dsh-gateway: Remote access gateway providing HTTPS and login for the DSH Web Interface.

dsh-gateway is an MIT-licensed plugin for DeepSeek Harness (DSH) designed to address encryption and login protection issues when accessing the web interface remotely. Running as a built-in plugin, it eliminates the need for deploying a standalone reverse proxy or certificate service. It defaults to a 'fail-closed' mechanism, listening only on the local machine (127.0.0.1:3443) without requiring authentication, ensuring remote access is impossible before configuration. The plugin offers self-contained HTTPS encryption (supporting automatic or custom certificates), account login protection (including password hashing, failure rate limiting, and session management), multi-site whitelisting, and hot-reload configuration capabilities. By changing the listening address to 0.0.0.0 and configuring an account, it supports access via Local Area Networks (LAN) or the internet through port mapping. Its reverse proxy employs loopback spoofing.