dsh-control

dsh-control

English | 中文

Every machine already runs dsh. Make this one window the front end for all of them.

Chat with the dsh instances on your other machines, natively from your local sidebar.
Remote sessions stream back token by token; the remote uses its own model credentials,
tools and sandbox. Zero changes on the remote. Zero dependencies. One-line install.

A real two-machine setup. Left: the remote machine's own dsh — the session there was created
for you and auto-named 控制端·<local title> (①). Right: your local dsh — the same question
runs on the remote (③ the model route is the environment name, cn-dsh2) and the answer lands in a
local session inside the workspace the plugin created for that environment (②).

🎬 A 15-second capture (one-click connect → streaming reply) is being recorded.

Install

dsh plugin --profile <profile> add dsh-control

After installing, fully quit and reopen dsh (⌘Q). A「远程 dsh 环境」panel appears
in the right sidebar.

How is this different from dsh-remote / dsh-remote-ssh?

The two coexist (tested side by side): no dsh on the remote → use dsh-remote;
dsh already there → use dsh-control.

What it does

The「远程 dsh 环境」panel: type user@host and connect — the row then reports its state and
whether the environment already has its workspace.

• One-click connect — type user@host; the plugin probes the remote dsh, fetches
  its access token and opens an encrypted channel (~5 s)
• Automatic workspace — each environment gets a same-named local workspace; any
  session created inside it automatically becomes a remote session
• True streaming — remote replies flow in token by token, not dumped at the end
• Paired naming — remote sessions are named 控制端·<local title>, so both sides match
• Visible & self-healing — remote sessions are marked in the sidebar; disconnects
  are reported honestly and repaired by one click

Security

What it does on your machine: one state file
($DSH_HOME/dsh-control/state.json, mode 0600, holds the remote access tokens) and an
on-demand SSH tunnel process.
What it never does: no installs or writes on the remote, no lifecycle management of
the remote dsh, never reads your other local credentials, tokens never enter logs.
When passwordless SSH is not set up it shows the exact one-line fix — passwords are
never stored. Details in SECURITY.md.

Known limitations

• The remote must already run dsh with its web instance (otherwise use a
  remote-workspace plugin)
• Connects over SSH (passwordless or configured key; a direct no-SSH mode is on the roadmap)
• Sidebar markers and the streaming feel are verified by eye per release
• Cancelling a remote turn is implemented but marked experimental

Development

node --check lib/*.js
for t in test/*.test.mjs; do node "$t"; done   # 52 checks: unit / contract / structural invariants
scripts/verify-boot-selfheal.sh                # boot self-heal (needs a local dsh runtime)

License

MIT © 6mt