dsh-android-sandbox

仓库内包含的插件

• dsh-userspace-bashv0.1.0-rc.5✓

  User-space bash executor for hosts without a usable kernel runner: advertises a sandbox mode (so permission-presets and tool escalation surfaces work) but never confines — file-effect enforcement is delegated to the userspace-gate gates at tools/pre-execute

  package.json

  userspace-bash/package.json

  dsh.bundle.patch

  userspace-bash/cordis.patch.yml

  官方核心包 (5)

  • @deepseek-ai/dsh-bash-local^0.1.0-rc.5共享
  • @deepseek-ai/dsh-invariants^0.1.0-rc.5共享
  • @deepseek-ai/dsh-sandbox-policy^0.1.0-rc.5共享
  • @deepseek-ai/dsh-system-prompt^0.1.0-rc.5共享
  • @deepseek-ai/dsh-tools^0.1.0-rc.5共享
• dsh-userspace-gatev0.1.0-rc.5✓

  Workspace-write guard plugin: a pure-user-space equivalent of the workspace-write sandbox at the tool-call layer — denies write/edit and bash write-intent calls whose targets fall outside the session workspace and platform temp roots, following the session sandbox mode

  package.json

  userspace-gate/package.json

  dsh.bundle.patch

  userspace-gate/cordis.patch.yml

  官方核心包 (7)

  • @deepseek-ai/cordis^0.1.0-rc.5共享
  • @deepseek-ai/dsh-invariants^0.1.0-rc.5共享
  • @deepseek-ai/dsh-sandbox^0.1.0-rc.5共享
  • @deepseek-ai/dsh-sandbox-policy^0.1.0-rc.5共享
  • @deepseek-ai/dsh-session^0.1.0-rc.5共享
  • @deepseek-ai/dsh-tools^0.1.0-rc.5共享
  • @deepseek-ai/schemastery^3.18.1私有副本

路径固定于提交 7ec62f7e00ee

概览

DeepSeek Harness (dsh) normally keeps writes inside the workspace with kernel-backed sandboxes — Landlock / bwrap, the filesystem fence, Seatbelt, Windows ACL runners. If your device has a working kernel sandbox, you don't need this repo; the shipped sandbox already covers you.