deepseekplugins

DeepSeek Harness plugin

dsh-sandbox-argument-normalizer

Normalize invalid non-widening sandbox escalation arguments before DSH tool dispatch.

Tools & Capabilities
Jump to install

Source facts

Repository
Hanihahaha/dsh-sandbox-argument-normalizer
Latest update
Aug 17, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/Hanihahaha/dsh-sandbox-argument-normalizer
Plugin: dsh-sandbox-argument-normalizer
Author: Hanihahaha

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only
README language

dsh-sandbox-argument-normalizer

中文

A DeepSeek Harness host plugin that removes invalid sandbox_permissions and justification arguments before native tool dispatch.

Install

# Run from the repository root.
dsh plugin --profile web add ".\dsh-sandbox-argument-normalizer"

Restart dsh web after installation.

Problem Solved

Some models or OpenAI-compatible gateways include every advertised optional argument in ordinary pwsh, write, or edit calls. When the injected sandbox_permissions equals the session's current mode, or is narrower, DSH correctly rejects the call before it runs with an error such as:

sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode

The same failure occurs in a danger-full-access session when the model still sends either advertised escalation mode. This is not a real sandbox denial; the session already has sufficient access, but the invalid escalation fields prevent the intended tool call from executing.

It only removes a request when it is not strictly wider than the calling session's effective sandbox mode. Valid escalation requests remain unchanged and continue through DSH's normal approval flow.

Examples:

  • workspace-write session + sandbox_permissions: workspace-write: removed.
  • danger-full-access session + either advertised mode: removed.
  • read-only session + sandbox_permissions: workspace-write: preserved for

the regular approval flow.

The plugin hooks the tools/execute waterfall. It does not auto-approve requests and does not alter session permission state.

Back to searchOpen GitHub repository

More related plugins

View category