runseal-labs/dsh-tool-runseal ↗★ 0
dsh-tool-runseal
RunSeal sandbox provider plugin for DeepSeek Harness (dsh) — OS-native policy enforcement for bash and subprocess execution via runseal rpc
AI Analysis
核心用途是通过 RunSeal RPC 对智能体执行的 Bash 命令行和子进程实施系统级安全策略（如只读、工作区限制）。适合对代码执行安全性有严格要求的安全敏感型任务。
Install
This plugin has no verified bundle, or compatibility checks failed. Read the repository notes first. Read the full README ↗
README
Read the full README ↗Configuration
| Field | Default | Meaning |
|---|---|---|
command | — (required) | The runseal executable: absolute path or PATH-resolved name. |
args | [] | Extra arguments before the rpc subcommand (no shell). |
networkMode | unmanaged | Network policy: unmanaged, disabled, or proxy. |
maxStdinBytes | 65536 | Maximum stdin bytes for the bytes mode (runseal cap). |
timeoutMs | 600000 | Default per-execution timeout in ms. |
autoSetup | true | On Windows, automatically run runseal setup windows-sandbox --elevate for the workspace when a confined execution fails because setup is missing, then retry once. The elevation prompts the user through UAC once. |