零配置 DSH 插件：按会话投影工具 Schema，消除 All Access 下第三方模型的沙箱升级重试循环；通过 dsh plugin 命令行安装，不改动 DSH 核心。
DSH 适配
原生运行时
作者声明
安全审计
未审计
最后核验
2026-09-03
许可证
MIT
01它能帮你完成什么？
Make DeepSeek Harness show third-party models only the sandbox escalation options the current session can actually use
bash/pwsh/write/edit tools that complete the workflow instead of failing on sandbox_permissions/justification before they run
DSH All Access / workspace-write users running GPT or other third-party models that hit repeated escalation retries
Stop the retry loop caused by redundant same-mode escalation and blank-justification errors
tools run without sandbox_permissions argument errors or impossible escalation advice; existing sessions stay restorable
Developers who see "invalid justification" or "not strictly wider than current mode" errors under All Access
02如何接入 DeepSeek Harness？
前置条件
- DeepSeek Harness (dsh) on PATH, version rc.5/rc.6/rc.7/rc.8, 0.1.1-rc.1/rc.2, or 0.1.2-alpha.1–alpha.5 (Desktop 2.0.3 supported)
- Node.js ^22.19.0 or >=24.0.0, and @deepseek-ai/cordis ^4.0.1
- Close DSH before installing or upgrading the plugin
- Install only after reproducing the affected behavior (same-mode escalation, blank justification, or retry-loop failures)
安装步骤
- 01
Download and extract dsh-sandbox-escalation-fix-0.1.2-alpha5-release.zip, then run powershell -NoProfile -ExecutionPolicy Bypass -File ".\install-release.ps1" (add -Profile <name> for a non-default Profile)
- 02
Or pin a reviewed commit: dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>
- 03
Inspect the composed config with dsh --profile <profile> --dump-config (expect a dsh-sandbox-escalation-fix bundle layer and the sandbox-escalation-fix plugin row)
- 04
Start DSH normally: dsh --profile <profile>
验证接入成功
- Fully restart DSH and open a new All Access session; ask the model to run pwsh, write a temp file, then edit and read it back
- The calls should complete without sandbox_permissions argument errors or impossible escalation advice
- Confirm --dump-config no longer lists the bundle after uninstall
03DSH 适配与能力边界
Native DSH plugin installed through the official dsh plugin CLI (dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>); wraps bash/pwsh/write/edit in each Agent Exact Scope via the dsh.tool-wrapper.v1 protocol and projects a per-session tool schema.
Session-aware tool-schema projection
each Session's live Sandbox Mode and Approval Policy→model-visible bash/pwsh/write/edit schemas that advertise only usable escalation options
Redundant same-mode request fallback
a model request whose escalation target equals the current session mode→the redundant escalation pair removed; the original tool runs
04适合谁？何时不该用？
适合
- DSH All Access / workspace-write users running GPT or other third-party models that hit repeated escalation retries
- Developers who see "invalid justification" or "not strictly wider than current mode" errors under All Access
不适合
- The plugin checks installed DSH package versions at startup. Mixed rc.5/rc.6/rc.7/rc.8/0.1.1-rc.1/0.1.1-rc.2/0.1.2-alpha.1–alpha.5 installations and unknown DSH versions fail explicitly; an incompatible target with partial escalation fields or an incompatible output definition rejects that Agent's registration.
- The plugin owns the bash/pwsh/write/edit wrapper names in each Agent Exact Scope; another plugin may share them only via the explicit Symbol.for('dsh.tool-wrapper.v1') protocol. An unknown same-name wrapper causes Agent registration to fail explicitly — remove one conflicting plugin rather than rely on undefined load order.
05兼容性、维护与安全提示
- The plugin checks installed DSH package versions at startup. Mixed rc.5/rc.6/rc.7/rc.8/0.1.1-rc.1/0.1.1-rc.2/0.1.2-alpha.1–alpha.5 installations and unknown DSH versions fail explicitly; an incompatible target with partial escalation fields or an incompatible output definition rejects that Agent's registration.
- The plugin owns the bash/pwsh/write/edit wrapper names in each Agent Exact Scope; another plugin may share them only via the explicit Symbol.for('dsh.tool-wrapper.v1') protocol. An unknown same-name wrapper causes Agent registration to fail explicitly — remove one conflicting plugin rather than rely on undefined load order.
MIT · community plugin, supports DSH 0.1.2-alpha.5 and Desktop 2.0.3 (not published, maintained, or endorsed by DeepSeek)
06常见问题
这个插件到底修掉了 DSH 里的什么问题？
在 All Access（danger-full-access + never）和 workspace-write 会话里，原版 DSH 仍会在 bash、pwsh、write、edit 上暴露 sandbox_permissions 与 justification 升级字段，但此时已无更宽模式、或每次升级都会被拒绝。模型填写这些字段后调用失败、进而陷入重试循环。插件根据每个会话实时的 Sandbox Mode 与 Approval Policy 投影模型可见的 Schema。
怎么把它装进某个 DSH Profile？
下载 Release ZIP 后运行 `powershell -NoProfile -ExecutionPolicy Bypass -File ".\install-release.ps1"`（非默认 Profile 加 `-Profile <名称>`），或运行 `dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>` 并固定一个已审阅的提交。安装前先关闭 DSH，`dsh --profile <profile> --dump-config` 应列出该 bundle。
怎么确认修复生效了？
彻底重启 DSH，新建一个 All Access 会话，让模型运行 pwsh、写一个文件，再用 edit 修改并读回。工具应顺利完成，不出现 sandbox_permissions 参数错误或不可能升级的提示。仅 Web 成功启动并不能证明动态限制行为，需跑一遍行为检查。
支持哪些 DSH 版本？
需要 Node.js ^22.19.0 或 >=24.0.0、@deepseek-ai/cordis ^4.0.1，以及 @deepseek-ai/dsh-* 0.1.0-rc5 至 0.1.2-alpha.5（rc.5–rc.8、0.1.1-rc.1/rc.2、0.1.2-alpha.1–alpha.5）与 Desktop 2.0.3。混合或未知的 DSH 版本会在启动时直接报错。
怎么卸载？
在解压后的 Release ZIP 目录运行 `powershell -NoProfile -ExecutionPolicy Bypass -File ".\uninstall-release.ps1"`（可加 `-Profile`），或 `dsh plugin --profile <profile> remove dsh-sandbox-escalation-fix`。重启 DSH，并确认 `--dump-config` 不再列出该 bundle。
07相关的 DSH 工作流
cc-safety-net
作者 kenryu42
面向 AI 编程智能体的执行前安全防护插件，在工具调用前拦截破坏性 Git、文件操作和敏感文件访问，兼容多种编码 Agent 与命令行工具。
tencentmeeting-cli
作者 tencentcloud
腾讯会议命令行工具（CLI），基于腾讯会议开放平台 OAuth2 授权，支持会议管理、录制管理、参会报告等功能。
dsh-auto-review
作者 perrylink
第二模型 AI 自动评审：只读评审子智能体对审批请求返回结构化允许或拒绝结论，默认关闭、全程可审计。
dsh-permission-rules
作者 perrylink
Claude Code 风格声明式权限规则：按序 allow/deny/ask 匹配工具、参数与工作区路径
08数据与来源
The plugin owns the `bash`, `pwsh`, `write`, and `edit` names inside each Agent Exact Scope. Another plugin may share
dsh plugin --profile <profile> add github:<owner>/dsh-sandbox-escalation-fix#<commit-sha>
页面基于项目公开文档、仓库元数据和 DSH Plugins 的结构化解析生成；最后核验于 2026-09-03。发现错误？提交更正。
最佳 DeepSeek Harness 插件
从全目录挑出的 12 个值得优先安装的插件，覆盖各个分类。