DSH Native

A focused native shell for HTTPS web apps—with saved servers, fast reconnects, and a first-class workflow for DeepSeek Harness.

DSH Native keeps frequently used web apps out of ordinary browser tabs. The repository includes the cross-platform Electron desktop app and a native SwiftUI companion for iPhone and iPad. Both remember multiple trusted servers and return to the most recently used one at launch.

Highlights

• Saved server list — add, name, remove, and switch between HTTPS endpoints.
• Fast return — reconnects to the most recently used server on launch and preconnects while the window starts.
• Focused window — external links open in the system browser instead of spawning extra app windows.
• Responsive in the background — renderer and timer throttling are disabled so long-running apps remain live.
• Native attention alerts — companion events become deduplicated OS notifications for completed, blocked, failed, question, and approval states.
• Hardened boundary — remote pages receive no native host-management capability, and cross-origin navigation opens in the system browser.
• Native mobile companion — a polished SwiftUI and WebKit implementation supports iPhone and iPad without Electron or third-party runtime dependencies.

Download

Prebuilt installers and portable packages are published on the Releases page:

Platform	Release artifacts
Windows x64	NSIS installer and portable executable
macOS Apple silicon	DMG and ZIP
Linux x64	AppImage and Debian package

macOS releases target Apple silicon (arm64); Intel Macs are not supported.

[!IMPORTANT] Windows binaries are unsigned. Starting with v0.1.1, macOS apps carry an ad-hoc integrity signature but are not Apple Developer ID signed or notarized. SmartScreen or Gatekeeper may therefore require an explicit first launch. Verify the file against the release's SHA256SUMS.txt; see release documentation.

First launch on macOS

After copying DSH Native into Applications, Control-click the app and choose Open. If macOS still reports that the app is damaged, first verify the DMG checksum and then clear quarantine from the copied app:

xattr -dr com.apple.quarantine "/Applications/DSH Native.app"

This workaround is necessary only until releases are Developer ID signed and notarized. Never bypass quarantine for an artifact whose checksum does not match.

Use DSH Native

1. Launch DSH Native.
2. Add a display name and an https:// URL.
3. Select the server to connect.
4. Use App → Servers… or Ctrl/Cmd + H to return to the server list.

Only HTTPS URLs can be saved. Add servers you trust: connected sites run inside the desktop window and retain normal Chromium site storage in DSH Native's per-user application profile. The server list and performance log are stored locally in Electron's userData directory.

iPhone and iPad companion

The ios/ project is a native SwiftUI companion for iOS and iPadOS 17 or newer. It includes a saved-host picker, automatic reconnection, persistent WebKit sessions, strict top-level selected-origin navigation, native browser controls, website-data clearing, privacy metadata, and deterministic unit tests.

The iOS source compiles and its simulator suite runs on the project's local Apple-silicon Mac. It is not currently distributed as an installable release: stock iOS requires code signing even for personal-device installation. Use Xcode automatic personal-team signing for your own device, or configure an Apple Developer account before TestFlight/App Store distribution. See ios/README.md and the reusable scripts/build-ios-remote.ps1 helper.

DeepSeek Harness companion

When the remote app is a DeepSeek Harness web UI, install dsh-companion, an out-of-tree Harness plugin. It exposes lightweight project/session endpoints and a filtered notification event feed. DSH Native connects to that feed directly from its main process—remote page content never receives a privileged desktop-notification API.

Notifications are shown only while DSH Native is running and its window is not focused. Clicking one restores and focuses the app. Reconnect cursors and stable event keys prevent duplicate alerts during ordinary network interruptions. Choose which turn outcomes, questions, approvals, and subagent events are forwarded in the companion plugin's Harness settings. Closing the app window stops the feed; on Windows and Linux it also exits DSH Native. Keep the window open or minimized to continue receiving alerts.

If a proxy rewrites the Host header—for example, Tailscale Serve—add its public authority to the Harness trust fence:

dsh web --trusted-host your-host.example.net

See the companion installation guide for details.

Develop locally

Requirements

• Node.js 22.12 or newer
• npm 10 or newer
• A supported Windows, macOS, or Linux desktop
• For iOS work: an Apple-silicon Mac with Xcode 26 and XcodeGen 2.46

git clone https://github.com/leonardoxr/dsh-native.git
cd dsh-native
npm ci
npm start

Run the same checks used by CI:

npm run check
npm test

Create an unpacked app for the current platform with npm run package, or distributable installers with npm run dist. Outputs are written to dist/.

Project layout

src/
├── main.js                 Electron main process and server management
├── preload.js              Context-isolated bridge for the local picker
├── lib/                    URL policy, SSE feed, deduplication, and notification presentation
└── renderer/               Bundled server-picker HTML, CSS, and JavaScript
test/                       Node.js unit tests
ios/                        Native SwiftUI iPhone/iPad app and tests
scripts/                    Reusable local and remote build helpers
.github/                    CI, releases, and contribution templates
docs/RELEASING.md           Maintainer release process

Contributing

Contributions are welcome. Read CONTRIBUTING.md before opening a pull request, use the issue templates for bugs and ideas, and follow the Code of Conduct.

Please report security issues privately as described in SECURITY.md, not in a public issue.

Roadmap

• Multi-host tabs that keep connected hosts loaded for instant switching.
• Unread badges and per-session notification routing.
• Cold, persisted-only session summaries.
• Signed release binaries and automated update metadata.

License

MIT © 2026 leonardoxr