@deepseek-ai/dsh-sandbox 0.2.0-rc.1 → 0.2.1-alpha.1

package/README.i18n.yaml

@@ -39,8 +39,8 @@
   en: 0fc96495c192b513
   zh: 38b51b9b3c208012
 /deepseek-ai-dsh-sandbox/understand-the-implementation/source-map:
-  en: 54cab3e684afb031
-  zh: b49b476d2f965985
+  en: f58b67217cbc147a
+  zh: b2cbde0342f3f8aa
 /deepseek-ai-dsh-sandbox/understand-the-implementation/escalation-choreography:
   en: 1b418d41f571ab3d
   zh: 62b289cdd6f4d272
@@ -48,8 +48,8 @@
   en: 956d3195cf7a35f8
   zh: f83d8342e22bb7cd
 /deepseek-ai-dsh-sandbox/further-exploration:
-  en: 9f0d57097c678a25
-  zh: 58e765bf1b223215
+  en: 33d09277fb15d59f
+  zh: 920ffe66671b56f3
 /deepseek-ai-dsh-sandbox/model-experience:
   en: 215e7ba838619b7b
   zh: a311da3843709f90
@@ -87,5 +87,5 @@
   en: cc273320f6a1beaf
   zh: 5c57a312ddc50651
 /deepseek-ai-dsh-sandbox/known-limitations-and-deferred-work/dev-note/future-consumers-and-environments:
-  en: a7bc10cf027a51b8
-  zh: 2562dd32d3859205
+  en: f5fb77e6f7fd03ed
+  zh: fc4e28f6c04198ea

package/README.md

@@ -93,7 +93,6 @@ This section explains the design decisions behind the contract and points at the
 | [`src/index.ts`](src/index.ts) | Plugin entry: `SandboxProvider` service, mode/enforcement/policy types, fail-closed error |
 | [`src/escalation.ts`](src/escalation.ts) | Escalation vocabulary: wider-mode ladder, argument validation, denial and hint markers, approval choreography |
 | [`src/roots.ts`](src/roots.ts) | Writable-root derivation shared by the Seatbelt profile and the in-process fs fence |
-| — | No runtime invariant companion is published; this package exposes no independent event sequence or mutable data relation beyond contracts enforced at its owning seam. |
 
 ### Escalation choreography
 
@@ -113,7 +112,7 @@ The ladder is a closed table — `read-only` may escalate to `workspace-write` o
 Start with the subsystem reference for the exhaustive contract, then the backends, consumers, and policy source that realize it.
 
 - [Process sandbox subsystem](../../../docs/subsystems/sandbox.md) — the complete vocabulary, per-call policy, and classification dialects.
-- [The subprocess sandbox decision](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.md) — capability boundary, escalation design, and deferred phases.
+- [The historical subprocess sandbox decision](../../../.agents/notes/archived/feature/2026-07-06-sandbox.md) — capability boundary, escalation design, and deferred phases.
 - [Local sandbox backends](../sandbox-local/README.md) — the per-platform runners behind `ctx.sandbox`.
 - [Bash sandbox executor](../../shell/bash-sandbox/README.md) — the confined bash consumer.
 - [Sandbox policy package](../sandbox-policy/README.md) — where the per-call mode and workspace root come from.
@@ -180,6 +179,6 @@ This Dev Note is working context for maintainers: undecided directions and open
 
 #### Future: consumers and environments
 
-The [sandbox decision](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.md) lists deferred phases — an optional `subagent-acp` consumer that confines child agents (unconfined default) and environment-coherent capability group examples. Neither is decided; the Windows chain that note listed as deferred has since shipped through the ACL restricted-token rung of `sandbox-local`.
+An optional `subagent-acp` consumer that confines child agents with an unconfined default, and environment-coherent capability group examples, remain undecided. Windows confinement is provided by the ACL restricted-token backend of `sandbox-local`.
 
 </details>

package/README.zh.md

@@ -93,7 +93,6 @@ kind: "package-reference"
 | [`src/index.ts`](src/index.ts) | 插件入口：`SandboxProvider` 服务、模式/强制执行/策略类型、故障关闭错误 |
 | [`src/escalation.ts`](src/escalation.ts) | 升权词汇：更宽模式阶梯、参数校验、拒绝与提示标记、审批编排 |
 | [`src/roots.ts`](src/roots.ts) | 可写根目录推导，Seatbelt profile 与进程内 fs 栅栏共享 |
-| — | 不发布运行时不变式伴生入口；除所属 seam 强制执行的约定外，本包不公开独立的事件序列或可变数据关系。 |
 
 ### 升权编排
 
@@ -113,7 +112,7 @@ kind: "package-reference"
 先从子系统参考文档了解穷尽式约定，再看实现它的后端、消费方与策略来源。
 
 - [进程沙箱子系统](../../../docs/subsystems/sandbox.zh.md)——完整词汇、逐调用策略与分类方言。
-- [子进程沙箱决策](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.zh.md)——能力边界、升权设计与延期阶段。
+- [历史子进程沙箱决策](../../../.agents/notes/archived/feature/2026-07-06-sandbox.md)——能力边界、升权设计与延期阶段。
 - [本地沙箱后端](../sandbox-local/README.zh.md)——`ctx.sandbox` 背后的各平台 runner。
 - [Bash 沙箱执行器](../../shell/bash-sandbox/README.zh.md)——受限的 bash 消费方。
 - [沙箱策略包](../sandbox-policy/README.zh.md)——逐调用模式与工作区根目录的来源。
@@ -180,6 +179,6 @@ sandbox mode "<mode>" is requested but no sandbox backend is usable on this host
 
 #### 未来：消费方与环境
 
-[沙箱决策](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.zh.md)列出延期阶段——可选的 `subagent-acp` 消费方（隔离子 agent（智能体），默认不隔离）与环境一致的能力组示例。两者均未决定；该笔记列为延期的 Windows 链已通过 `sandbox-local` 的 ACL 受限令牌档交付。
+可选的 `subagent-acp` 消费方（隔离子 agent，默认不隔离）与环境一致的能力组示例仍未决定。Windows 隔离由 `sandbox-local` 的 ACL 受限令牌后端提供。
 
 </details>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-sandbox",
   "description": "Abstract process-sandbox seam (ctx.sandbox) for the DeepSeek Harness: same-world confinement vocabulary and the SandboxProvider contract",
-  "version": "0.2.0-rc.1",
+  "version": "0.2.1-alpha.1",
   "publishConfig": {
     "access": "public"
   },
@@ -27,16 +27,16 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.1"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-util-values": "0.2.0-rc.1"
+    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.1"
   }
 }