dsh-plugin-slashx-gateway

DeepSeek Harness is a local-first AI agent runtime, but its native API does not speak the SlashX protocol out of the box. If you want SlashX clients, mobile apps, or third-party integrations to call the models and toolchains loaded inside Harness through a single standardized slashx.request.v1 / slashx.response.v1 interface, without hand-rolling auth, media persistence, SSRF guards, and rich-component fallback yourself, this gateway plugin exists for exactly that gap.

It sits between Harness and SlashX as a secure, idempotent transport bridge: text flows as native content blocks; images are downloaded, decoded, validated, and injected into the model; audio, video, PDFs, Office files, and arbitrary documents are safely written to a per-conversation workspace where agent tools can read them. On the response side, the slashx_deliver tool lets the agent deliver images, video, audio, files, citations, cards, and buttons in protocol-compliant form; when the client does not declare a capability, content is explicitly downgraded to an attachment or Markdown rather than silently dropped. Long-running tasks complete via a one-time callback token, and billing supports both flat-per-run and token pass-through meters with a fail-closed guarantee when usage data is incomplete.

It is best suited for developers and teams who have already built agent applications on DeepSeek Harness and need to expose a standardized inference endpoint to the SlashX ecosystem or to internal and external consumers who expect rich-media interactions. If your threat model calls for SSRF protection, path-traversal guards, token hygiene in logs, and strict capability negotiation, this plugin provides the full gateway layer. The project is still in Developer Preview; run the full acceptance suite in a pre-production environment before any production rollout.