플러그인

Swaps the filesystem and bash providers for a mirage virtual workspace: file tools and shell commands run over mounted resources (RAM, S3, Redis, Slack, Gmail, Notion, Postgres) instead of the host disk, with per-mount read/write/exec modes, per-command sandbox routing (monty, pyodide, quickjs in process; docker, e2b, daytona remote), and installed CLIs (git, gh, slack, linear, ntn, gws, or one you register) as head words in the virtual terminal.

모든 모델에서 사용 가능한 오픈소스 CMA 호환 에이전트 런타임으로, MCP 도구, 샌드박스 세션, 감사, 리플레이, 로컬 콘솔을 제공합니다. stdio MCP 기반의 네이티브 DeepSeek Harness 번들을 포함합니다.

대화 내 생성형 UI: 모델이 채팅 스트림에 인터랙티브 HTML 카드를 렌더링하며, 스트리밍 미리보기와 샌드박스 렌더링을 지원합니다.

Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.

Monaco 에디터와 모델 주도 도구 생명 주기로 샌드박스 JavaScript 도구를 생성·관리합니다.

Rule-gated automatic approval for DeepSeek Harness sandbox escalations with an optional LLM reviewer and native human fallback.

Makes Minimal mode work on Windows by supplying the missing win32 process inspector, so the persistent shell actually starts. Adds a busybox-based preset whose persistent shell survives the workspace-write restricted token (MSYS shells die there), ConPTY console-list foreground resolution, GBK/UTF-16 file reads, and an install-trap doctor.

DSH web UI용 로그인 게이트웨이입니다: 최초 실행 시 설정하는 비밀번호 관문, bcrypt + 저장 데이터 암호화(AES-256-GCM/HMAC), 무차별 대입 공격 차단, 감사 로그, 80→443 리디렉션을 포함한 TLS 1.2+, CSRF 방지, 프레이밍 방지를 제공합니다.

MCP bridge that lets ChatGPT Web create, view, continue, and supervise DeepSeek Harness agent sessions and goals while preserving DSH's native approval, sandbox, and workspace security model.

Session-aware sandbox escalation compatibility plugin for DeepSeek Harness/DSH第三方模型会话沙箱升级兼容插件

DeepSeek Harness 샌드박스 에스컬레이션을 위한 보수적인 자동 승인 프리셋

tensorlake sandbox용 deepseek harness 플러그인입니다.

Fine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions, quick-tool defaults, custom rules, a bilingual approval modal with inline diff details, custom rejection reasons and a sandbox-upgrade flow.

LLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.

Git Bash shell tool for Windows: runs commands through the bash bundled with Git for Windows, with timeout, sandbox, output truncation, and background jobs, replacing the slow pwsh tool and the WSL-only bash tool.

nono 샌드박스 백엔드를 지원합니다.

microsandbox 백엔드를 지원합니다.

Lets sandboxed agents reach the web through your local proxy: net_fetch fetches pages, net_proxy_status reports proxy status.

Microsoft 크로스 플랫폼 샌드박스 지원

Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting

Alternative WorkflowEngine provider for DSH 0.1.0-rc.7 that runs model-written orchestration in fresh QuickJS/WASM runtimes with a JSON-only host bridge and bounded memory, execution time, and child-agent fan-out.

Chinese localization for tool results: intercepts tool execution output and translates English markers (`[exit code]`, `[timed out]`, `[sandbox: ...]`, etc.) into Chinese, with a settings toggle.

Press Enter to approve the sandbox permission-escalation prompt in the DeepSeek Harness WebUI - no mouse click required.按 Enter 即可批准 DeepSeek Harness WebUI 中的沙箱权限提升审批窗口，无需鼠标点击。

NeevSandbox execution providers for DeepSeek Harness