dsh-sandbox-escalation-fix: A Session-Aware Sandbox Escalation Compatibility Plugin for DeepSeek Harness

What Does It Do?

dsh-sandbox-escalation-fix is a DSH plugin for DeepSeek Harness that resolves sandbox escalation compatibility issues for third-party models like GPT when calling tools such as bash, pwsh, write, and edit under All Access mode. It fixes repeated retries caused by incorrect sandbox escalation parameter prompts by projecting session-aware escalation schemas. This zero-configuration plugin is community-maintained, MIT-licensed, and supports DSH 0.1.2-alpha.1 and Desktop 2.0.3.

Core Features

• Session-aware sandbox escalation: dynamically adjusts tool registration fields based on the current session mode, avoiding conflicts from global registration.
• Multi-version compatibility: supports DSH 0.1.1-rc.1, rc.2, 0.1.2-alpha.1, and Desktop 2.0.3 with version-specific adaptations.
• Strict runtime tool-contract validation: when host package manifests are unreadable, uses built-in strict validation to ensure tool definitions are compatible, failing closed on mismatch.
• Linked and external plugin layouts: works with link, symlink, or external plugin directories by reading the full DSH manifest set from the host working directory.
• Zero configuration: no extra setup needed; automatically fixes tool-call failures for third-party models.

How to Use This Plugin?

After enabling this plugin in DSH, no additional configuration is required. When third-party models (e.g., GPT) encounter repeated retries or errors while calling tools like bash, pwsh, write, and edit under All Access mode, the plugin automatically corrects the sandbox escalation parameters. It is recommended to first observe DSH's built-in behavior and install this plugin only after reproducing the same-mode escalation, blank justification, or retry-loop failures. If using linked or external plugin layouts, ensure the plugin is placed outside the host dependency tree and can read the complete manifest from the host working directory.