runseal-labs/dsh-tool-runseal ↗★ 0
dsh-tool-runseal
RunSeal sandbox provider plugin for DeepSeek Harness (dsh) — OS-native policy enforcement for bash and subprocess execution via runseal rpc 核心用途是通过 RunSeal RPC 对智能体执行的 Bash 命令行和子进程实施系统级安全策略（如只读、工作区限制）。适合对代码执行安全性有严格要求的安全敏感型任务。
インストール
検証済み bundle がないか、互換性チェックに失敗しています。先にリポジトリの説明を読んでください。 README 全文を読む ↗
ドキュメント
README 全文を読む ↗Configuration
| Field | Default | Meaning |
|---|---|---|
command | — (required) | The runseal executable: absolute path or PATH-resolved name. |
args | [] | Extra arguments before the rpc subcommand (no shell). |
networkMode | unmanaged | Network policy: unmanaged, disabled, or proxy. |
maxStdinBytes | 65536 | Maximum stdin bytes for the bytes mode (runseal cap). |
timeoutMs | 600000 | Default per-execution timeout in ms. |
autoSetup | true | On Windows, automatically run runseal setup windows-sandbox --elevate for the workspace when a confined execution fails because setup is missing, then retry once. The elevation prompts the user through UAC once. |