iimaguest/dsh-sandbox-escalation-guard
dsh-sandbox-escalation-guard stops the sandbox-escalation fields being offered to a model when the calling session cannot grant them: it fixes the failure where GPT-family models fill in every optional property and are rejected on every call, because sandbox_permissions and justification are advertised from a load-time fact but judged against the per-session policy.
dsh-sandbox-escalation-guard stops the sandbox-escalation fields being offered to a model when the calling session cannot grant them. It fixes a GPT-specific failure: GPT-family models complete every optional property in a tool's schema, and the two optional properties on bash, write and edit (sandbox_permissions and justification) are exactly the two a full-access session can never use, so every call is rejected before it runs and the error text never names the repair (omit both fields), killing the turn. The root cause is that the fields are advertised from a load-time capability fact (ctx.shell.sandboxMode) but judged at execution against a per-session policy fact (ctx.sandboxPolicy.resolve().mode); a session at the danger-full-access ceiling is handed two unusable values while the system prompt still tells the model to use them. The fix is to stop publishing fields that cannot be filled, rather than to prompt the model differently.
Install
dsh plugin --profile web add github:iimaguest/dsh-sandbox-escalation-guardCopied verbatim from the README's install line; local-path and update/remove forms are also documented.
Compatibility
A DeepSeek Harness plugin that changes how the bash, write and edit tool schemas are published during a session; it stops the escalation fields being advertised when the calling session cannot grant them. It is not model-specific - the failure merely presents as GPT-specific because GPT-family models populate every optional schema property.
Details
- Repo: iimaguest/dsh-sandbox-escalation-guard
- Category: Infrastructure & Deployment
- Stars: 1
- Version: GitHub repo iimaguest/dsh-sandbox-escalation-guard (1★); installed from GitHub (no npm package documented). English README.
Alternatives
1m01m0/deepseek-harness-desktop · AIcivilization/dsh-vps-manager · AlliotTech/deepseek-harness-docker