@deepseek-ai/dsh-fs-sandbox 0.1.3-alpha.2 → 0.1.5-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.i18n.yaml CHANGED
@@ -2,5 +2,5 @@
2
2
  # side as of the last confirmed-consistent state. Both languages carry equal authority;
3
3
  # after editing either side, bring the other along and re-record with:
4
4
  # pnpm run verify-translation-pairing --write packages/fs/fs-sandbox/README.md
5
- README.md: 8308c92f980c64d048e6f289af6d1c4d12cb6fc9
6
- README.zh.md: 1f43fc0f2f136eebb45aea2e546fb0e3ac65e5bc
5
+ README.md: ec9bdcea1ded38e649dd21940a526440006930bf
6
+ README.zh.md: 64d4f8ab4dadcc3744452b8185270204f875eea7
package/README.md CHANGED
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
9
9
 
10
10
  ## Summary
11
11
 
12
- `dsh-fs-sandbox` provides the sandbox-enforcing `ctx.fs` backend: it extends [`fs-local`](../fs-local/README.md) with every text-storage behavior intact and adds only a per-call mode fence on writes and edits, while reads always pass through. Under `read-only` every mutation is refused; under `workspace-write` a mutation is allowed only when the target sits under the session workspace or a platform temp root; under `danger-full-access` mutations run unfenced. Loading it instead of `fs-local`, together with the shared `ctx.sandboxPolicy` service, is the whole swap — the model-facing tools and the policy plugin are untouched. A denial is a structured `FS_SANDBOX_DENIED` error that the tools render as the familiar `[sandbox: file access denied under <mode> mode]` marker with a same-turn escalation hint. Choose it when a session's file mutations must be confined to its workspace.
12
+ `dsh-fs-sandbox` confines model file writes and edits according to each session's sandbox mode while preserving the local filesystem's read behavior. In `read-only`, it rejects every mutation; in `workspace-write`, it permits targets only inside the session workspace or a platform temporary root; in `danger-full-access`, it does not restrict mutations. Use it instead of `fs-local` with `ctx.sandboxPolicy` when sessions need workspace-confined file changes. Denied operations return `FS_SANDBOX_DENIED`, which filesystem tools present with the active mode and a same-turn escalation hint.
13
13
 
14
14
  ## Table of Contents
15
15
 
package/README.zh.md CHANGED
@@ -9,7 +9,7 @@ kind: "package-reference"
9
9
 
10
10
  ## 概述
11
11
 
12
- `dsh-fs-sandbox` 提供强制沙箱的 `ctx.fs` 后端:它扩展 [`fs-local`](../fs-local/README.zh.md),完整保留全部文本存储行为,只为写入与编辑增加按调用的模式围栏,读取始终直接通过。`read-only` 下所有变更都会被拒绝;`workspace-write` 下只有当目标位于会话工作区或平台临时根目录之下时才允许变更;`danger-full-access` 下变更不加围栏。加载它来替代 `fs-local`,并同时加载共享的 `ctx.sandboxPolicy` 服务,即可完成替换——面向模型的工具与策略插件无需改动。拒绝是结构化 `FS_SANDBOX_DENIED` 错误,工具会把它渲染为熟悉的 `[sandbox: file access denied under <mode> mode]` 标记并附同轮次升级提示。当会话的文件变更必须限制在其工作区内时选择它。
12
+ `dsh-fs-sandbox` 按各会话的沙箱模式限制模型对文件的写入与编辑,同时保留本地文件系统的读取行为。`read-only` 拒绝所有变更;`workspace-write` 只允许目标位于会话工作区或平台临时根目录内;`danger-full-access` 不限制变更。当会话需要将文件变更限制在工作区内时,使用它代替 `fs-local`,并加载 `ctx.sandboxPolicy`。被拒绝的操作返回 `FS_SANDBOX_DENIED`,文件系统工具会显示当前模式和同轮次升级提示。
13
13
 
14
14
  ## 目录
15
15
 
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@deepseek-ai/dsh-fs-sandbox",
3
3
  "description": "Sandbox-enforcing implementation of the DeepSeek Harness filesystem seam: fences write/edit by the per-call sandbox mode (read-only denies mutation, workspace-write contains it to the workspace + temp roots) while reads pass through",
4
- "version": "0.1.3-alpha.2",
4
+ "version": "0.1.5-alpha.2",
5
5
  "publishConfig": {
6
6
  "access": "public"
7
7
  },
@@ -27,18 +27,18 @@
27
27
  ],
28
28
  "license": "MIT",
29
29
  "peerDependencies": {
30
- "@deepseek-ai/dsh-sandbox": "^0.1.3-alpha.2",
31
- "@deepseek-ai/dsh-fs-local": "^0.1.3-alpha.2",
32
- "@deepseek-ai/dsh-fs": "^0.1.3-alpha.2",
30
+ "@deepseek-ai/dsh-fs-local": "^0.1.5-alpha.2",
31
+ "@deepseek-ai/dsh-sandbox": "^0.1.5-alpha.2",
32
+ "@deepseek-ai/dsh-sandbox-policy": "^0.1.5-alpha.2",
33
33
  "@deepseek-ai/cordis": "^4.0.2",
34
- "@deepseek-ai/dsh-sandbox-policy": "^0.1.3-alpha.2"
34
+ "@deepseek-ai/dsh-fs": "^0.1.5-alpha.2"
35
35
  },
36
36
  "devDependencies": {
37
- "@deepseek-ai/dsh-fs": "^0.1.3-alpha.2",
38
- "@deepseek-ai/dsh-sandbox": "^0.1.3-alpha.2",
39
- "@deepseek-ai/dsh-sandbox-policy": "^0.1.3-alpha.2",
40
- "@deepseek-ai/dsh-fs-local": "^0.1.3-alpha.2",
37
+ "@deepseek-ai/dsh-fs": "^0.1.5-alpha.2",
38
+ "@deepseek-ai/dsh-sandbox-policy": "^0.1.5-alpha.2",
41
39
  "@deepseek-ai/cordis": "^4.0.2",
42
- "@deepseek-ai/dsh-session-projection": "^0.1.3-alpha.2"
40
+ "@deepseek-ai/dsh-session-projection": "^0.1.5-alpha.2",
41
+ "@deepseek-ai/dsh-fs-local": "^0.1.5-alpha.2",
42
+ "@deepseek-ai/dsh-sandbox": "^0.1.5-alpha.2"
43
43
  }
44
44
  }