mirror of https://github.com/deepseek-ai/deepseek-harness synced 2026-08-15 21:04:50 +00:00

Files

kingwl 99650a201b feat(mode): the access cap — plan mode composes with the sandbox instead of banning bash

A ModeDefinition may declare access: the widest sandbox access shell
commands run under while the mode holds, on the SANDBOX_MODES ladder.
The bash seam gains the resolution point to hang it on: BashExecutor.
resolveMode(session) folds override ?? default and dispatches the new
bash/resolve-mode waterfall; dsh-tool-bash consults it at both the
stamping site and the escalation baseline; dsh-mode's clamp listener
takes the ladder minimum per call. Two independent log folds compose at
read time — the mode never writes the sandbox knob, so the two switch
in any order and the knob re-emerges intact on exit.

The built-in plan definition ships access: read-only with the bash trio
allowlisted CONDITIONALLY: both policy layers admit bash/bash_output/
bash_kill only while a confining executor is mounted (an unconfinable
shell cannot honor the cap), and a bash call carrying sandbox_permissions
under a cap is denied at the gate — no widening mid-mode; the widened
step belongs in the plan.

examples/plan-acp-agent swaps bash-local for sandbox-local +
bash-sandbox (workspace-write default, clamped read-only inside plan)
plus the approval seam; the re-recorded plan-mode arc runs a real cat
inside plan under the clamped sandbox, and modes-advertise now pins the
sandbox-mode and approval config options. RFC amended to the landed
shape (access cap section, orthogonality FAQ, deferred item resolved
into effects self-declaration).

2026-07-12 22:51:09 +08:00

3.0 KiB

Raw Blame History

Plan-Mode ACP Agent App Composition

The plan-mode demo composes session modes onto the ACP server: the editor mode picker drives plan mode, and the model exits through the user-reviewed exit_plan_mode tool.

flowchart LR
  cfg["examples/plan-acp-agent<br/>cordis.yml"]
  plugin_plan-acp_llm_deepseek["llm-deepseek<br/>@deepseek-ai/dsh-llm-deepseek"]
  cfg --> plugin_plan-acp_llm_deepseek
  plugin_plan-acp_acp_agent["acp-agent<br/>@deepseek-ai/dsh-acp-agent"]
  cfg --> plugin_plan-acp_acp_agent
  plugin_plan-acp_acp_agent --> bundle_agent_core["@deepseek-ai/dsh-agent-core"]
  plugin_plan-acp_acp_agent --> bundle_jsonl["@deepseek-ai/dsh-session-persistence-jsonl"]
  plugin_plan-acp_acp_agent --> frontdoor_acp["@deepseek-ai/dsh-acp<br/>JSON-RPC stdio bridge<br/>sessions created by client"]
  bundle_agent_core --> spine_llm["ctx.llm"]
  bundle_agent_core --> spine_sessions["ctx.sessions"]
  bundle_agent_core --> spine_tools["ctx.tools + tool-bash"]
  bundle_agent_core --> spine_loop["ctx.agents + ctx.agentLoop"]
  plugin_plan-acp_mode["mode<br/>@deepseek-ai/dsh-mode"]
  cfg --> plugin_plan-acp_mode
  plugin_plan-acp_sandbox["sandbox<br/>@deepseek-ai/dsh-sandbox-local"]
  cfg --> plugin_plan-acp_sandbox
  plugin_plan-acp_bash["bash<br/>@deepseek-ai/dsh-bash-sandbox"]
  cfg --> plugin_plan-acp_bash
  plugin_plan-acp_tool_bash["tool-bash<br/>@deepseek-ai/dsh-tool-bash"]
  cfg --> plugin_plan-acp_tool_bash
  plugin_plan-acp_approval["approval<br/>@deepseek-ai/dsh-user-approval"]
  cfg --> plugin_plan-acp_approval
  plugin_plan-acp_tool_ask_user["tool-ask-user<br/>@deepseek-ai/dsh-tool-ask-user"]
  cfg --> plugin_plan-acp_tool_ask_user
  plugin_plan-acp_fs_local["fs-local<br/>@deepseek-ai/dsh-fs-local"]
  cfg --> plugin_plan-acp_fs_local
  plugin_plan-acp_fs_policy["fs-policy<br/>@deepseek-ai/dsh-fs-policy"]
  cfg --> plugin_plan-acp_fs_policy
  plugin_plan-acp_tool_fs["tool-fs<br/>@deepseek-ai/dsh-tool-fs"]
  cfg --> plugin_plan-acp_tool_fs
  plugin_plan-acp_tool_todo["tool-todo<br/>@deepseek-ai/dsh-tool-todo"]
  cfg --> plugin_plan-acp_tool_todo

Plugin id	Package / module
`llm-deepseek`	`@deepseek-ai/dsh-llm-deepseek`
`acp-agent`	`@deepseek-ai/dsh-acp-agent`
`mode`	`@deepseek-ai/dsh-mode`
`sandbox`	`@deepseek-ai/dsh-sandbox-local`
`bash`	`@deepseek-ai/dsh-bash-sandbox`
`tool-bash`	`@deepseek-ai/dsh-tool-bash`
`approval`	`@deepseek-ai/dsh-user-approval`
`tool-ask-user`	`@deepseek-ai/dsh-tool-ask-user`
`fs-local`	`@deepseek-ai/dsh-fs-local`
`fs-policy`	`@deepseek-ai/dsh-fs-policy`
`tool-fs`	`@deepseek-ai/dsh-tool-fs`
`tool-todo`	`@deepseek-ai/dsh-tool-todo`

Source config: examples/plan-acp-agent/cordis.yml.

Maintenance mode: hybrid: the leaf plugin list is parsed from its cordis.yml; app package expansion is curated from package source.

3.0 KiB Raw Blame History

Plan-Mode ACP Agent App Composition

3.0 KiB

Raw Blame History