mrlfarano/dsh-tailscale-surface

README 摘要

dsh-tailscale-surface A DeepSeek Harness plugin that makes a tailscale serve surface in front of the web GUI a first-class fact of the daemon: correct URL narration everywhere, working remote Settings, and a same-origin home for auxiliary plugin UIs. Why dsh web binds loopback (the GUI is effectively an RCE surface — the CLI deliberately refuses 0.0.0.0 ). Reaching it remotely through an SSH tunnel works but is clumsy, and everything the runtime narrates about itself ( DSH WEB URL , the surface prompt, the URL line) points at 127.0.0.1 — an origin a remote browser cannot resolve, so every user-facing link minted from it is dead. Fronting the daemon with tailscale serve fixes the transport (tailnet HTTPS + verified identity) but stock DSH then 403s the whole privileged RPC plane (Settings, credentials, model discovery, agent presets) for remote users, because those methods are pinned to loopback-Host callers and the proxy preserves the client's Host. What it does 1. Discovers the serve rule proxying this daemon ( tailscale status / serve status via the subprocess service) and exports the canonical external URL: - DSH TS URL shell variable (agent shells, tools); - a system-prompt sec…

分类