DeepSeek/deepseek-harness
1
0
Fork 0
mirror of https://github.com/deepseek-ai/deepseek-harness synced 2026-08-15 21:04:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(session-persistence): address permission review

Browse Source
This commit is contained in:
Yichen Jiang
2026-07-17 10:47:32 +08:00
parent 96975f3840
commit ac893f97bb
4 changed files with 16 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
packages/session-persistence/session-persistence-sqlite/src/index.ts
View File

@@ -34,7 +34,11 @@ function surfaceBindings(event: SessionEvent): [string | null, string | null] {
]
}
/** Create a missing database owner-only while preserving an existing file's mode. */
/**
* Create a missing database owner-only while preserving an existing file's
* mode. `DatabaseSync` cannot adopt this handle, so a parent directory writable
* by another principal is outside the backend's database-integrity boundary.
*/
async function createDatabaseFile(path: string): Promise<void> {
try {
const handle = await open(path, 'wx', 0o600)
@@ -50,6 +54,8 @@ export interface Config {
* Filesystem path to the SQLite database file. The special value `:memory:`
* opens an in-process database (tests). Missing directories and the database
* are created with owner-only permissions; existing path modes are preserved.
* Parent directories writable by another principal are outside the backend's
* database-integrity boundary.
*/
path: string
/**