dsh-capsule
A Linux-only DeepSeek Harness isolation host for running compatible third-party capsule guests in fresh Bubblewrap processes.
Install
$ dsh plugin --profile <profile> add github:2-c-q/dsh-capsulePlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Installs into a DSH profile as the dsh-capsule host bundle.
- Runs compatible capsule guests in fresh Linux Bubblewrap processes.
- Verifies a SHA-256-pinned standalone guest artifact before activation.
- Registers policy-admitted DSH tools and static system-prompt sections on a guest's behalf.
- Supports exact, read-only workspace-file access through matching manifest requests and deployment grants.
- Provides a guest SDK entry point at dsh-capsule/guest.
Useful For
- Confining compatible third-party DSH capsule guests with explicitly declared tool, prompt, and file-read permissions.
- Publishing a standalone bundled guest artifact that contributes DSH tools and static prompt guidance.
- Allowing a capsule to read a specific pre-existing workspace file without granting directory or write access.
Who It Fits
- DeepSeek Harness profile administrators.
- Developers building dsh-capsule guest artifacts.
- Teams evaluating constrained execution for compatible third-party DSH extensions on Linux.
Documented Limitations
- v0.1 is Linux-only and requires Bubblewrap with --ro-bind-fd support.
- Activation fails rather than downgrades when required attestation, policy, artifact, or isolation controls cannot be established.
- Guests must be bundled as one standalone ESM artifact; the runtime provides no node_modules.
- Only exact workspace-read access to existing regular files is supported.
- workspace-write, network-connect, subprocess-exec, storage, directory mounts, and raw write mounts are unsupported in v0.1.
- Capsule guests use a distinct API and are not transparent replacements for arbitrary Cordis plugins.
- Guest process state is ephemeral because describe and each tool invocation use fresh processes.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 10 development, 4 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- 2-c-q/dsh-capsule
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- c6e5138 · 2026-09-15
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-15
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Sandbox-first automatic permission policy and intelligent risk classification for DeepSeek Harness.
View plugin →A DeepSeek Harness Cordis skill plugin that packages 85 reverse engineering, authorized pentesting, security research, and CTF SKILL.md resources.
View plugin →Local, fast cross-agent memory and session indexing system with DeepSeek Harness integration.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed safety and session audit.
View plugin →