runseal-labs/dsh-tool-runseal ↗★ 0
dsh-tool-runseal
RunSeal sandbox provider plugin for DeepSeek Harness (dsh) — OS-native policy enforcement for bash and subprocess execution via runseal rpc
AI 분석
核心用途是通过 RunSeal RPC 对智能体执行的 Bash 命令行和子进程实施系统级安全策略(如只读、工作区限制)。适合对代码执行安全性有严格要求的安全敏感型任务。
설치
검증된 bundle이 없거나 호환성 검사에 실패했습니다. 먼저 저장소 설명을 읽어 주세요. 전체 README 읽기 ↗
Configuration
| Field | Default | Meaning |
|---|---|---|
command | — (required) | The runseal executable: absolute path or PATH-resolved name. |
args | [] | Extra arguments before the rpc subcommand (no shell). |
networkMode | unmanaged | Network policy: unmanaged, disabled, or proxy. |
maxStdinBytes | 65536 | Maximum stdin bytes for the bytes mode (runseal cap). |
timeoutMs | 600000 | Default per-execution timeout in ms. |
autoSetup | true | On Windows, automatically run runseal setup windows-sandbox --elevate for the workspace when a confined execution fails because setup is missing, then retry once. The elevation prompts the user through UAC once. |