@deepseek-ai/dsh-tool-bash 0.1.6-alpha.1 → 0.1.6-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.i18n.yaml CHANGED
@@ -2,5 +2,5 @@
2
2
  # side as of the last confirmed-consistent state. Both languages carry equal authority;
3
3
  # after editing either side, bring the other along and re-record with:
4
4
  # pnpm run verify-translation-pairing --write packages/shell/tool-bash/README.md
5
- README.md: 43c70d7ebc8eb13f28c4e4576dfde8cb2402b775
6
- README.zh.md: e38e7afa6b7a534fe29d1022fc2797f5a98651b0
5
+ README.md: 3e01a8b800b5156feecc7e36c45f3490f9abdfc0
6
+ README.zh.md: 91eb88c4b08eb515a0fd5f31257d33b6e3033ab9
package/README.md CHANGED
@@ -60,7 +60,7 @@ Passing `run_in_background: true` admits a job and returns its id immediately; c
60
60
 
61
61
  ### Sandboxed execution and escalation
62
62
 
63
- When the mounted executor confines commands (for example `dsh-bash-sandbox`), a blocked file operation is reported as `[sandbox: file access denied under <mode> mode]` — a policy denial, not a command failure. The model may then retry the exact same command once in the same turn with `sandbox_permissions` (the narrowest wider mode that suffices) and a one-sentence `justification`; the approval prompt raised by that retry is how the user consents. Escalation is never speculative: a request with no real prior denial, or one that is not strictly wider than the current mode, fails closed without running anything, and a rejected escalation is final for that command.
63
+ When the mounted executor confines commands (for example `dsh-bash-sandbox`), a blocked file operation is reported as `[sandbox: file access denied under <mode> mode]` — a policy denial, not a command failure. The model may then retry the exact same command once in the same turn with `sandbox_permissions` (the narrowest wider mode that suffices) and a one-sentence `justification`; the approval prompt raised by that retry is how the user consents. Request wider access only after a real denial; a rejected escalation is final for that command. Repeating the current mode runs without approval, while a narrower target fails before execution.
64
64
 
65
65
  ### What can go wrong
66
66
 
package/README.zh.md CHANGED
@@ -60,7 +60,7 @@ kind: "package-reference"
60
60
 
61
61
  ### 沙箱执行与升权
62
62
 
63
- 当已挂载的执行器约束命令(例如 `dsh-bash-sandbox`)时,被阻止的文件操作会报告为 `[sandbox: file access denied under <mode> mode]`——这是策略拒绝,不是命令失败。模型随后可以在同一轮次中用 `sandbox_permissions`(满足需要的最窄更宽模式)与一句 `justification` 重试完全相同的命令一次;该重试引发的审批提示就是用户同意的方式。升权绝不能预先推测:没有真实拒绝依据的请求,或没有严格宽于当前模式的请求,都会直接失败且不执行任何操作;被拒绝的升权对该命令即为最终结果。
63
+ 当已挂载的执行器约束命令(例如 `dsh-bash-sandbox`)时,被阻止的文件操作会报告为 `[sandbox: file access denied under <mode> mode]`——这是策略拒绝,不是命令失败。模型随后可以在同一轮次中用 `sandbox_permissions`(满足需要的最窄更宽模式)与一句 `justification` 重试完全相同的命令一次;该重试引发的审批提示就是用户同意的方式。只有发生真实拒绝后才请求更宽权限;被拒绝的升权对该命令即为最终结果。重复当前模式无需审批即可执行,更窄目标则在执行前失败。
64
64
 
65
65
  ### 可能出什么问题
66
66
 
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@deepseek-ai/dsh-tool-bash",
3
3
  "description": "Model-facing bash tool with optional generic background-job and sandbox-escalation support",
4
- "version": "0.1.6-alpha.1",
4
+ "version": "0.1.6-alpha.2",
5
5
  "publishConfig": {
6
6
  "access": "public"
7
7
  },
@@ -27,41 +27,41 @@
27
27
  ],
28
28
  "license": "MIT",
29
29
  "peerDependencies": {
30
- "@deepseek-ai/dsh-agent": "^0.1.6-alpha.1",
31
- "@deepseek-ai/dsh-shell": "^0.1.6-alpha.1",
32
- "@deepseek-ai/dsh-shell-env": "^0.1.6-alpha.1",
33
- "@deepseek-ai/dsh-llm": "^0.1.6-alpha.1",
34
- "@deepseek-ai/dsh-sandbox": "^0.1.6-alpha.1",
35
- "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.1",
36
- "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.1",
37
- "@deepseek-ai/dsh-jobs": "^0.1.6-alpha.1",
38
- "@deepseek-ai/dsh-tools": "^0.1.6-alpha.1",
30
+ "@deepseek-ai/dsh-shell": "^0.1.6-alpha.2",
31
+ "@deepseek-ai/dsh-shell-env": "^0.1.6-alpha.2",
32
+ "@deepseek-ai/dsh-sandbox": "^0.1.6-alpha.2",
33
+ "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.2",
34
+ "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.2",
35
+ "@deepseek-ai/dsh-jobs": "^0.1.6-alpha.2",
36
+ "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.2",
37
+ "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2",
39
38
  "@deepseek-ai/cordis": "^4.0.2",
40
- "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.1"
39
+ "@deepseek-ai/dsh-llm": "^0.1.6-alpha.2",
40
+ "@deepseek-ai/dsh-agent": "^0.1.6-alpha.2"
41
41
  },
42
42
  "dependencies": {
43
43
  "@deepseek-ai/schemastery": "^3.18.2"
44
44
  },
45
45
  "devDependencies": {
46
- "@deepseek-ai/dsh-agent": "^0.1.6-alpha.1",
47
- "@deepseek-ai/dsh-agent-loop": "^0.1.6-alpha.1",
48
- "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.6-alpha.1",
49
- "@deepseek-ai/dsh-shell": "^0.1.6-alpha.1",
50
- "@deepseek-ai/dsh-shell-env": "^0.1.6-alpha.1",
51
- "@deepseek-ai/dsh-bash-local": "^0.1.6-alpha.1",
52
- "@deepseek-ai/dsh-llm": "^0.1.6-alpha.1",
53
- "@deepseek-ai/dsh-sandbox": "^0.1.6-alpha.1",
54
- "@deepseek-ai/dsh-subprocess-local": "^0.1.6-alpha.1",
55
- "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.1",
56
- "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.6-alpha.1",
57
- "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.1",
58
- "@deepseek-ai/dsh-jobs-local": "^0.1.6-alpha.1",
59
- "@deepseek-ai/dsh-tool-jobs": "^0.1.6-alpha.1",
60
- "@deepseek-ai/dsh-tools": "^0.1.6-alpha.1",
61
- "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.1",
46
+ "@deepseek-ai/dsh-agent": "^0.1.6-alpha.2",
47
+ "@deepseek-ai/dsh-agent-loop": "^0.1.6-alpha.2",
48
+ "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.6-alpha.2",
49
+ "@deepseek-ai/dsh-shell-env": "^0.1.6-alpha.2",
50
+ "@deepseek-ai/dsh-bash-local": "^0.1.6-alpha.2",
51
+ "@deepseek-ai/dsh-llm": "^0.1.6-alpha.2",
52
+ "@deepseek-ai/dsh-shell": "^0.1.6-alpha.2",
53
+ "@deepseek-ai/dsh-sandbox": "^0.1.6-alpha.2",
54
+ "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.2",
55
+ "@deepseek-ai/dsh-subprocess-local": "^0.1.6-alpha.2",
56
+ "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.2",
57
+ "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
58
+ "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.6-alpha.2",
59
+ "@deepseek-ai/dsh-jobs": "^0.1.6-alpha.2",
60
+ "@deepseek-ai/dsh-jobs-local": "^0.1.6-alpha.2",
61
+ "@deepseek-ai/dsh-tool-jobs": "^0.1.6-alpha.2",
62
+ "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2",
63
+ "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.2",
62
64
  "@deepseek-ai/cordis": "^4.0.2",
63
- "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
64
- "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.1",
65
- "@deepseek-ai/dsh-jobs": "^0.1.6-alpha.1"
65
+ "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.2"
66
66
  }
67
67
  }