DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-web-startup-auth

Remote web startup replacement and authentication plugin bundle for DeepSeek Harness.

Developer ToolsBrowser & WebSkills & WorkflowsRemote Execution
14GitHub Stars2ForksUpdated2026-08-28

Install

$ dsh plugin --profile web add .

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-web-startup-auth is a DeepSeek Harness plugin bundle that replaces the default startup barrier to permit listening on non-loopback addresses (such as --host 0.0.0.0). It provides an integrated login and setup flow, HMAC-SHA256 session cookie protection for API and RPC endpoints, a settings panel tab for credential management, and compatibility polyfills for remote web environments.

Key Capabilities

  • Allows binding the DSH web server to 0.0.0.0 for LAN and remote network access
  • Provides initial admin setup and user authentication login UI styled to match DSH
  • Protects API routes and RPC channels with 14-day signed session cookies
  • Bypasses authentication automatically for direct local loopback connections
  • Adds an Authentication tab in the DSH settings panel for password changes and logout
  • Polyfills crypto.randomUUID and adjusts loopback host headers for remote browser settings mirrors

Useful For

  • Hosting DeepSeek Harness on a remote server or local network machine
  • Accessing DSH Web UI from non-local browser clients without exposing open unauthenticated endpoints
  • Managing admin credentials and session rotation directly within the DSH UI

Who It Fits

  • Developers hosting DSH instances on remote servers or homelabs
  • Teams accessing shared DeepSeek Harness web instances across a local network
  • Users running DSH behind HTTPS reverse proxies

Documented Limitations

  • Does not provide TLS encryption natively and requires an HTTPS reverse proxy for secure transport over untrusted networks
  • Session cookies cannot be revoked individually on the server without rotating the global session key
  • First-time registration is open to any network visitor until initial admin credentials are created

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 4 runtime, 9 development, 2 peer, and 0 optional dependencies.

info
Dsh Bundle Declared

package.json declares DSH bundle metadata.

info
License Declared

GitHub reports the repository license as MIT.

info
Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info
Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
GDWhisper/dsh-web-startup-auth
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin Bundle
Source checked
7b810cb · 2026-08-28

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
14GitHub stars
Forks
2
Open issues
2
Last commit
2026-08-28
Last release
No release detected
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app