buger-gif/dsh-remote-huaweicloud-devbridge#dsh-plugin

Remote control for DeepSeek Harness over an outbound Huawei Cloud DevBridge tunnel: a sidebar seat and a standalone control page start and stop the tunnel and show its public URL, QR code and logs. The plugin's own gateway stays on 127.0.0.1, checks a rotatable access token or HMAC session cookie, rate-limits failures and strips external identity headers before forwarding to DSH, so no inbound port is opened. The tunnel is off by default; tokens and state stay under ~/.dsh. Requires a Huawei Cloud account and devbridge CLI v0.2.x. The relay terminates TLS and can see plaintext HTTP — this is access control, not end-to-end encryption.