DSH 插件市场DSH Plugin Hub

blaxel-ai/deepseek-harness-blaxel-sandbox

插件Plugin 原生Native ⭐ 2 MIT cat_label.blaxelcat_label.blaxelcat_label.deepseek-harnesscat_label.deepseek-harnesscat_label.remote-executioncat_label.remote-executioncat_label.sandboxcat_label.sandbox

@blaxel/dsh-sandbox is a first-class Blaxel sandbox execution plugin for DeepSeek Harness (DSH). It moves filesystem, Bash, terminal, and LSP operations into one short-lived Blaxel microVM while the DSH interface, model requests, session state, and Blaxel credentials remain on the host.

catalog 简介 / catalog descriptioncatalog description：Blaxel sandbox execution plugin for DeepSeek Harness

项目介绍Project Overview

由知微Agent(zhiwei)编辑Edited by Zhiwei Agent (zhiwei)

这是 DSH 的 Blaxel 沙箱插件，把文件系统、Bash、终端和 LSP 操作移入短时 Blaxel microVM，界面、模型请求、会话状态和凭据留在主机。需要在 Git 工作树中隔离远程执行、快照仓库并统一远程文件与进程环境时使用。注意：包尚未发布，仍是原型；沙箱失败无本地回退。

This DSH plugin moves filesystem, Bash, terminal, and LSP operations into a short-lived Blaxel microVM, while the DSH interface, model requests, session state, and Blaxel credentials stay on the host. Use it to run a Git worktree in an isolated remote environment with shared files and processes. Caveat: the package is unpublished prototype software, and sandbox setup or transport failures have no local fallback.

在 GitHub 查看View on GitHub

强烈推荐Recommended 发给你的 DSH 安装Send to your DSH 
请帮我了解并安装插件：【deepseek-harness-blaxel-sandbox】【https://github.com/blaxel-ai/deepseek-harness-blaxel-sandbox】

把上面这条消息直接发给当前会话里的 DSH，让它帮你了解并安装。安装命令不一定准确，发给 DSH 更稳。Send this message to DSH in your current session. CLI install commands may not be accurate across systems — DSH will figure it out for you.

或使用命令行安装（适合开发者）Or use CLI install (for developers)

命令行安装CLI Install 

dsh plugin --profile web add github:blaxel-ai/deepseek-harness-blaxel-sandbox

把 blaxel-ai/deepseek-harness-blaxel-sandbox 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

3.7 KB · 缓存于 2026-08-27 05:41:45 · 3.7 KB

Blaxel Sandbox for DeepSeek Harness

@blaxel/dsh-sandbox is a first-class Blaxel sandbox execution plugin for DeepSeek Harness (DSH). It moves filesystem, Bash, terminal, and LSP operations into one short-lived Blaxel microVM while the DSH interface, model requests, session state, and Blaxel credentials remain on the host.

This package is under development and has not been published. The current implementation is a prototype being raised to the DeepSeek Harness capability contracts.

How it composes

The package is one installable DSH bundle with three internal providers:

  • @blaxel/dsh-sandbox/runtime owns sandbox creation, readiness, private adapter state, and deletion.
  • @blaxel/dsh-sandbox/filesystem provides remote ctx.fs.
  • @blaxel/dsh-sandbox/subprocess provides remote ctx.subprocess, including PTY sessions.

Local execution remains unchanged after installation. In Web, Open in Blaxel appears beside the session chat input when the session directory is inside a Git worktree. It snapshots tracked files plus unignored untracked files, omits common credential files, restores the repository under /workspace, and opens a separate DSH window where all execution capabilities share the same remote filesystem and process world.

Development installation

The package is not published yet. Build the source checkout and link it into a DSH Web profile:

git clone https://github.com/blaxel-ai/deepseek-harness-blaxel-sandbox.git
cd deepseek-harness-blaxel-sandbox
pnpm install
pnpm build
dsh plugin --profile web link "$PWD"

Launch Web normally, open a session rooted anywhere inside a Git repository, then use Open in Blaxel beside the chat input:

dsh web

The original local session stays open. The Blaxel window uses isolated session storage and maps the selected directory to the equivalent path under /workspace. Directories outside a Git worktree are rejected. TUI and headless launch controls remain planned work.

Authentication

Authenticate on the host with the Blaxel CLI:

bl login YOUR-WORKSPACE

CI may provide BL_WORKSPACE and BL_API_KEY. The plugin does not copy Blaxel credentials, DSH_* variables, or credential-shaped host environment variables into sandbox processes.

Configuration

The initial bundle supports host environment overrides:

Variable Default Purpose
DSH_BLAXEL_CWD /workspace Remote working directory
DSH_BLAXEL_WORKSPACE_ROOT /workspace Restored Git worktree root
DSH_BLAXEL_IMAGE blaxel/node:latest Sandbox image
DSH_BLAXEL_MEMORY 4096 Sandbox memory in MB

The Blaxel settings page reports the active sandbox and provides reopen and stop controls.

Development

Requirements: Node.js 22.19+ or 24+, pnpm 10, and no Blaxel credentials for keyless checks.

pnpm install
pnpm check
pnpm pack

The live test is opt-in and creates a real Blaxel sandbox:

DSH_BLAXEL_LIVE=1 pnpm vitest run tests/live.test.ts

Do not run the live test without authorization to use the target Blaxel workspace.

Security and lifecycle

  • Blaxel authentication remains host-side.
  • DSH receives danger-full-access only inside the disposable remote microVM boundary.
  • Host filesystem, subprocess, and host sandbox wrappers are disabled only in the separate Blaxel process.
  • Git-ignored files and common credential files such as .env, .npmrc, private keys, and credential JSON files are omitted from workspace snapshots.
  • The runtime deletes its owned sandbox during DSH teardown and surfaces cleanup failures.
  • No local fallback occurs when sandbox setup or transport fails.

See PLAN.md for the implementation and verification gates.

渲染基于仓库 blaxel-ai/deepseek-harness-blaxel-sandbox 的 README.md。 在 GitHub 查看原文 →

相关推荐Related

← 上一个 Prev dsh-client-ui-m3-theme 下一个 Next dsh-provider-probe →