:
* Zero knowledge: The plugin configuration contains only hostTokenEnv (an environment variable name), not the token in plaintext. The relay only transmits encrypted payloads, and the key is passed via the QR code during the pairing phase.
* Permission control: Credential file permissions are set to 0600, ensuring that only the host process can read or write them.
* Approval flow: Approval must actually pass through the waterfall. Only requests that join the host approval/request reach the phone; approval/asked|decided are only audit events.
Conclusion¶
By using a zero-knowledge relay and end-to-end encryption, this plugin ensures security while providing the convenience of remote control. For developers who need to manage or intervene in DSH tasks from a mobile device, this is a direct solution.
Source and documentation: GitHub.
