namehousiqi/dsh-ssh-manager

dsh-ssh-manager is a native cordis plugin built specifically for DSH (DeepSeek Harness), packaged as a bundle that ships both a Host half running inside the DSH process and a browser-side settings page rendered as part of the DSH Web GUI. Installation is done by cloning the repository, running pnpm install followed by pnpm pack to produce a workspace-dsh-ssh-manager-<version>.tgz file, and then adding that archive either through DSH's graphical plugin manager or via the dsh plugin add ./workspace-dsh-ssh-manager-<version>.tgz command; the package's cordis.patch.yml inserts an include:dsh-ssh-manager line that wires both halves together. A full restart of DSH is mandatory after installation, otherwise the in-memory version keeps serving stale settings and tools.

Its core purpose is consolidating password-authenticated SSH servers into a managed host list so the Agent can operate them by ID only, with passwords never echoed back through either the settings UI or read-only tool results. The intended workflow offers two entry points: manually adding hosts in Settings → SSH Hosts with optional connection testing, or handing a host list file to the Agent which parses it and calls ssh_host_apply for atomic bulk import after item-by-item confirmation. Available Agent tools include ssh_hosts, ssh_host_create, ssh_host_update, ssh_test, ssh_exec, and ssh_upload, while dangerous deletion patterns such as rm, rmdir, unlink, find -delete, xargs rm, rsync --delete, and git clean trigger a DSH approval flow before any connection is opened. The target audience is operators who want Agent-assisted sysadmin work without scattering credentials into chat history.

Dependencies and limitations deserve attention: installation will request approval for build scripts of ssh2@1.17.0 and cpu-features@0.0.10, and failure to approve them is non-fatal since ssh2 falls back to a pure-JavaScript implementation with reduced performance. Host records are stored in plaintext at ~/.dsh/ssh-manager/hosts.json with file mode 0600 and directory mode 0700, overridable through the DSH_SSH_HOSTS_FILE environment variable, and password values entered via Agent tools will appear in that session's tool arguments and persistent logs. Only password authentication is supported today, with no key or agent forwarding yet; remote commands time out at 30 seconds, stdout and stderr are capped at 64 KiB each, single-file SFTP uploads are limited to 100 MiB and require an absolute remote path without auto-created directories, and each host may carry at most 20 tags. There is no interactive PTY, no download, no directory sync, and no long-running background task; the deletion audit is a heuristic text check rather than a guarantee, and it does not cover Docker, Kubernetes, or database resources. The license is Apache-2.0, and first-run users must remember to restart DSH and verify the SSH Hosts page appears in Settings before proceeding.