DeepSeek Harness Network

Key features

• (subdomain, password) set once in dsh's Settings → the plugin claims the subdomain and connects.
• The agent rewrites each forwarded request's Host/Origin to loopback, so dsh's /api browser-trust fence accepts it as a local same-origin request for any runtime-chosen subdomain — which is what lets the subdomain come from a form instead of the composition.
• Persists to dsh's own /.dsh/settings.yaml and reconnects on restart.
• The first agent to present a free subdomain sets its password (scrypt-hashed on the relay).
• Later connects and every browser login must match it — squatting-protected.