零設定 DSH 插件：依工作階段投影工具 Schema，消除 All Access 下第三方模型的沙箱升級重試迴圈；透過 dsh plugin 指令安裝，不更動 DSH 核心。
DSH 整合
原生執行環境
作者聲明
安全稽核
未稽核
最後核實
2026-09-03
授權條款
MIT
01它能幫你完成什麼？
Make DeepSeek Harness show third-party models only the sandbox escalation options the current session can actually use
bash/pwsh/write/edit tools that complete the workflow instead of failing on sandbox_permissions/justification before they run
DSH All Access / workspace-write users running GPT or other third-party models that hit repeated escalation retries
Stop the retry loop caused by redundant same-mode escalation and blank-justification errors
tools run without sandbox_permissions argument errors or impossible escalation advice; existing sessions stay restorable
Developers who see "invalid justification" or "not strictly wider than current mode" errors under All Access
02如何將外掛接入 DeepSeek Harness？
先決條件
- DeepSeek Harness (dsh) on PATH, version rc.5/rc.6/rc.7/rc.8, 0.1.1-rc.1/rc.2, or 0.1.2-alpha.1–alpha.5 (Desktop 2.0.3 supported)
- Node.js ^22.19.0 or >=24.0.0, and @deepseek-ai/cordis ^4.0.1
- Close DSH before installing or upgrading the plugin
- Install only after reproducing the affected behavior (same-mode escalation, blank justification, or retry-loop failures)
安裝步驟
- 01
Download and extract dsh-sandbox-escalation-fix-0.1.2-alpha5-release.zip, then run powershell -NoProfile -ExecutionPolicy Bypass -File ".\install-release.ps1" (add -Profile <name> for a non-default Profile)
- 02
Or pin a reviewed commit: dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>
- 03
Inspect the composed config with dsh --profile <profile> --dump-config (expect a dsh-sandbox-escalation-fix bundle layer and the sandbox-escalation-fix plugin row)
- 04
Start DSH normally: dsh --profile <profile>
驗證整合成功
- Fully restart DSH and open a new All Access session; ask the model to run pwsh, write a temp file, then edit and read it back
- The calls should complete without sandbox_permissions argument errors or impossible escalation advice
- Confirm --dump-config no longer lists the bundle after uninstall
03DSH 整合程度與能力邊界
Native DSH plugin installed through the official dsh plugin CLI (dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>); wraps bash/pwsh/write/edit in each Agent Exact Scope via the dsh.tool-wrapper.v1 protocol and projects a per-session tool schema.
Session-aware tool-schema projection
each Session's live Sandbox Mode and Approval Policy→model-visible bash/pwsh/write/edit schemas that advertise only usable escalation options
Redundant same-mode request fallback
a model request whose escalation target equals the current session mode→the redundant escalation pair removed; the original tool runs
04適合誰？何時不該用？
適合
- DSH All Access / workspace-write users running GPT or other third-party models that hit repeated escalation retries
- Developers who see "invalid justification" or "not strictly wider than current mode" errors under All Access
不適合
- The plugin checks installed DSH package versions at startup. Mixed rc.5/rc.6/rc.7/rc.8/0.1.1-rc.1/0.1.1-rc.2/0.1.2-alpha.1–alpha.5 installations and unknown DSH versions fail explicitly; an incompatible target with partial escalation fields or an incompatible output definition rejects that Agent's registration.
- The plugin owns the bash/pwsh/write/edit wrapper names in each Agent Exact Scope; another plugin may share them only via the explicit Symbol.for('dsh.tool-wrapper.v1') protocol. An unknown same-name wrapper causes Agent registration to fail explicitly — remove one conflicting plugin rather than rely on undefined load order.
05相容性、維護與安全提醒
- The plugin checks installed DSH package versions at startup. Mixed rc.5/rc.6/rc.7/rc.8/0.1.1-rc.1/0.1.1-rc.2/0.1.2-alpha.1–alpha.5 installations and unknown DSH versions fail explicitly; an incompatible target with partial escalation fields or an incompatible output definition rejects that Agent's registration.
- The plugin owns the bash/pwsh/write/edit wrapper names in each Agent Exact Scope; another plugin may share them only via the explicit Symbol.for('dsh.tool-wrapper.v1') protocol. An unknown same-name wrapper causes Agent registration to fail explicitly — remove one conflicting plugin rather than rely on undefined load order.
MIT · community plugin, supports DSH 0.1.2-alpha.5 and Desktop 2.0.3 (not published, maintained, or endorsed by DeepSeek)
06常見問題
這個插件到底修掉了 DSH 裡的什麼問題？
在 All Access（danger-full-access + never）與 workspace-write 工作階段中，原版 DSH 仍會在 bash、pwsh、write、edit 上暴露 sandbox_permissions 與 justification 升級欄位，但此時已無更寬的模式，或每次升級都會被拒絕。模型填寫這些欄位後呼叫失敗、進而陷入重試迴圈。插件依據每個工作階段即時的 Sandbox Mode 與 Approval Policy 投影模型可見的 Schema。
怎麼把它安裝到某個 DSH Profile？
下載 Release ZIP 後執行 `powershell -NoProfile -ExecutionPolicy Bypass -File ".\install-release.ps1"`（非預設 Profile 加上 `-Profile <名稱>`），或執行 `dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>` 並固定一個已審閱的提交。安裝前先關閉 DSH，`dsh --profile <profile> --dump-config` 應列出該 bundle。
怎麼確認修復已生效？
完整重啟 DSH，新建一個 All Access 工作階段，請模型執行 pwsh、寫入一個檔案，再用 edit 修改並讀回。工具應順利完成，不會出現 sandbox_permissions 參數錯誤或不可能的升級提示。僅 Web 成功啟動並不足以證明動態限制行為，需實際跑一遍行為檢查。
相容哪些 DSH 版本？
需要 Node.js ^22.19.0 或 >=24.0.0、@deepseek-ai/cordis ^4.0.1，以及 @deepseek-ai/dsh-* 0.1.0-rc5 至 0.1.2-alpha.5（rc.5–rc.8、0.1.1-rc.1/rc.2、0.1.2-alpha.1–alpha.5）與 Desktop 2.0.3。混合或未知的 DSH 版本會在啟動時直接報錯。
怎麼解除安裝？
在解壓後的 Release ZIP 目錄執行 `powershell -NoProfile -ExecutionPolicy Bypass -File ".\uninstall-release.ps1"`（可加 `-Profile`），或 `dsh plugin --profile <profile> remove dsh-sandbox-escalation-fix`。重啟 DSH，並確認 `--dump-config` 不再列出該 bundle。
07相關的 DSH 工作流程
cc-safety-net
作者 kenryu42
面向 AI 程式設計智慧體的執行前安全防護外掛，在工具呼叫前攔截破壞性 Git、檔案操作和敏感檔案訪問，相容多種編碼 Agent 與命令列工具。
tencentmeeting-cli
作者 tencentcloud
騰訊會議命令列工具（CLI），基於騰訊會議開放平臺 OAuth2 授權，支援會議管理、錄製管理、參會報告等功能。
dsh-auto-review
作者 perrylink
第二模型 AI 自動評審：只讀評審子智慧體對審批請求返回結構化允許或拒絕結論，預設關閉、全程可審計。
dsh-permission-rules
作者 perrylink
Claude Code 風格宣告式許可權規則：按序 allow/deny/ask 匹配工具、引數與工作區路徑
08資料與來源
The plugin owns the `bash`, `pwsh`, `write`, and `edit` names inside each Agent Exact Scope. Another plugin may share
dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>
此頁面根據專案公開文件、儲存庫中繼資料與 DSH Plugins 的結構化解析所產生；最後核實於 2026-09-03。發現錯誤？提交更正。
最佳 DeepSeek Harness 外掛
從全目錄挑出的 12 個值得優先安裝的外掛，涵蓋各個分類。