@deepseek-ai/dsh-sandbox-microsandbox
故障关闭式 microsandbox microVM 提供程序和面向模型的来宾工具
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:omdsh-dev/sandbox-micro#ebc8be539a4ed4e66157d1f8255c58a4db4e4dc4Sandbox Microsandbox 以 @deepseek-ai/dsh-sandbox-microsandbox 发布，当前版本为 0.0.2。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
@deepseek-ai/dsh-sandbox-microsandboxEnglish | 中文
A DSH profile bundle for the fail-closed microsandbox microVM capability. The root package contains the ctx.microsandbox provider and exports the model-facing tools as @deepseek-ai/dsh-sandbox-microsandbox/tool.
package.json # provider/tool package and dsh.bundle manifest
cordis.patch.yml # dormant provider and tool rows
src/ # provider, runtime, resolver, and tool subpath
lib/ # generated install artifacts
legacy/ # source-compatible host integration patch for older DSH snapshots
docs/ # detailed provider/tool references
tests/provider/ # provider, resolver, SDK, and host tests
tests/tool/ # model-tool and renderer tests
The single root artifact keeps Git/profile installation self-contained while preserving two Cordis entry points:
- id: microsandbox
name: '@deepseek-ai/dsh-sandbox-microsandbox'
- id: tool-microsandbox
name: '@deepseek-ai/dsh-sandbox-microsandbox/tool'
Both rows are disabled by the bundle. To enable the capability, a profile must explicitly enable the provider with config.enabled: true and enable the tool row separately. This prevents installation from starting a microVM capability or exposing model-facing tools implicitly.
ctx.microsandbox is an environment-coherent microVM service, not a dsh-sandbox same-world provider. It uses the pinned microsandbox@0.6.7 SDK, package-owned msb resolution, bounded functional qualification, and fail-closed platform checks. It never degrades to unconfined host execution.
The tool entry exposes:
microsandbox_exec exact argv execution with captured output
microsandbox_fs guest file read, write, and directory listing
The old host integration patch remains under legacy/ for DSH snapshots that do not yet provide the provider/tool catalog and composition seams. A new bundle layer does not modify DSH host source.
A full typecheck expects sibling checkouts:
~/git/deepseek-harness
~/git/sandbox-micro
pnpm install
pnpm run typecheck
pnpm test
pnpm run build
The prepare script builds provider, invariant, and tool entries directly from src/, so a Git install does not require sibling project references. pnpm 10 may require the profile to allow the package's prepare script; only approve a pinned, trusted checkout.
The provider adds no prompt text. The tool subpath adds microsandbox_exec and microsandbox_fs to the authoritative tools service; their output preserves guest exit codes, captured streams, runner failures, timeout/abort classification, and guest file content.
/dev/kvm; unsupported or unqualified hosts remain unavailable.0.6.7 and require their corresponding registry packages.