Huanqi Cao
2dd9af6f4b
fix(sandbox): keep read-only strictly zero-grant by dropping the write-allowlist SID from list I
...
A session that materialized its workspace-write grant and then switched to read-only (or crashed and resumed under read-only) kept a writable workspace for the server lifetime: the standing orphan-SID ACE survived the downgrade and list I still carried the orphan, so the write-restricted pass-2 check granted it. List I is now [logon SID, EVERYONE] only — the standing ACE stays inert under read-only while the unrevoked ACE keeps the re-upgrade free (map hit, no re-propagation). Pinned by the runner's real-token mode-downgrade regression (standing ACE denied under read-only, effective again on re-upgrade), the acl-session mode-switch cycle (nothing under read-only, one materialization on upgrade, no revoke on downgrade), and ConstrainedLanguage pins in both modes.
2026-08-08 20:11:01 +08:00
Huanqi Cao
e9b1c64a38
fix(sandbox): update the missing-runner snapshot for the Windows-aware SANDBOX_UNAVAILABLE text
2026-08-08 18:16:19 +08:00
Huanqi Cao
644162d4df
fix(docs): re-record the parity note pair hashes after the EOF normalization
2026-08-08 18:03:15 +08:00
Huanqi Cao
c0991f2568
fix(docs): point the parity note at the implemented windows-pwsh-default note and refresh catalogs after the merge-forward
2026-08-08 17:58:35 +08:00
Huanqi Cao
cc64c729db
Merge remote-tracking branch 'origin/feat/windows-pwsh-default' into feat/windows-acl-sandbox
...
# Conflicts:
# apps/cli/reference/README.i18n.yaml
# knip.json
# packages/sandbox/sandbox-local/package.json
# pnpm-lock.yaml
# scripts/check-workspace-constraints.ts
2026-08-08 17:50:39 +08:00
Huanqi Cao
d1b080a68d
Merge remote-tracking branch 'origin/master' into HEAD
...
# Conflicts:
# .agents/notes/implemented/feature/2026-08-05-pwsh-ui-bash-parity.i18n.yaml
# .agents/notes/implemented/feature/2026-08-05-pwsh-ui-bash-parity.md
# .agents/notes/implemented/feature/2026-08-05-pwsh-ui-bash-parity.zh.md
# apps/cli/reference/README.i18n.yaml
2026-08-08 17:42:47 +08:00
Huanqi Cao
07c7e2f0bd
fix(sandbox): revoke post-apply grant failures, free init SID allocations, and name the Windows runner in SANDBOX_UNAVAILABLE
2026-08-08 17:39:25 +08:00
Huanqi Cao
43d53d339d
fix(pwsh): stamp the calling session's sandbox policy onto pwsh tool calls
2026-08-08 17:30:04 +08:00
Huanqi Cao
abfb933620
feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory
2026-08-08 17:29:43 +08:00
imccyu
b217fcc5bf
Merge pull request #2042 from deepseek-harness/worktree-uitool
...
cleanup(client): extract Tool presentation ownership
2026-08-08 17:23:25 +08:00
imccyu
871c59c3bc
fix(client): address tool tree review
2026-08-08 17:12:54 +08:00
imccyu
3b31b2eba1
fix: ci
2026-08-08 16:53:25 +08:00
imccyu
c5b37f6845
fix(client): keep compact row in conversation package
2026-08-08 16:53:25 +08:00
imccyu
810bfc4b5e
fix: ci
2026-08-08 16:53:25 +08:00
imccyu
ab50037b93
fix(client): address tool presentation review
2026-08-08 16:53:24 +08:00
imccyu
9c10925340
fix(docs): align ui-tool package contracts
2026-08-08 16:53:24 +08:00
imccyu
61f3982348
fix: gen docs
2026-08-08 16:53:24 +08:00
imccyu
67c753dcb7
fix(client): restore built Tool presentation snapshots
2026-08-08 16:53:24 +08:00
imccyu
cd64cc7ecd
docs(notes): update Tool UI implementation references
2026-08-08 16:53:23 +08:00
imccyu
fafd54fc03
docs(client): record Tool presentation ownership
2026-08-08 16:53:23 +08:00
imccyu
7cc554ef16
cleanup(client): extract Tool presentation into ui-tool
2026-08-08 16:53:23 +08:00
imccyu
1674af147e
cleanup(client): detach conversation rows from Tool presentation
2026-08-08 16:53:22 +08:00
Tianyi Cui
a44e35793c
Merge pull request #2048 from deepseek-harness/worktree/batch-session-persistence
...
Batch durable session writes with a bounded delay
2026-08-08 16:51:15 +08:00
Tianyi Cui
41b2fd7a70
Merge pull request #1145 from deepseek-harness/fix/f4-ask-user-child-guard
...
fix(user-interaction): guard human interaction by runtime ownership
2026-08-08 16:47:24 +08:00
Yichen Jiang
e75a5c6651
Merge pull request #2040 from deepseek-harness/worktree/sidebar-subagent-activity
...
feat(web): surface subagent activity in sidebar
2026-08-08 16:47:06 +08:00
Tianyi Cui
1576d049ed
fix(session-persistence): close batching failure gaps
2026-08-08 16:43:37 +08:00
Yichen Jiang
3b10120d60
Merge remote-tracking branch 'origin/master' into worktree/sidebar-subagent-activity
...
# Conflicts:
# packages/client/runtime/README.i18n.yaml
2026-08-08 16:37:29 +08:00
Turtle
bd518cb684
Merge pull request #1696 from deepseek-harness/codex/dsh-badge-plugin
...
feat: add optional dsh badge skill provider
2026-08-08 16:33:00 +08:00
Yichen Jiang
d174edf9eb
Merge pull request #2034 from deepseek-harness/worktree/merge-compact-card
...
feat(web): merge compact status and summary cards
2026-08-08 16:23:00 +08:00
Tianyi Cui
235a94b179
Merge pull request #1734 from deepseek-harness/codex/unify-landlock-release
...
refactor(landlock-run): unify workspace and release
2026-08-08 16:22:41 +08:00
Tianyi Cui
1627728eff
fix: allow audited publishing repository links
2026-08-08 16:15:00 +08:00
Tianyi Cui
9614bce6c6
docs(graph): refresh session persistence dependency
2026-08-08 16:08:03 +08:00
Tianyi Cui
8dcbabc3a4
docs: refresh module graph
2026-08-08 16:04:24 +08:00
Tianyi Cui
2268f0ecec
Merge origin/master into codex/dsh-badge-plugin
2026-08-08 16:03:30 +08:00
Tianyi Cui
a6ef1c2e7e
Merge remote-tracking branch 'origin/master' into codex/unify-landlock-release
2026-08-08 16:03:18 +08:00
Tianyi Cui
dac4b068c4
Merge remote-tracking branch 'origin/master' into codex/unify-landlock-release
...
# Conflicts:
# .agents/notes/implemented/process/2026-07-30-generated-third-party-notices.i18n.yaml
# scripts/check-workspace-constraints.ts
2026-08-08 16:01:53 +08:00
Tianyi Cui
74a8e2e776
Merge remote-tracking branch 'origin/master' into worktree/fix-pr1145-revised-guard-20260808
2026-08-08 16:00:25 +08:00
Yichen Jiang
fb1d230518
test(web): avoid replay timing assertions
2026-08-08 15:56:36 +08:00
Tianyi Cui
724a0fb16c
Merge remote-tracking branch 'origin/master' into worktree/batch-session-persistence
2026-08-08 15:54:48 +08:00
Tianyi Cui
4b71213c65
Merge pull request #1988 from deepseek-harness/worktree/fix-pr1979-bot-review
...
fix(replay): distinguish local compaction calls
2026-08-08 15:48:33 +08:00
Tianyi Cui
b837e30a80
test(apiproxy): register question callers
2026-08-08 15:48:22 +08:00
Yichen Jiang
81d32bf52c
test(web): isolate sidebar subagent activity snapshot
2026-08-08 15:46:08 +08:00
Tianyi Cui
e3162f3ba6
Merge origin/master into worktree/batch-session-persistence
2026-08-08 15:44:12 +08:00
Tianyi Cui
924c954469
feat(session): bound persistence write batching
2026-08-08 15:43:52 +08:00
Tianyi Cui
f6449c838c
docs: document delegated plan review failure
2026-08-08 15:43:06 +08:00
Tianyi Cui
6d0a14d428
Merge origin/master into codex/dsh-badge-plugin
2026-08-08 15:42:47 +08:00
Tianyi Cui
f6db2eb1ab
chore: declare child-question snapshot fixture
2026-08-08 15:40:01 +08:00
Tianyi Cui
b9e7db5abf
fix(skill-badge): align with current base contracts
2026-08-08 15:39:19 +08:00
Tianyi Cui
e0f113f55b
Merge origin/master into codex/dsh-badge-plugin
2026-08-08 15:33:41 +08:00
Tianyi Cui
ed808adef3
Merge remote-tracking branch 'refs/remotes/origin/master' into worktree/fix-pr1145-revised-guard-20260808
2026-08-08 15:30:59 +08:00
Huanqi Cao
imccyu
Tianyi Cui
Yichen Jiang
Turtle