@exagone313/dsh-trusted-host-is-loopback

Manifest valid

Workaround to make dsh web client treat trusted hosts as loopback.

hasBundlePatch

dsh-trusted-host-is-loopback

A dsh bundle that makes the authenticated Web UI page count as loopback, so Host-backed settings (Settings → Models, the first-run API-key step, the preview notice) work when dsh is reached through a reverse proxy instead of 127.0.0.1.

dsh already authenticates every browser that reaches the Web UI — the Host/Origin trust fence declared with --trusted-host / trustedHosts, plus the browser-session cookie — but it still classifies a non-loopback page as remote and caps Host-backed features. This bundle flips that one client-side flag. ownsHost is a classification only: the server's authentication and its Host/Origin fence are untouched.

Install

dsh plugin --profile web add @exagone313/dsh-trusted-host-is-loopback

Restart dsh afterwards.

Remove

dsh plugin --profile web remove @exagone313/dsh-trusted-host-is-loopback

Restart dsh afterwards.

Notes

No configuration.
The Host/Origin trust fence is the boundary: only authorities you declared trusted should reach the Web UI. See SECURITY.md.
The webserver/index-inject hook belongs to @deepseek-ai/dsh-host-webserver; a future rename would require a plugin update.
Tested against dsh 0.2.0-rc.2.

License

MIT

Comments

Loading…

From the same category

reactive-resume

DeepSeek Harness plugin for Reactive Resume: bridges your resumes and job applications into a Harness session over MCP.

Tools & CapabilitiesManifest valid

★ 41.7k

↓ 156/wk

MIT

Aug 24, 2026

dsh plugin --profile web add dsh-plugin-reactive-resume

BrowserSkill

by Tencent

Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent.

Tools & CapabilitiesManifest valid

★ 8.6k

↓ 6.1k/wk

MIT

TypeScript

Oct 10, 2026

dsh plugin --profile terminal add @wxg-prc-cpg/browser-skill-dsh-plugin

dsh-routing-suite

by yjh051108

dsh-routing-suite — injector + router-standard kit: install the runtime injector first, then the task-aware reasoning-mode router preset (measured P1-P23).

Tools & CapabilitiesManifest valid

★ 7k

MIT

JavaScript

Sep 18, 2026

dsh plugin --profile web add @dsh-external/dsh-super-injector

ouroboros

by Q00

Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, staged evaluation, budgeted evolution loop. MCP server, 14 runtimes: Claude Code, Codex CLI, Gemini CLI, OpenCode,

Tools & CapabilitiesManifest valid

★ 6.2k

MIT

Python

Oct 7, 2026

Index only — not installable

dsh-market

by dsh-market

The plugin market inside DeepSeek Harness — browse, search, one-click install · DSH 可视化插件市场

Tools & CapabilitiesManifest valid

★ 6.1k

↓ 112.4k/wk

MIT

TypeScript

Oct 10, 2026

dsh plugin --profile web add dshmarket

treg

by superdesigndev

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn

Tools & CapabilitiesManifest valid

★ 5k

NOASSERTION

Python

Oct 11, 2026

dsh plugin --profile web add treg-dsh