dsh-openkapsel: A Bridge That Brings a Remote OpenKapsel Workspace into DeepSeek Harness
zzzmmmnn/dsh-openkapsel
A remote-only OpenKapsel workspace bridge for the DeepSeek Harness: given a workspace URL and control token, it exposes remote file read/write and Shell execution as model-visible tools instead of host filesystem and Shell access.
dsh-openkapsel is a remote workspace bridge for DeepSeek Harness that lets a model operate a remote OpenKapsel workspace without touching the host filesystem or a host Shell. It wraps remote file reads and writes, Shell tasks, and other REST surfaces into model-visible tools, while a fail-closed remote-only preset keeps the boundary intact. Credentials, authentication, and renewal stay in the maintained skill code, making it a fit for developers who want a self-hosted agent sandbox without opening up the host.
How to Install
dsh plugin --profile web add github:zzzmmmnn/dsh-openkapsel- Category
- Tools & Capabilities
- Platform
- DSH Plugin
- Author
- zzzmmmnn
- Distribution
- Plugin
dsh-openkapsel Key Features
dsh-openkapsel Repo Summary
What Does It Do?
zzzmmmnn/dsh-openkapsel is a DSH plugin for DeepSeek Harness that bridges a remote OpenKapsel workspace into model-visible tools. It solves the problem of giving an agent file and Shell capabilities without exposing the host filesystem or a host Shell. Maintained by zzzmmmnn under the MIT license, it is a community plugin rather than an official DeepSeek product, and serves as a self-hosted alternative to cloud agent sandboxes.
Core Features
- Remote workspace access: supply the read-only workspace URL ending in
/w/plus its matching control token to expose the remote OpenKapsel workspace as tools. - File and Shell operations: list, read, and write remote files, run Shell tasks, and call the other OpenKapsel REST surfaces.
- Fail-closed permission model: the bundled remote-only preset gives the model no host filesystem or host Shell tool, and
run_codeis denied as well. - Fixed-script transport: each
kapsel_*tool invokes one of two fixed Python helpers through the harness host Shell service, so the model cannot choose the script or use that service as a general Shell. - Managed credentials and policy: authentication, Context attribution, REST error decoding, and credential renewal stay in the maintained skill code, with credentials stored under the DSH state directory using 0600 files and 0700 directories on Unix.
- Policy awareness:
read-onlydenies remote mutations and Shell, whileworkspace-writeanddanger-full-accessremain bounded by the remote token's grants.
How to Use This Plugin?
Enable it under the DSH web profile with the OpenKapsel Remote preset loaded, then provide the remote workspace URL and control token. From there you can have the agent list, read, or write remote files, run Shell tasks, or call other OpenKapsel REST endpoints; to tighten access, switch the DSH policy, since read-only rejects mutations and Shell, with a one-call approval available for a retry. Before use, make sure Python 3.10+ is on the host PATH (python on Windows, python3 on macOS/Linux) and that the target OpenKapsel server is reachable.
How to Troubleshoot This Plugin?
The plugin has explicit host requirements, so if a tool call fails, first confirm the platform-appropriate Python interpreter is on the host PATH and is version 3.10 or newer. If a remote operation is rejected, check whether the current DSH policy is read-only, which denies remote mutations and Shell; a one-call approval can authorize a retry. If credentials expire, the plugin renews them automatically and may replace stored credentials, so verify per the official instructions that the workspace URL and control token are still valid.
This page is an independent rewrite of the plugin's official README — for authoritative documentation and the latest changes, refer to the source: zzzmmmnn/dsh-openkapsel. The plugin is third-party code that runs on your machine once installed; inclusion does not imply endorsement — please review the source before installing.
DSH Plugin FAQ
