dsh-biz-bridge

In many engineering organizations, AI agent capabilities live tucked inside internal tooling. Business systems that want to invoke an agent end up either scraping undocumented internal APIs or stitching together fragile glue code. dsh-biz-bridge eliminates that friction by exposing DeepSeek Harness agents over a plain signed-HTTP contract. A business caller fires one request, receives either an SSE streaming response or an asynchronous callback, and keeps multi-turn context alive simply by reusing the same session_id. Task orchestration and run logs are persisted to SQLite behind the scenes, so the calling system never needs to know how the engine schedules work.

File handling goes both directions over the same HTTP channel. The business side attaches an image or document by sending a URI; the plugin fetches it and drops it into the caller-isolated working directory for the agent to consume. Files produced by the agent are discovered, registered, and handed back through a signed download endpoint. No external object store, message queue, or sidecar service is required.

Security is fail-closed by design. With no client public key configured the service still boots, but every API call returns 401 and only the local utility pages are reachable. Key-pair generation runs entirely in the browser, performs pure local computation, and never sends data over the network. For teams that already run an API gateway or internal PKI, the per-identity signature layer composes cleanly with existing authentication.

Who should reach for this? If your team already operates DSH for agent workloads and now needs to expose those capabilities as a standard interface for upstream services without pulling in a proprietary SDK or a microservice framework, this plugin offers a self-contained middle layer. Be aware that the project is still in its 0.1.x early stage and interfaces may shift as it matures, so validate on non-critical paths before wiring it into production.