@crckss/dsh-remote-trust

v0.1.1 · 2 天前发布

Open DSH privileged /api methods (settings, credentials, model discovery) to configured remote authorities

dsh-plugindeepseek-harnesscordisremotetrusted-host

README

@crckss/dsh-remote-trust

Open DSH's privileged /api methods to remote trusted hosts, so a browser
visiting the Web UI through a reverse proxy (or from another machine on your
network) can configure the harness — Settings → Models, provider and
credential management — instead of getting 403 forbidden.

yaml
~/.dsh/profiles/web/cordis.patch.yml

insert:

    - id: remote-trust
      name: "@crckss/dsh-remote-trust"
      config:
        hosts:
          - dsh.example.com

Why this exists

DeepSeek Harness binds its Web server to loopback for safety (--host 0.0.0.0
is refused outright) and its /api browser-trust fence has two layers:

1. A general fence — the request's Host must be loopback or a
--trusted-host authority, with Origin and sec-fetch-site c

版本兼容矩阵

DSH 版本	状态	说明
`dsh@0.1.0-rc.6`	❓ 未知	metadata 缺失
`dsh@0.1.0`	❓ 未知	—
`dsh@0.2.0`	⚠️ 待验证	待实测（API 可能在变）
`dsh@0.3.0+`	❓ 未知	尚未发布

💡 兼容矩阵每周末自动跑实测，欢迎 PR 修正

元数据

License: MIT
npm: @crckss/dsh-remote-trust
Repo: —
Engines: {"node":">=22.19.0"}
Weekly DL: 0
Monthly DL: 0
dsh.bundle: {}