nono沙盒支持
Pending human review — the facts below come from the source repository.
nono沙盒支持
Users who want this capability in DSH; check the source and docs before installing.
dsh plugin --profile web add github:omdsh-dev/sandbox-nono No supported platforms were declared.
@deepseek-ai/dsh-sandbox-nono English | 中文 The nono (Landlock/Seatbelt) backend as an installable DSH profile bundle. This standalone package contains the sandbox provider, its invariant companion, the bundle patch, and the vendored @dsh-external/nono-ts native executor carrier. ## Repository shape text package.json # standalone package and dsh.bundle manifest cordis.patch.yml # explicit sandbox-nono provider row docs/ # detailed bilingual Nono documentation src/ # provider and invariant companion tests/ # unit and real-wrapper integration tests vendor-nono-ts/ # pinned native binding and executor wrapper lib/ # generated install artifacts The bundle adds a distinct sandbox-nono row disabled by default. Enable it from a profile overlay when the deployment wants the Nono backend; the existing DSH sandbox row is not silently renamed or replaced. yaml - id: sandbox-nono name: '@deepseek-ai/dsh-sandbox-nono' disabled: false config: probeTimeoutMs: 5000 The provider fails closed with SANDBOX_UNAVAILABLE when the host has no vendored binding, the platform has no backend, or the functional channel probe does not prove enforcement. The SDK owns binding resolution, launch argv composition, wrapper failure classification, and channel qualification. Detailed behavior and limitations: docs/nono.md. ## Development A full typecheck expects the DSH checkout beside this repository: text ../../deepseek-harness sh pnpm install pnpm run typecheck pnpm test pnpm run build pnpm run test:e2e The prepare script builds directly from src/, so a package installation does not depend on the sibling checkout at runtime. The vendored carrier currently contains only the Linux x64 GNU binding; unsupported hosts intentionally fail closed. ## Model Experience Indirectly, through @deepseek-ai/dsh-bash-sandbox and @deepseek-ai/dsh-tool-bash, which render enforcement and denial facts. The @deepseek-ai/dsh-sandbox seam owns the SANDBOX_UNAVAILABLE text. ## Known Limitations and Deferred Work - Only the linux-x64-gnu native binding is committed; other platforms need a matching carrier under vendor-nono-ts/native/. - Windows has no Nono backend and fails closed. - The functional probe verdict is cached for the provider lifetime; repairing a binding requires reloading the plugin.Not by stars — picked by hand, one at a time.
A visual settings dashboard for DeepSeek Harness: every registered settings namespace — including third-party plugin ones the official UI never covers — rendered as editable, schema-driven forms. Early, but the right direction: stop hand-editing YAML.
A DIY trajectory visualizer for DeepSeek Harness: watch the agent’s plan and execution unfold as a graph instead of scrolling raw logs. Early, but it fills a real gap — understanding at a glance what the agent is doing.
Dispatch DSH work from Claude Code / Codex: spin up in-host DSH agent sessions with per-tier presets, watch native subagent progress, and borrow a multimodal bridge that lends the text-only harness vision and image generation. An orchestration plugin that turns DSH into a backend for other coding agents.