@deepseek-ai/dsh-bash-sandbox 0.1.3-alpha.2 → 0.1.5-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.i18n.yaml +2 -2
- package/README.md +1 -1
- package/README.zh.md +1 -1
- package/package.json +13 -13
package/README.i18n.yaml
CHANGED
|
@@ -2,5 +2,5 @@
|
|
|
2
2
|
# side as of the last confirmed-consistent state. Both languages carry equal authority;
|
|
3
3
|
# after editing either side, bring the other along and re-record with:
|
|
4
4
|
# pnpm run verify-translation-pairing --write packages/shell/bash-sandbox/README.md
|
|
5
|
-
README.md:
|
|
6
|
-
README.zh.md:
|
|
5
|
+
README.md: f28ecaefce8c2a5508fcee34473ffc00d7348d98
|
|
6
|
+
README.zh.md: 996b0b0a21cf67c3087c76e06bd0115b88d2350c
|
package/README.md
CHANGED
|
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
|
|
|
9
9
|
|
|
10
10
|
## Summary
|
|
11
11
|
|
|
12
|
-
`dsh-bash-sandbox`
|
|
12
|
+
Use `dsh-bash-sandbox` to run each Bash command with file-access confinement instead of the harness process's full authority. Results report the selected mode, denied file operations, and whether the runner fully enforced that mode. If no runner can enforce a confined mode, the command fails with `SANDBOX_UNAVAILABLE` rather than running unconfined. Choose it when deployments need file isolation; network access and process visibility remain outside its guarantees.
|
|
13
13
|
|
|
14
14
|
## Table of Contents
|
|
15
15
|
|
package/README.zh.md
CHANGED
|
@@ -9,7 +9,7 @@ kind: "package-reference"
|
|
|
9
9
|
|
|
10
10
|
## 概述
|
|
11
11
|
|
|
12
|
-
`dsh-bash-sandbox`
|
|
12
|
+
使用 `dsh-bash-sandbox` 运行每条 Bash 命令，使其文件访问受到限制，而不是使用 harness 进程的完整权限。结果会报告所选模式、被拒绝的文件操作，以及 runner 是否完整实施该模式。如果没有 runner 能实施受限模式，命令会以 `SANDBOX_UNAVAILABLE` 失败，绝不会无隔离地运行。部署需要文件隔离时选择它；网络访问和进程可见性不在其保证范围内。
|
|
13
13
|
|
|
14
14
|
## 目录
|
|
15
15
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@deepseek-ai/dsh-bash-sandbox",
|
|
3
3
|
"description": "Sandbox-consuming implementation of the DeepSeek Harness bash executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)",
|
|
4
|
-
"version": "0.1.
|
|
4
|
+
"version": "0.1.5-alpha.2",
|
|
5
5
|
"publishConfig": {
|
|
6
6
|
"access": "public"
|
|
7
7
|
},
|
|
@@ -27,21 +27,21 @@
|
|
|
27
27
|
],
|
|
28
28
|
"license": "MIT",
|
|
29
29
|
"peerDependencies": {
|
|
30
|
-
"@deepseek-ai/dsh-
|
|
31
|
-
"@deepseek-ai/dsh-
|
|
32
|
-
"@deepseek-ai/dsh-sandbox": "^0.1.
|
|
33
|
-
"@deepseek-ai/dsh-sandbox-policy": "^0.1.
|
|
30
|
+
"@deepseek-ai/dsh-bash-local": "^0.1.5-alpha.2",
|
|
31
|
+
"@deepseek-ai/dsh-shell": "^0.1.5-alpha.2",
|
|
32
|
+
"@deepseek-ai/dsh-sandbox": "^0.1.5-alpha.2",
|
|
33
|
+
"@deepseek-ai/dsh-sandbox-policy": "^0.1.5-alpha.2",
|
|
34
34
|
"@deepseek-ai/cordis": "^4.0.2"
|
|
35
35
|
},
|
|
36
36
|
"devDependencies": {
|
|
37
|
-
"@deepseek-ai/dsh-shell": "^0.1.
|
|
38
|
-
"@deepseek-ai/dsh-bash-local": "^0.1.
|
|
39
|
-
"@deepseek-ai/dsh-subprocess-local": "^0.1.
|
|
40
|
-
"@deepseek-ai/dsh-sandbox
|
|
41
|
-
"@deepseek-ai/dsh-sandbox-
|
|
42
|
-
"@deepseek-ai/dsh-sandbox": "^0.1.
|
|
37
|
+
"@deepseek-ai/dsh-shell": "^0.1.5-alpha.2",
|
|
38
|
+
"@deepseek-ai/dsh-bash-local": "^0.1.5-alpha.2",
|
|
39
|
+
"@deepseek-ai/dsh-subprocess-local": "^0.1.5-alpha.2",
|
|
40
|
+
"@deepseek-ai/dsh-sandbox": "^0.1.5-alpha.2",
|
|
41
|
+
"@deepseek-ai/dsh-sandbox-local": "^0.1.5-alpha.2",
|
|
42
|
+
"@deepseek-ai/dsh-sandbox-policy": "^0.1.5-alpha.2",
|
|
43
43
|
"@deepseek-ai/cordis": "^4.0.2",
|
|
44
|
-
"@deepseek-ai/node-addon-
|
|
45
|
-
"@deepseek-ai/dsh-session-projection": "^0.1.
|
|
44
|
+
"@deepseek-ai/node-addon-system": "^0.1.2",
|
|
45
|
+
"@deepseek-ai/dsh-session-projection": "^0.1.5-alpha.2"
|
|
46
46
|
}
|
|
47
47
|
}
|