weichengwu/dsh-web-control

Manage a LAN or Tailscale reachable dsh web instance from inside DSH. dsh web listens on loopback by default; this adds a Settings > Web access panel that detects the machine's Tailscale and LAN addresses, starts dsh web bound to the one you pick, and shows the token URL to open on a phone or another machine. Also stops and restarts it, tails the child log, persists the bind address and port, and registers two agent tools (dsh_web_control, dsh_web_config). Zero runtime dependencies. Anyone who can reach the bound address and holds the token URL gets your dsh's full privileges (files and commands); LAN mode is plain HTTP, Tailscale is encrypted by the tunnel, and the token is single-use and changes on every start.