@deepseek-ai/dsh-sandbox-windows-acl 0.1.2-alpha.2 → 0.1.2-alpha.4

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/sandbox/sandbox-windows-acl/README.md
-README.md: d742789e3f90711ff0cb322a71e73c5caf291a39
-README.zh.md: a5c3a3e92788f96b969d42b127cd7010a0d52d2f
+README.md: bba311fbb5337d6390b49a4b2898751906beb0f8
+README.zh.md: 24110bd35cc022e03bfe0156178072cc435dd564

package/README.md

@@ -187,3 +187,5 @@ This Dev Note is working context for maintainers: undecided directions and open
 The warn-only posture for unusually wide directories and FAT-class volumes is documented in the limitations above but not implemented, and a cleanup command that reaps standing workspace ACEs from renamed workspaces is undecided. Both are open directions, not shipped behavior.
 
 </details>
+
+**Runtime invariant:** No companion is published. This package exposes no independent event sequence or mutable data relation beyond the fail-closed contracts it enforces at each Win32 call boundary.

package/README.zh.md

@@ -187,3 +187,5 @@ seam 先把确定性工作区 SID 的 ACE 常驻物化（每个工作区每服
 对异常宽的目录与 FAT 类卷的仅警告立场已记录在上方限制中但尚未实现，回收改名工作区常驻 ACE 的清理命令也尚未决定。两者都是开放方向，不是已交付行为。
 
 </details>
+
+**运行时不变式：** 不发布伴生入口。本包没有独立事件序列或可变数据关系；fail-closed 约定在每个 Win32 调用处强制。

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-sandbox-windows-acl",
   "description": "Windows ACL write-restriction sandbox backend (restricted-token spawn with capability-SID write allowlist) for the DeepSeek Harness sandbox seam",
-  "version": "0.1.2-alpha.2",
+  "version": "0.1.2-alpha.4",
   "publishConfig": {
     "access": "public"
   },
@@ -22,33 +22,26 @@
       "types": "./lib/types/runner.d.ts",
       "default": "./lib/runner.js"
     },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
     "./src/*": "./src/*",
     "./package.json": "./package.json"
   },
   "files": [
     "lib/index.js",
-    "lib/invariant.js",
     "lib/runner.js",
     "lib/types-*.js",
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.2",
     "@deepseek-ai/cordis": "^4.0.2"
   },
   "dependencies": {
     "koffi": "^3.1.0",
-    "@deepseek-ai/dsh-win32-process": "^0.1.2-alpha.2"
+    "@deepseek-ai/dsh-win32-process": "^0.1.2-alpha.4"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-pwsh-local": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-sandbox-local": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-pwsh-local": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-sandbox-local": "^0.1.2-alpha.4",
     "@deepseek-ai/cordis": "^4.0.2"
   }
 }

package/lib/invariant.js

@@ -1,24 +0,0 @@
-//#region lib/types/invariant.js
-/**
-* Package-owned invariant companion for `@deepseek-ai/dsh-sandbox-windows-acl`.
-* @module @deepseek-ai/dsh-sandbox-windows-acl/invariant
-*/
-const PACKAGE_NAME = "@deepseek-ai/dsh-sandbox-windows-acl";
-/** Cordis companion plugin name. */
-const name = "sandbox-windows-acl-invariant";
-/** Service required before the companion can reserve package ownership. */
-const inject = ["invariants"];
-/**
-* No runtime invariant: this package exposes no independent event sequence or
-* mutable data relation beyond the fail-closed contracts it enforces at each
-* Win32 call boundary.
-*/
-const install = () => {};
-/**
-* Register this package's invariant companion.
-* @param ctx - Cordis context carrying the invariant service.
-* @returns the installed registration's disposer after setup succeeds.
-*/
-const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-//#endregion
-export { apply, inject, name };

package/lib/types/invariant.d.ts

@@ -1,16 +0,0 @@
-/**
- * Package-owned invariant companion for `@deepseek-ai/dsh-sandbox-windows-acl`.
- * @module @deepseek-ai/dsh-sandbox-windows-acl/invariant
- */
-import type { Context } from '@deepseek-ai/cordis';
-/** Cordis companion plugin name. */
-export declare const name = "sandbox-windows-acl-invariant";
-/** Service required before the companion can reserve package ownership. */
-export declare const inject: string[];
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map