npm / sandboxOfficial
DSH Bash Sandbox
by DeepSeek
Sandbox-consuming implementation of the DeepSeek Harness bash executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)
DSH Sandbox Local
Local process-sandbox backends for the DeepSeek Harness sandbox seam: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed
OfficialBuilt-in
v0.1.0-rc.6Version
npmnpm package
MITLicense
TypeScriptLanguage
Aug 13, 2026Updated
01
Installation
npx @deepseek-ai/dsh@latest web02
About this plugin
Local process-sandbox backends for the DeepSeek Harness sandbox seam: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed. In DSH 0.1.0-rc.6's default Web composition, this package provides the configuration entries “sandbox”.
03
What it provides
- 01Local process-sandbox backends for the DeepSeek Harness sandbox seam: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed
- 02Included in the default DSH Web composition
- 03Published as a versioned npm package with public source
Important notes
- Bundled with the current DSH release at version 0.1.0-rc.6; no separate install is required.
- Use the official DSH profile to load this built-in component; installing the npm package alone does not compose a profile.
04
README preview
README.md
DSH Sandbox Local
Local process-sandbox backends for the DeepSeek Harness sandbox seam: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed
Read the full README at the source