RoleHub Bridge for DSH

Choose a portable agent role. Verify its bundle. Start it as a native, continuable DSH Session.

The current conversation stays itself. Agent Team Room stays a Room.

简体中文 · Install · Native UI · Commands · Trust model · AI support · Security

RoleHub Bridge is the native DeepSeek Harness compatibility layer for RoleHub. It discovers portable roles from Host-configured Hubs, verifies and pins an exact bundle, computes a Host-owned effective policy, and creates a separate role-scoped child Session.

There are no built-in company teams, personas, or Room scenarios here. A role comes from RoleHub only when a person explicitly selects it. Agent Team Room is an optional destination for the resulting Session—not a dependency and not a source of role authority.

One bridge, narrow responsibilities

The bridge owns	The bridge deliberately does not own
Hub discovery, catalog validation, and bounded downloads	Role authoring or community governance
Exact manifest/archive/bundle digest verification	Trusting a publisher merely because it appears in a catalog
Effective capability policy and fixed Host tool bindings	Self-granted tools, secrets, shell, network, or Room authority
A new continuable, role-scoped child Session	Mutating the active conversation into a role
Optional attachment through Room's public Host API	Room membership, delivery, tasks, scenarios, or a kanban board
Additive native DSH controls and a read-only snapshot	Replacing DSH Web, patching its DOM, or injecting global CSS

Architecture

flowchart LR
  U[Human in native DSH UI] -->|explicit selection| C[/rolehub Host command]
  U -->|same-origin GET| V[Allowlisted role snapshot]

  subgraph Bridge[RoleHub Bridge]
    C --> R[Resolver + private cache]
    H[HTTPS Hub catalog] --> R
    R --> D[Digest-locked deployment]
    D --> P[Effective Host policy]
    P --> A[DSHarness compatibility setup]
  end

  A --> S[Continuable child Session]
  S -. optional attach .-> M[Agent Team Room]
  X[Cold resume] -->|provider name contains bundle digest| D
  D -->|revalidate receipt + bindings| X

The executable capability set is intentionally narrower than a role request:

required role requests ∩ bridge support ∩ Host allowlist

Optional capabilities are never granted automatically. A missing required capability fails closed.

Native DSH UI

The package adds RoleHub actions to the official conversation.session.header.actions and sidebar.footer.action slots. Both open the same native Modal, where you can search Hubs, tags, descriptions, and capabilities; inspect the bundle digest and effective capability groups; then create a role Session. With Room v0.6 or newer installed, the bridge registers the same verified picker in Room's distinct header and footer provider seats, with the current Room preselected. The original header-seat key remains registered so existing provider integrations keep working.

<br> _{Concept preview with synthetic data—not a screenshot of a live account. The bundled client uses native DSH slots, primitives, and tokens.}

…