dsh-plugin-wsl-env 0.1.7 → 0.1.8

package/CHANGELOG.md

@@ -12,6 +12,28 @@ reference below points at that record's numbering.
 
 ## [Unreleased]
 
+## [0.1.8] - 2026-10-02
+
+A probe assertion for the one item the closure review had to record as unverifiable.
+No runtime change.
+
+### Added
+
+- `npm run probe:sandbox-shell` asserts that a command past its deadline is reported as
+  timed out **and leaves no process behind in the distro** (15 checks, up from 13). The
+  escalated path is used on purpose: a confined command also dies with its `bwrap`
+  parent, so only the unconfined path shows whether the subprocess service's kill
+  actually reaches the distro. It does — measured through `ctx.shell` here, and
+  directly by killing a `wsl.exe` relay and watching the distro-side `sleep` disappear
+  with it (1 process before, 0 after).
+
+### Documentation
+
+- The review's "unverified: orphaned processes after a timeout" item is closed. The
+  earlier attempt could not see the process at all, and said so: the agent's own shell
+  ran in a separate PID namespace, where `ps` cannot see the distro's processes.
+
+
 ## [0.1.7] - 2026-10-02
 
 One correctness fix and the error-code reference the closure review asked for.

package/CONTRIBUTING.md

@@ -149,7 +149,7 @@ On Windows 11 + WSL2 (Ubuntu 26.04) the following has been verified:
 
 Counts: 57 unit assertions on a bare checkout, plus 5 in `test/sandbox.test.mjs` which
 need the `dsh-sandbox` peer and skip themselves without it; 19 filesystem-probe
-assertions; 13 shell-probe checks; 9 picker checks; 6 missing-executable checks; 5 mode
+assertions; 15 shell-probe checks; 9 picker checks; 6 missing-executable checks; 5 mode
 checks and 10 sandbox expectations plus the recorded escape; and 3 terminal
 assertions.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-wsl-env",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Run a DeepSeek Harness session against a WSL distro: a ctx.shell executor that runs commands inside the distro and a ctx.fs backend over its UNC share",
   "keywords": [
     "deepseek-harness",