huangjuhua-aigc/dsh-a2a

Name: huangjuhua-aigc/dsh-a2a
Author: huangjuhua-aigc

Plugin插件 Native原生 ⭐ 2 MIT Dev Workflow开发与代码工作流 Productivity & Tasks效率与任务

dsh-a2a-server 使得 DeepSeek Harness 代理能够通过 A2A（Agent2Agent）协议被访问。它在标准 URI 上提供 Agent Card，并实现了 v0.3.0 版本的 JSON-RPC 绑定，因此任何了解部署 URL 的符合规范的节点都可以发现该代理并提交任务给它。

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

dsh-a2a-server is an inbound Agent2Agent protocol plugin written specifically for DeepSeek Harness, packaged as a cordis bundle that the harness installs via dsh plugin --profile web add dsh-a2a-server, after which the entry is appended to dsh.profile.bundles so any A2A-compliant peer can discover the agent through its published Agent Card and submit JSON-RPC tasks over HTTP. The plugin implements the A2A v1.0 JSON-RPC binding, serves the Agent Card at .well-known/agent-card.json and .well-known/agent.json, and exposes a POST endpoint at the configurable basePath (default /a2a) that requires a Bearer token; it is strictly inbound, with no outbound client, no peer directory, and no A2A subagent provider, sitting as a transport layer over ctx.agents rather than as a capability seam.

The intended workflow is to run pnpm install followed by A2A_PEERS="alice:demo123" A2A_PORT=9922 pnpm serve, then either fetch the card or POST a SendMessage JSON-RPC request and watch the three-stage settlement unfold: agent/inbox/claimed binds the message to a turn, turn/end records that turn's end, and agent.whenIdle() settles once the entire agent is quiet. Every lifecycle transition is persisted as an a2a/task event that a projection unit folds into a read model whose terminal edge carries the committed output, eliminating the need to scan message history. The package is targeted at operators and multi-agent integrators who need to expose a DeepSeek Harness agent as a discoverable A2A endpoint behind a reverse proxy.

Dependencies are pulled from the harness: ctx.agents and ctx.credentials come from dsh-base, while ctx.webServer is supplied by dsh-web-app, so a headless profile must mount @deepseek-ai/dsh-host-webserver first or the bundle stays PENDING and serves nothing. The peer dependency is pinned exactly to DSH 0.1.0-rc.6 because the harness is pre-release and does not promise compatibility across renames; DEEPSEEK_API_KEY is read from the harness home, .env layers, or the process environment and a missing credential fails the boot, the default model id is deepseek-v4-flash, configuration changes restart the plugin and cancel in-flight tasks, and a one-shot pnpm probe runs 67 checks against a live server. The source tree separates a dependency-free src/protocol/ library from the Cordis wiring in index.ts and HTTP/JSON-RPC dispatch in router.ts, end-to-end tests boot a real Cordis composition with a deterministic stub adapter, and the project is released under MIT with community support through a WeChat group and GitHub issues.

dsh-a2a-server 是面向 DeepSeek Harness 的入站 A2A 协议插件，作为 cordis bundle 随 dsh plugin --profile web add dsh-a2a-server 安装并追加到 dsh.profile.bundles，随后端模型成为可被任何合规 A2A peer 通过 Agent Card 发现并提交任务的代理。它实现了 A2A v1.0 JSON-RPC 绑定，监听 /.well-known/agent-card.json 与默认 /a2a 路由，仅提供入站服务，不连接对端、无客户端、无子代理提供器，是叠加在 ctx.agents 上的传输适配器。

典型工作流是 pnpm install 后以 A2A_PEERS="alice:demo123"、A2A_PORT=9922 启动 pnpm serve，再用 curl 取 Agent Card 并以 Bearer 令牌调用 SendMessage，任务通过 agent/inbox/claimed、turn/end 与 agent.whenIdle() 三阶段挂钩结算，a2a/task 事件折叠到会话日志的读模型。它面向需要把 DeepSeek Harness agent 暴露为 A2A 端点的运维与多代理编排开发者，依赖 dsh-base 提供的 ctx.agents、ctx.credentials 以及 dsh-web-app 提供的 ctx.webServer。

依赖与限制方面：缺少 DEEPSEEK_API_KEY 时启动失败，无头 profile 必须先挂载 @deepseek-ai/dsh-host-webserver，peer 依赖被精确钉在 DSH 0.1.0-rc.6 以适配预发布版本；配置变更会重启插件并取消在飞任务，单条消息可能跨越多轮。项目以 MIT 协议开源，社区支持通过微信群 A2A 产品应用和探索 与 issue 渠道提供。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】，检查通过再动手。

插件：dsh-a2a（huangjuhua-aigc/dsh-a2a）
仓库：https://github.com/huangjuhua-aigc/dsh-a2a
本站详情页：https://www.yhbd.top/plugins/huangjuhua-aigc-dsh-a2a/
本站登记：类型 plugin · 归类 原生 DSH 插件 · 许可证 MIT · ⭐ 2 · 最近提交 2026-09-04 · 主语言 TypeScript

按下面顺序执行，每步先把结论告诉我，再进入下一步：

【1 兼容性检查】
① 我这边：DSH 版本、Node 版本、操作系统、当前 profile（web / desktop）。
② 读它的 README、package.json、插件 manifest，列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对，结论只写「满足 / 不满足 / 未知」三种；不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突：命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。

【2 安全性检查】
① 仓库可信度：和上面「本站登记」是否一致；star / fork 数、创建时间、最近提交，是否归档或长期停更。
② 安装脚本：逐行看 package.json 的 preinstall / install / postinstall，以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名，立刻停下来告诉我，不要继续装。
③ 依赖：列出新增依赖，标出无人维护、或与知名包拼写近似的可疑包（typosquatting）。
④ 权限与副作用：它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限（filesystem / network / shell / clipboard 等），以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限，或权限明显超出功能所需，先停下来问我。

【3 安装】
上面两步没有「不满足」和「高危项」时才执行；用官方推荐方式安装，不要自行提权。

【4 汇报】
用表格输出：检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜，也不要替我决定。

Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH：它会先核对兼容性与安全性（逐条给「满足 / 不满足 / 未知」），确认没问题再安装，有高危项会停下来问你。框内可滚动，复制到的是完整提示词；安装命令不一定准确，发给 DSH 更稳。

Pre-install check安装前体检Compatibility · Security兼容性 · 安全性 1 warning1 项注意

Only 2 stars - very few users, little community feedback星标只有 2，几乎没人在用，遇到问题缺少社区反馈

DSH walks through these 9 checksDSH 会逐条核对这 9 项

Compatibility兼容性

DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时（Electron / Python / Docker 等）是否齐备
Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突：命令名、skill / tool 重名、端口占用、重复 MCP 注册

Security安全性

Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致，是否归档或长期停更
Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需（filesystem / network / shell / clipboard）
Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限，以及卸载与回滚方式

Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照，不能替代安全审计。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin --profile web add dsh-a2a-server

把 huangjuhua-aigc/dsh-a2a 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

15.5 KB · 缓存于 2026-09-29 22:08:55 · 15.5 KB

dsh-a2a-server

Inbound A2A protocol server for DeepSeek Harness.
Publish an Agent Card, accept tasks from any compliant peer.
Everything is a plugin — this is one.

English · 简体中文

_{A community plugin, not an official DeepSeek product.}

dsh-a2a-server makes a DeepSeek Harness agent reachable over the A2A (Agent2Agent) protocol. It serves an Agent Card at a well-known URI and implements the v1.0 JSON-RPC binding, so any compliant peer that knows the deployment's URL can discover the agent and submit tasks to it.

The plugin is inbound only: it never connects to another agent. There is no client, no peer directory, and no A2A subagent provider. It is a transport adapter over ctx.agents, not a capability seam.

Install

dsh plugin --profile web add dsh-a2a-server

dsh plugin forwards to pnpm inside the profile directory and appends this bundle to dsh.profile.bundles, because the package declares dsh.bundle.

To work from a checkout instead, point it at the directory:

dsh plugin --profile web add ./path/to/dsh-a2a-server

Requirement	Supplied by
`ctx.agents`	`dsh-base`
`ctx.credentials`	`dsh-base`
`ctx.webServer`	`dsh-web-app`
`ctx.sessionProjections` (optional)	composition; enables `GetTask` after settlement

Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要，完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →

渲染基于仓库 huangjuhua-aigc/dsh-a2a 的 README.md。在 GitHub 查看原文 →