deepseekplugins

DeepSeek Harness plugin

dsh-remote-runtime

Managed, isolated DeepSeek Harness runtimes over OpenSSH with a native Web control surface.

Tools & Capabilities
Jump to install

Source facts

Repository
ArtificialNotImbecile/dsh-remote-runtime
Latest update
Aug 21, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/ArtificialNotImbecile/dsh-remote-runtime
Plugin: dsh-remote-runtime
Author: ArtificialNotImbecile

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer4 files
README.mdSource · read only
README language

DSH Remote Runtime

English | 简体中文

Run an isolated, official DeepSeek Harness on a Linux host and manage it through OpenSSH. This standalone community plugin adds remote profiles, Doctor checks, verified runtime installation, tunnels, workspaces, credentials, and Session history to the DSH 0.1.0-rc.8 Web UI—without modifying Harness source.

SSH, files, processes, and secrets stay in the plugin Host. The browser receives bounded JSON summaries and never reads a stored credential.

Demo

Captured from a real OpenSSH-managed runtime using an actual DeepSeek API credential. The key was imported before recording and never entered the browser, screenshots, GIF, logs, or repository.

<p align="center"> <img src="docs/assets/readme/remote-runtime-demo.gif" alt="Connected profile, Doctor, credential status, workspaces, real DeepSeek Session, and remote Harness UI" width="960"> </p>

<details> <summary><strong>More screenshots</strong></summary>

<table> <tr> <td><img src="docs/assets/readme/connected-profile.png" alt="Connected profile"><br><sub>Connected profile and runtime</sub></td> <td><img src="docs/assets/readme/doctor-install.png" alt="Doctor checks"><br><sub>Read-only Doctor checks</sub></td> </tr> <tr> <td><img src="docs/assets/readme/credential-configured.png" alt="Configured credential"><br><sub>Write-only credential status</sub></td> <td><img src="docs/assets/readme/workspaces.png" alt="Remote workspaces"><br><sub>Saved and Harness workspaces</sub></td> </tr> <tr> <td><img src="docs/assets/readme/sessions-real-deepseek.png" alt="Real DeepSeek transcript"><br><sub>Official Session history and prompt UI</sub></td> <td><img src="docs/assets/readme/remote-ui-real-deepseek.png" alt="Remote Harness UI"><br><sub>Complete DSH UI through the loopback tunnel</sub></td> </tr> <tr> <td><img src="docs/assets/readme/profile-wizard-host.png" alt="Host wizard"><br><sub>Host and isolated workspace</sub></td> <td><img src="docs/assets/readme/profile-wizard-egress.png" alt="Egress wizard"><br><sub>Remote-direct or client-proxy</sub></td> </tr> </table>

</details>

Install

npx.cmd --yes @deepseek-ai/dsh@0.1.0-rc.8 plugin --profile web add `
  @artificialnotimbecile/dsh-remote-runtime@latest
npx.cmd --yes @deepseek-ai/dsh@0.1.0-rc.8 web

Restart an already-running Web profile after adding, updating, or removing the plugin.

<details> <summary><strong>Build from a checkout</strong></summary>

corepack pnpm install --frozen-lockfile --ignore-scripts
corepack pnpm run check
corepack pnpm pack --pack-destination test-results

npx.cmd --yes @deepseek-ai/dsh@0.1.0-rc.8 plugin --profile web add `
  .\test-results\artificialnotimbecile-dsh-remote-runtime-0.1.2.tgz

</details>

Use

Open Settings → Remote runtime:

1. Add an OpenSSH host and optional remote workspace. 2. Choose immutable remote-direct or client-proxy egress. 3. Run read-only Doctor, then explicitly install the verified runtime. 4. Import a DeepSeek key through the write-only form. 5. Start the runtime and open the loopback tunnel URL. 6. Browse workspaces, Session history, and send or cancel prompts.

Disconnect leaves the remote Harness running. Stop is separate, and removing a local profile never deletes remote runtime or Session data.

Highlights

  • A distinct profile UUID and remote DSH_HOME isolate credentials, Sessions, workspaces, and process state.
  • System OpenSSH keeps SSH config, IdentityFile, ssh-agent, and ProxyJump under user control.
  • The content-addressed runtime includes Node 22.19 and official DSH rc.8; the archive and every extracted file are SHA-256 verified.
  • Workspace, Session, history, prompt, and cancel operations use the official DSH Host API.
  • Credentials are written mode 0600 and never returned to browser state, logs, snapshots, or process arguments.
  • Authenticated client-proxy egress allows public HTTP(S) only; private, loopback, link-local, CGNAT, metadata, multicast, documentation, and IPv6 local ranges fail closed.

Compatibility and security

  • Local DSH: exactly 0.1.0-rc.8; UI: Web profile.
  • Client: Windows, macOS, or Linux; Node ^22.19.0 || >=24; system ssh.
  • Remote: Linux x64, glibc 2.28+, Bash, tar, gzip, sha256sum, and a writable home.
  • Every tunnel listener binds loopback; the remote DSH Web API is never exposed on 0.0.0.0.
  • SSH is the access-control boundary. Use a separate remote OS account when same-UID process isolation is required.

DeepSeek Harness is pre-release software. Later DSH versions remain unsupported until peer versions, Typert generation, assembled-profile CI, and live acceptance move together.

Development

corepack pnpm run typecheck
corepack pnpm run test
corepack pnpm run build
corepack pnpm run pack:check

Managed runtime builds require Linux or WSL; executing it requires glibc 2.28+. Generated archives, profiles, screenshots, and live logs remain under ignored runtime/artifacts/ and test-results/.

License

MIT. Independent community plugin; not affiliated with or endorsed by DeepSeek. See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).

Back to searchOpen GitHub repository

More related plugins

View category