microsandbox支持
Pending human review — the facts below come from the source repository.
microsandbox支持
Users who want this capability in DSH; check the source and docs before installing.
dsh plugin --profile web add github:omdsh-dev/sandbox-micro No supported platforms were declared.
@deepseek-ai/dsh-sandbox-microsandbox English | 中文 A DSH profile bundle for the fail-closed microsandbox microVM capability. The root package contains the ctx.microsandbox provider and exports the model-facing tools as @deepseek-ai/dsh-sandbox-microsandbox/tool. ## Repository shape text package.json # provider/tool package and dsh.bundle manifest cordis.patch.yml # dormant provider and tool rows src/ # provider, runtime, resolver, and tool subpath lib/ # generated install artifacts legacy/ # source-compatible host integration patch for older DSH snapshots docs/ # detailed provider/tool references tests/provider/ # provider, resolver, SDK, and host tests tests/tool/ # model-tool and renderer tests The single root artifact keeps Git/profile installation self-contained while preserving two Cordis entry points: yaml - id: microsandbox name: '@deepseek-ai/dsh-sandbox-microsandbox' - id: tool-microsandbox name: '@deepseek-ai/dsh-sandbox-microsandbox/tool' Both rows are disabled by the bundle. To enable the capability, a profile must explicitly enable the provider with config.enabled: true and enable the tool row separately. This prevents installation from starting a microVM capability or exposing model-facing tools implicitly. ## Capability boundary ctx.microsandbox is an environment-coherent microVM service, not a dsh-sandbox same-world provider. It uses the pinned microsandbox@0.6.7 SDK, package-owned msb resolution, bounded functional qualification, and fail-closed platform checks. It never degrades to unconfined host execution. The tool entry exposes: text microsandbox_exec exact argv execution with captured output microsandbox_fs guest file read, write, and directory listing The old host integration patch remains under legacy/ for DSH snapshots that do not yet provide the provider/tool catalog and composition seams. A new bundle layer does not modify DSH host source. ## Development A full typecheck expects sibling checkouts: text ~/git/deepseek-harness ~/git/sandbox-micro sh pnpm install pnpm run typecheck pnpm test pnpm run build The prepare script builds provider, invariant, and tool entries directly from src/, so a Git install does not require sibling project references. pnpm 10 may require the profile to allow the package's prepare script; only approve a pinned, trusted checkout. ## Model Experience The provider adds no prompt text. The tool subpath adds microsandbox_exec and microsandbox_fs to the authoritative tools service; their output preserves guest exit codes, captured streams, runner failures, timeout/abort classification, and guest file content. ## Known Limitations and Deferred Work - Linux requires /dev/kvm; unsupported or unqualified hosts remain unavailable. - macOS Apple Silicon real-host acceptance is not included in the first release posture. - Secrets, network policy, snapshots, and image/volume lifecycle tools remain provider-only or fail closed. - The external SDK and platform binaries are pinned to 0.6.7 and require their corresponding registry packages.Not by stars — picked by hand, one at a time.
A visual settings dashboard for DeepSeek Harness: every registered settings namespace — including third-party plugin ones the official UI never covers — rendered as editable, schema-driven forms. Early, but the right direction: stop hand-editing YAML.
A DIY trajectory visualizer for DeepSeek Harness: watch the agent’s plan and execution unfold as a graph instead of scrolling raw logs. Early, but it fills a real gap — understanding at a glance what the agent is doing.
Dispatch DSH work from Claude Code / Codex: spin up in-host DSH agent sessions with per-tier presets, watch native subagent progress, and borrow a multimodal bridge that lends the text-only harness vision and image generation. An orchestration plugin that turns DSH into a backend for other coding agents.