先看结论
基于现有公开资料生成，最后决策仍应核对原始来源。
The **model-facing filesystem tools** — `read`, `read_image`, `write`, `edit` — and their **executor**. This is the consumer layer of the filesystem stack: it owns tool names, JSON schemas, argument validation, prompt sections, **read windowing**, and result formatting. It reads/writes/edits through the `ctx.fs` provider contract ([`@deepseek-ai/dsh-fs`](../fs)) **directly**. The freshness/observation policy is contributed by a separate plugin ([`@deepseek-ai/dsh-fs-observation-policy`](../fs-observation-policy)) through the `fs/*` event gate; the tool is not method-coupled to it. Under a confining provider, the shared sandbox-policy service is required for per-session execution and the tool exposes escalation for filesystem mutations.
能力
它能让 Agent / 使用者做什么。
- 适用 Agent：DeepSeek Harness
- 适配模型：DeepSeek
安装与获取
可复现安装方式。
@deepseek-ai/dsh-tool-fs
来源与核实
保留来源、时间与置信度，供回溯。
实效证据
来源可信不等于任务有效。
暂无通过审核、可复现的同任务 A/B 运行证据；本档案仅证明来源可信，不代表实测有效。