dsh-ssh

English | 中文

SSH remote-execution plugin for DeepSeek Harness. Runs Bash, file tools, PTY terminals and LSP on a remote host over one SSH connection — ProxyJump chains, SFTP, full auth. Built on ssh2.

Install

dsh plugin --profile web add dsh-ssh

Or use the Web UI: Plugins → Add plugin → dsh-ssh. The bundle mounts the SSH providers and takes over the Add workspace flow — create real connections there. Needs DeepSeek Harness 0.2.x and Node ≥ 22.

A plain npm i dsh-ssh does not select the bundle; add it to dsh.profile.bundles yourself.

Configure

Only needed when composing providers by hand (cordis.yml):

- id: ssh-remote
  name: dsh-ssh
  config:
    host: server.example.com        # or a ~/.ssh/config alias
    username: root
    privateKey: ~/.ssh/id_ed25519   # path or PEM
    cwd: /root/workspace
    # jump:
    #   - { host: bastion.example.com, privateKey: ~/.ssh/id_ed25519 }

Field	Default	Notes
host username cwd	—	required (cwd is an absolute POSIX path)
port	22
password privateKey passphrase agent	—	any auth mode; falls back to ~/.ssh identities
jump	[]	ProxyJump chain, independent auth per hop
readyTimeout keepaliveInterval keepaliveCountMax	45000 / 0 / 3	milliseconds
strictHostKeyChecking knownHosts	false / []	host-key verification

Web profile: subprocess and fs are single-slot services. Disable the local providers (dsh-subprocess-local, dsh-fs-sandbox) in the profile patch, or remote work silently runs on the harness host.

Limitations

• Remote pid is always -1; terminate doesn't reap descendants (SSH can't).
• The SSH link doesn't auto-reconnect after a drop — recreate the connection.
• streamText is text-only; remote sessions aren't added to the local workspace registry.

Development

npm i
npm run typecheck
npm run build   # emits lib/ — the payload the harness loader imports

License

MIT