nishuoyang/dsh-workbench-ecs
Drives remote Alibaba Cloud ECS instances through the local Workbench CLI with 11 agent-native tools and a visual panel — no public IP needed, destructive commands fail closed behind the Harness approval guard.
dsh-workbench-ecs lets the agent control remote Alibaba Cloud ECS instances through the local Workbench CLI. It ships 11 agent-native tools — ecs_find / ecs_list / ecs_exec / ecs_log / ecs_upload / ecs_download / ecs_diagnose / ecs_deploy / ecs_runbook / ecs_snapshot / ecs_session — covering the full find -> list -> diagnose -> execute -> upload -> restart -> verify -> snapshot loop, plus a visual settings panel (CLI status, instance browser, guarded deploy wizard, sessions, operation timeline). Destructive commands (rm -rf, shutdown, reboot, mkfs, dd, iptables -F/-X, ...) go through the Harness approval guard and are rejected unless explicitly allowed (fail closed), and a read_only guard rejects write operations before they reach a shell. Release snapshots make 'the rollback point before you touch anything plus the difference check afterwards' a first-class concern; runbooks keep orchestration as reviewable JSON in the project repo; uploads retry only transient network failures and verify SHA-256 (on by default); and same-instance operations serialize FIFO while different instances run in parallel.
Install
dsh plugin --profile web add dsh-workbench-ecsCopied verbatim from the README's installation table (browser surface, dsh web). The README stresses two hosts, two profiles (v0.9.0+): the browser and the desktop app are separate host processes loading separate profiles, so the plugin must be installed into each — the desktop row uses dsh plugin --profile desktop add dsh-workbench-ecs.
Compatibility
A DSH (Cordis) plugin that runs on both the browser surface (dsh web, DSH 0.1.x) and the DeepSeek Harness desktop app (dsh-desktop-host, DSH 0.2.x) from one package. It drives the official Alibaba Cloud Workbench CLI locally, so instances are reached through the Workbench backend channel with no public IP needed.
Details
- Repo: nishuoyang/dsh-workbench-ecs
- Category: Infrastructure & Deployment
- Stars: 2
- Version: GitHub repo nishuoyang/dsh-workbench-ecs; npm package dsh-workbench-ecs at 0.9.1 (registry check 2026-10-08; registry repository field resolves back to this repo). v0.9.0; MIT license.
Alternatives
AlliotTech/deepseek-harness-docker · juanwang-buaa/dsh-full-remote · flymysql/dsh-remote