Sandbox & Runtime
Runtime, sandboxing, execution, and environment helpers.
Unofficial DeepSeek Harness plugin for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk checks and literal command-prefix rules, optionally uses a tool-free LLM reviewer, grants only one allowed-once per decision, and returns uncertain requests to native human approval.
Server-side deployment for DeepSeek Harness: a zero-dependency Node gateway adds a multi-user login portal, per-user independent DSH instances with OS-level isolation, per-user API keys, and a delivery file drawer. File access runs through sudo helper scripts using runuser to drop privileges to dsh-<name> (fixes issue #1 TOCTOU). Not a local/desktop tool.
DSHBox is an Android application that lets users run the complete DeepSeek Harness locally on Android 10+ ARM64 devices by bundling Debian, Node.js, DSH, PRoot, and an embedded WebView into one APK without root or Termux.
QAQ is a launch resilience guard for DeepSeek Harness (DSH) by WTStarMark. It supervises the `dsh web` process, reads the browser's real DOM through headless Chrome + CDP, detects host crashes, Web UI red screens and plugin degradation, then restores the configuration snapshot from the last successful boot and restarts, preserving the broken config for manual recovery. It is described as non-invasive, shipped as a one-command script with structured logs, and includes a plugin hot-update guard (c
Docker packaging of the npm-released DeepSeek Harness (DSH), published for linux/amd64 and linux/arm64. It preinstalls DSH and its runtime dependencies so the host needs no Node.js or npm packages, supports LAN WebUI access, offers an optional shared admin key, runs as a non-root user with recommended read-only root filesystem and dropped Linux capabilities, and keeps configuration and workspace data persistent. The README warns against exposing the service directly to the public internet.
Run OmicVerse/OmicOS bioinformatics analyses from DeepSeek Harness via a persistent Python kernel, with capability catalog search and account tab.
A zero-dependency DeepSeek Harness plugin that acquires an exclusive lock on the DSH_HOME data directory at startup, aborting loudly if another live dsh server is already using it, to prevent session-log corruption from concurrent writers.
Linux backend for dsh-witness/dsh-anchor: sandbox recipes (chattr + bubblewrap) and process identity tools. Every capability claim is backed by experiment numbers and control groups.
RunSeal sandbox provider for DeepSeek Harness, replacing the built-in sandbox with OS-native policy-enforced command execution on Windows/macOS/Linux.