[Showcase / 展示] SandBase Harness — 在 DSH 中管理持久化 Agent 会话

[denial123789]

中文

SandBase Harness v0.3.2 现在可以通过 stdio MCP 作为真正的 DeepSeek Harness 插件运行。它为 DSH 会话提供 6 个原生工具，用于列出 Agent、创建和运行持久化会话、读取结果与产物，以及停止任务。

可复现的源码安装

npm 上未加 scope 的 managed-agents 不是本项目，因此验证路径固定使用 GitHub 的 v0.3.2 标签：

git clone --branch v0.3.2 --depth 1 https://github.com/sandbaseai/sandbase-harness.git
cd sandbase-harness
npm ci
npm run build:runtime
npm link

mkdir ../my-agents && cd ../my-agents
managed-agents init
managed-agents start

另开终端：

export MANAGED_AGENTS_URL=http://127.0.0.1:3000
# 仅在 Runtime 开启认证时设置 MANAGED_AGENTS_API_KEY
dsh plugin --profile web add managed-agents
dsh web

DSH 会以 stdio 子进程启动 managed-agents-mcp，随后提供：

• mcp__sandbase__list_agents
• mcp__sandbase__create_session
• mcp__sandbase__run_session
• mcp__sandbase__get_session
• mcp__sandbase__list_artifacts
• mcp__sandbase__stop_session

验证与安全边界

v0.3.2 已针对 DeepSeek Harness 提交 47f9438 验证 Cordis 组合、stdio 子进程启动、MCP 握手、Schema、Handler、构建、包内容和卸载流程；SandBase Harness 发布门禁目前通过 574 项测试。

完整指南：
https://github.com/sandbaseai/sandbase-harness/tree/v0.3.2/examples/deepseek-harness

子进程只连接 MANAGED_AGENTS_URL，权限由 MANAGED_AGENTS_API_KEY 限制，桥接层不持久化凭证。默认本地进程沙箱适合可信开发；需要更强隔离时请配置 Docker 或 Kubernetes。

卸载：

dsh plugin --profile web remove managed-agents

关联披露：我是 SandBase 仓库维护者，并参与了此集成。

---

English

SandBase Harness v0.3.2 can now run as a real DeepSeek Harness plugin over stdio MCP. It gives a DSH session six native tools for durable agent work:

• mcp__sandbase__list_agents
• mcp__sandbase__create_session
• mcp__sandbase__run_session
• mcp__sandbase__get_session
• mcp__sandbase__list_artifacts
• mcp__sandbase__stop_session

Reproducible source install

The unscoped managed-agents package currently on npm is not this project, so the verified path builds the tagged GitHub source:

git clone --branch v0.3.2 --depth 1 https://github.com/sandbaseai/sandbase-harness.git
cd sandbase-harness
npm ci
npm run build:runtime
npm link

mkdir ../my-agents && cd ../my-agents
managed-agents init
managed-agents start

In another terminal:

export MANAGED_AGENTS_URL=http://127.0.0.1:3000
# Set MANAGED_AGENTS_API_KEY only when runtime authentication is enabled.
dsh plugin --profile web add managed-agents
dsh web

DSH starts managed-agents-mcp as a stdio child. run_session waits for the streamed turn to settle and returns the assembled result plus terminal-event metadata.

Verification

The v0.3.2 integration was tested against DeepSeek Harness commit 47f9438: Cordis composition, stdio child startup, MCP handshake, schemas, handler behavior, build, package contents, and uninstall path are covered. The SandBase Harness release gate currently passes 574 tests.

Full integration guide:
https://github.com/sandbaseai/sandbase-harness/tree/v0.3.2/examples/deepseek-harness

Release:
https://github.com/sandbaseai/sandbase-harness/releases/tag/v0.3.2

Security boundary

The child connects only to MANAGED_AGENTS_URL; effective access is limited by MANAGED_AGENTS_API_KEY. It can enumerate agents, create/run/stop sessions, and read session artifacts. The bridge does not persist credentials. For stronger execution isolation, configure Docker or Kubernetes rather than the default local-process sandbox.

Uninstall with:

dsh plugin --profile web remove managed-agents

Disclosure: I maintain the SandBase repositories and prepared this integration. Feedback on the MCP tool shape, profile lifecycle, and authentication boundary is welcome.

[zoahdev]

Nice — durable agent sessions over stdio MCP is exactly the layer the ecosystem needs, and the "unscoped npm is not this project" warning is a great reproducible-install practice.

Two small things that would make it even easier to adopt:

1. Ship a machine-readable dsh.bundle metadata block (verified install contract) so profile installs can be validated before first run — the same contract dsh-plugin-doctor checks.
2. A dsh doctor preflight for MANAGED_AGENTS_URL / MANAGED_AGENTS_API_KEY would turn the most common setup failure into an actionable message instead of a silent MCP handshake timeout.

Added to the dsh-subscribe registry (539 plugins) for discovery: github:sandbaseai/sandbase-harness. Happy to互挂 links from the ecosystem map.