
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
dsh-agent-mailbox
Advanced tools
Project-scoped agent-mailbox tools for existing DeepSeek Harness sessions. Private session-file connection; no provider keys or managed CLI tasks.
Project-scoped agent-mailbox tools for existing DeepSeek Harness sessions. Join a project, share approved documents, exchange mail, and report task progress using the employee's own model and account. The plugin does not launch another employee CLI or configure an LLM provider.
Version 0.8 replaces the old global mailbox bridge. Existing agentId, home, runner, uvxFrom, and pythonSrc settings are rejected with a migration message; old global inboxes are not imported automatically.
- insert:
- id: dsh-agent-mailbox
name: dsh-agent-mailbox
config:
sessionFile: /absolute/path/to/private/employee-session.json
executable: /absolute/path/to/agent-mailbox
The executable is the installed agent-mailbox command/backend, not the DMG container. For a Python installation use executable: /absolute/path/to/python and executableArgs: ['-m', 'agent_mailbox']. Paths are passed as argument arrays, without a shell. Do not place keys or bearer tokens in this overlay, source control, or chat.
Open a new DSH session with the overlay using your host's profile/patch workflow. Changes are not claimed to hot-reload an existing conversation. The workbench must remain open; restarting it on another local port is supported. Expired/revoked membership requires reconnecting/exporting a new connection.
At activation the plugin discovers the authorized project_* MCP tools and registers their actual schemas. Current v0.8 exposes context, shared memory/resources, inbox/reply, and assigned-task progress tools. No legacy global mailbox_* aliases, identity override, or managed-task wake tool is exposed.
The session file binds one employee to one project. Reading mail does not mark it accepted or complete. Ordinary messages do not start tasks. Human acceptance remains separate. Subagents report to their parent; do not share the private session file with them. Application support for automatic notification is separate from this tool bridge.
Each plugin instance has its own connection and lifecycle. Startup/discovery failures fail visibly; disposal unregisters tools and closes the child process. The plugin itself never reads the token or database.
Node >=22.18, TypeScript, and the host-provided @deepseek-ai/cordis peer are required. There are no runtime npm dependencies apart from that peer.
npm test --registry=https://registry.npmjs.org
npm run typecheck --registry=https://registry.npmjs.org
npm run build --registry=https://registry.npmjs.org
node scripts/assert-dist-ext.mjs
node scripts/assert-nm-entry.mjs
npm pack --dry-run --registry=https://registry.npmjs.org
This repository's candidate is 0.8.0; source changes do not prove an npm publication. The existing npm channel is dsh-agent-mailbox, maintained by polaris-smart. Explicitly use the official registry for publication. Do not use the unrelated unscoped agent-mailbox npm package.
This independent adapter retains its MIT license and original copyright notice. The agent-mailbox v0.8 application is separately licensed under Apache-2.0 with NoFox attribution. Installing the adapter does not change either license.
FAQs
Project-scoped agent-mailbox tools for existing DeepSeek Harness sessions. Private session-file connection; no provider keys or managed CLI tasks.
The npm package dsh-agent-mailbox receives a total of 54 weekly downloads. As such, dsh-agent-mailbox popularity was classified as not popular.
We found that dsh-agent-mailbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.