DeepSeek Harness plugin

dsh-api

Local HTTP API for DeepSeek Harness: expose DSH session control to other agents

Jump to install

Source facts

Repository
kelemiao/dsh-api
Latest update
Aug 19, 2026
Category
Tools & Capabilities
GitHub stars
1
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/kelemiao/dsh-api
Plugin: dsh-api
Author: kelemiao

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer2 files
README.mdSource · read only

dsh-api

Local HTTP API for DeepSeek Harness (DSH). Other AI agents use it to control DSH through plain HTTP instead of the GUI.

Milestone one covers session control: list and create sessions, read history, send prompts, stream replies, and cancel turns. Everything else remains available through the raw /api/* passthrough.

Install

Install the plugin into a DSH web profile:

dsh plugin --profile web add link:C:/path/to/dsh-api

The package declares dsh.bundle.patch, so dsh plugin registers it in the profile's dsh.profile.bundles automatically. No manual cordis patch is needed. Once published, install from the registry with dsh plugin --profile web add @kelemiao/dsh-api.

Settings live in the GUI Settings page under dsh-api and apply immediately.

Settings

FieldTypeDefaultNotes
enabledbooltrueserver on/off
portint47771-65535, loopback only
tokensecretgenerated on first runfixed bearer token

Endpoints

MethodPathPurpose
GET/healthPublic health check.
GET/api/sessionsList sessions: { items: SessionSummary[] }.
POST/api/sessionsCreate session; body { cwd?, workspaceId?, agentPreset? }.
GET/api/sessions/:id/historyRead history; query beforeSeq?, maxMessages?.
POST/api/sessions/:id/promptSend prompt; body { content, mode? }.
POST/api/sessions/:id/cancelCancel the running turn.
GET/api/sessions/:id/streamSSE stream filtered to this session.
POST/api/*Raw official ApiProxy JSON RPC passthrough.
GET/api/events.muxRaw official aggregated SSE stream.

Convenience routes win over the passthrough; any other request whose path starts with /api/ is forwarded verbatim to the official ApiProxy transport.

Authentication

All routes except /health require Authorization: Bearer <token>. The server binds 127.0.0.1 only. Missing or wrong tokens get 401.

SSE

curl -N -H "Authorization: Bearer $DSH_API_TOKEN" \
  http://127.0.0.1:4777/api/sessions/<sessionId>/stream

Frames are official MuxFrame objects, filtered by session id. A prompt whose single text block starts with / runs as a slash command, like the GUI.

Smoke test

With the plugin enabled in a running DSH:

DSH_API_TOKEN=<token> node scripts/smoke.mjs

DSH_API_URL defaults to http://127.0.0.1:4777.

Scope

Out of milestone one: ergonomic wrappers for approvals, subagents, goals, jobs, settings, credentials, and workspace mutation; TLS; remote bind; multi-user tokens.