Introduction

DeepSeek Harness (DSH) adopts the architectural principle of “everything is a plugin”. When business systems integrate DSH agent capabilities, they usually need to develop custom integrations against the SDK or internal communication protocol. The newspringwei/dsh-biz-bridge plugin exposes DSH agent capabilities to external systems through standard HTTP protocols, allowing business clients to obtain streaming or callback responses using simple HTTP requests without needing to understand DSH internals.

Plugin Overview

  • Plugin Name: newspringwei/dsh-biz-bridge
  • Purpose: DeepSeek Harness business bridge plugin
  • Maintainer: NewSpringWei
  • License: MIT

Core Capabilities

This plugin mainly provides the following capabilities:

  • Standard HTTP protocol access: Exposes RESTful endpoints, allowing business systems to interact through HTTP.
  • Response modes: Supports both streaming (SSE) and callback response modes.
  • Context reuse: Uses the session_id parameter to maintain multi-turn conversation context.
  • Task scheduling and storage: Task scheduling and logs are stored in a SQLite database.
  • Bidirectional attachment relay:
    • Inbound: The business client submits a URI, and the plugin is responsible for fetching the attachment and saving it to local storage.
    • Outbound: Files produced by the agent are discovered, registered, and provided through a signed download endpoint.
  • Security validation and constraints:
    • Entry validation: Supports signature authentication, SSRF protection, path traversal detection, authorization validation, attachment size and integrity checks.
    • Agent constraints: Supports capability constraints such as removing tools and read-only sandbox mode.
  • Portable deployment: Supports generating portable deployment packages with bundled runtimes.

Installation and Activation

Before installing, ensure the environment meets the following requirements:

  • Node.js: ^22.19.0 || >=24.0.0
  • DSH environment: DSH is installed on the machine and the dsh command is available.

The installation steps are as follows:

  1. Obtain the installation package. You can get dsh-biz-bridge-0.1.3.tgz from the repository’s release directory, or build it yourself.
    ls release/dsh-biz-bridge-0.1.3.tgz
  1. Use the dsh plugin command to install the plugin. It is recommended to create a separate profile named bizbridge.
    dsh plugin --profile bizbridge add ./release/dsh-biz-bridge-0.1.3.tgz
  1. Start the service.
    dsh --profile bizbridge

The startup process is successful when `activation rescue` and `activated` appear in the startup logs.

Usage and Testing

After the service starts, you can perform integration tests using the following tool pages:

  • Integration test page: http://127.0.0.1:42731/bizbridge/static/client.html
  • Key tool page: http://127.0.0.1:42731/bizbridge/static/utils.html

On the test page, you can test requests in streaming/callback modes and bidirectional attachment relay.

If you need to generate a portable deployment package (bundling Node + DSH + pnpm + the plugin), you can use the tools in the tools/bundle/ directory.

Security and Notes

  • Trust model: This plugin is intended for trusted business systems and requires private-key signature authentication. The channel is trusted, but the forwarded content may come from upstream and is still treated as untrusted at the content layer.
  • Current version status: Version 0.1.3 is in an early stage, APIs may change, and it is not recommended for critical production paths.
  • Client not configured: If clients.json and the corresponding public keys are not configured, all API requests will return 401, and only static pages will be reachable.
  • Independence: The plugin process does not interfere with web/GUI.

Conclusion

This plugin provides business systems with a standardized HTTP path to DSH agent capabilities. For more configuration details, API definitions, and security boundary explanations, refer to its official catalog page or GitHub repository.