dsh-sandbox-escalation-fix

dsh-sandbox-escalation-fix is a zero-configuration compatibility plugin for DeepSeek Harness sessions where unavailable sandbox escalation fields are still exposed to the model. In All Access sessions or when the approval policy is set to never, models may continue to see and send parameters such as sandbox_permissions and justification, causing tools like bash, pwsh, write, and edit to fail before execution and potentially enter repeated retry loops.

Instead of merely cleaning up failed calls, the plugin projects session-accurate tool schemas based on the live Sandbox Mode and Approval Policy, hiding escalation options that cannot succeed. It also applies a narrow execution-time fallback for redundant same-mode requests and removes contradictory escalation hints from descriptions and results. Genuine escalation attempts, downgrade requests, invalid requests, and missing justifications are still handed to DSH validation, so the plugin does not bypass security checks, auto-approve requests, or grant extra permissions.

It is best suited for users on affected DSH releases who see third-party models failing with incorrect escalation parameters, blank justifications, or retry loops, and who want a fix without changing model settings, sandbox modes, or approval policies. Because newer DSH releases partially address the issue, it is especially appropriate after reproducing the same failure behavior in the built-in system.