sqzw-x/dsh-plugins#dsh-lan-link

LAN access for the harness process: writes the authenticated links for the harness port, one per local IPv4 address, to a token file and registers DSH_LAN_LINK in the shell environment, and can run a gateway on a fixed LAN port that holds the browser session on this machine, so devices need no token; forwarded requests get Host and Origin rewritten for the same-origin guard, and a host-claim marker is injected so the page renders as the full desktop UI instead of remote-visitor mode. Devices are admitted by CIDR, with optional Basic auth.