Huanqi Cao
7eadde5c58
Merge remote-tracking branch 'origin/feat/windows-pwsh-default' into feat/windows-acl-sandbox
...
# Conflicts:
# apps/cli/reference/README.i18n.yaml
2026-08-08 20:18:56 +08:00
Huanqi Cao
03cf9caba2
Merge remote-tracking branch 'origin/master' into HEAD
2026-08-08 20:15:08 +08:00
Huanqi Cao
83f835e4cb
feat(pwsh): mirror the bash sandbox surface — denial rendering, escalation, and the ConstrainedLanguage contract
...
tool-pwsh now renders sandbox denial facts (denial marker + same-turn escalation hint, runner-failed notice on background reads) and advertises the sandbox_permissions/justification escalation pair resolved through ctx.approval before execution — the shared fail-closed sequence from dsh-sandbox, with the tool name 'pwsh'. The description teaches the ConstrainedLanguage contract under the Windows sandbox (both confined modes run pwsh in CLM: Add-Type, non-core .NET statics, COM, and reflection fail; the mode cannot be lifted — probe-verified, pinned by LANGMODE assertions in the runner suite and description assertions in the tool suite). The stale pwsh-sandbox JSDoc ('the tool owns approval') and the parity notes' superseded 'minus sandbox' claims are corrected.
2026-08-08 20:11:21 +08:00
Huanqi Cao
2dd9af6f4b
fix(sandbox): keep read-only strictly zero-grant by dropping the write-allowlist SID from list I
...
A session that materialized its workspace-write grant and then switched to read-only (or crashed and resumed under read-only) kept a writable workspace for the server lifetime: the standing orphan-SID ACE survived the downgrade and list I still carried the orphan, so the write-restricted pass-2 check granted it. List I is now [logon SID, EVERYONE] only — the standing ACE stays inert under read-only while the unrevoked ACE keeps the re-upgrade free (map hit, no re-propagation). Pinned by the runner's real-token mode-downgrade regression (standing ACE denied under read-only, effective again on re-upgrade), the acl-session mode-switch cycle (nothing under read-only, one materialization on upgrade, no revoke on downgrade), and ConstrainedLanguage pins in both modes.
2026-08-08 20:11:01 +08:00
Ziya
5f9456c24f
Merge pull request #1807 from deepseek-harness/feat/web-inline-file-mentions
...
feat(web): a prose mention of a produced file opens it
2026-08-08 04:59:16 -07:00
ZiyaZhang
4db962ecbb
Merge remote-tracking branch 'origin/master' into feat/web-inline-file-mentions
2026-08-08 04:46:48 -07:00
_Kerman
853f929704
refactor(agent-loop): tighten wake-latch comments
2026-08-08 19:42:42 +08:00
_Kerman
df30c62e2b
fix(agent-loop): latch wakes landing in the cancel-convergence window
2026-08-08 19:42:42 +08:00
imccyu
4de2de98e4
fix(client): bound nested Tool call depth
2026-08-08 18:15:34 +08:00
imccyu
091b993198
fix(client): harden nested Tool call projection
2026-08-08 17:59:50 +08:00
imccyu
9ed33dfe4f
refactor(client): localize nested Tool call trees
2026-08-08 17:59:50 +08:00
Huanqi Cao
cc64c729db
Merge remote-tracking branch 'origin/feat/windows-pwsh-default' into feat/windows-acl-sandbox
...
# Conflicts:
# apps/cli/reference/README.i18n.yaml
# knip.json
# packages/sandbox/sandbox-local/package.json
# pnpm-lock.yaml
# scripts/check-workspace-constraints.ts
2026-08-08 17:50:39 +08:00
Huanqi Cao
d1b080a68d
Merge remote-tracking branch 'origin/master' into HEAD
...
# Conflicts:
# .agents/notes/implemented/feature/2026-08-05-pwsh-ui-bash-parity.i18n.yaml
# .agents/notes/implemented/feature/2026-08-05-pwsh-ui-bash-parity.md
# .agents/notes/implemented/feature/2026-08-05-pwsh-ui-bash-parity.zh.md
# apps/cli/reference/README.i18n.yaml
2026-08-08 17:42:47 +08:00
Huanqi Cao
07c7e2f0bd
fix(sandbox): revoke post-apply grant failures, free init SID allocations, and name the Windows runner in SANDBOX_UNAVAILABLE
2026-08-08 17:39:25 +08:00
Huanqi Cao
43d53d339d
fix(pwsh): stamp the calling session's sandbox policy onto pwsh tool calls
2026-08-08 17:30:04 +08:00
Huanqi Cao
abfb933620
feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory
2026-08-08 17:29:43 +08:00
imccyu
871c59c3bc
fix(client): address tool tree review
2026-08-08 17:12:54 +08:00
imccyu
3b31b2eba1
fix: ci
2026-08-08 16:53:25 +08:00
imccyu
c5b37f6845
fix(client): keep compact row in conversation package
2026-08-08 16:53:25 +08:00
imccyu
810bfc4b5e
fix: ci
2026-08-08 16:53:25 +08:00
imccyu
ab50037b93
fix(client): address tool presentation review
2026-08-08 16:53:24 +08:00
imccyu
9c10925340
fix(docs): align ui-tool package contracts
2026-08-08 16:53:24 +08:00
imccyu
67c753dcb7
fix(client): restore built Tool presentation snapshots
2026-08-08 16:53:24 +08:00
imccyu
7cc554ef16
cleanup(client): extract Tool presentation into ui-tool
2026-08-08 16:53:23 +08:00
imccyu
1674af147e
cleanup(client): detach conversation rows from Tool presentation
2026-08-08 16:53:22 +08:00
Tianyi Cui
a44e35793c
Merge pull request #2048 from deepseek-harness/worktree/batch-session-persistence
...
Batch durable session writes with a bounded delay
2026-08-08 16:51:15 +08:00
Tianyi Cui
41b2fd7a70
Merge pull request #1145 from deepseek-harness/fix/f4-ask-user-child-guard
...
fix(user-interaction): guard human interaction by runtime ownership
2026-08-08 16:47:24 +08:00
Tianyi Cui
1576d049ed
fix(session-persistence): close batching failure gaps
2026-08-08 16:43:37 +08:00
Yichen Jiang
3b10120d60
Merge remote-tracking branch 'origin/master' into worktree/sidebar-subagent-activity
...
# Conflicts:
# packages/client/runtime/README.i18n.yaml
2026-08-08 16:37:29 +08:00
Turtle
bd518cb684
Merge pull request #1696 from deepseek-harness/codex/dsh-badge-plugin
...
feat: add optional dsh badge skill provider
2026-08-08 16:33:00 +08:00
Yichen Jiang
d174edf9eb
Merge pull request #2034 from deepseek-harness/worktree/merge-compact-card
...
feat(web): merge compact status and summary cards
2026-08-08 16:23:00 +08:00
Tianyi Cui
2268f0ecec
Merge origin/master into codex/dsh-badge-plugin
2026-08-08 16:03:30 +08:00
Tianyi Cui
a6ef1c2e7e
Merge remote-tracking branch 'origin/master' into codex/unify-landlock-release
2026-08-08 16:03:18 +08:00
Tianyi Cui
dac4b068c4
Merge remote-tracking branch 'origin/master' into codex/unify-landlock-release
...
# Conflicts:
# .agents/notes/implemented/process/2026-07-30-generated-third-party-notices.i18n.yaml
# scripts/check-workspace-constraints.ts
2026-08-08 16:01:53 +08:00
Tianyi Cui
74a8e2e776
Merge remote-tracking branch 'origin/master' into worktree/fix-pr1145-revised-guard-20260808
2026-08-08 16:00:25 +08:00
Tianyi Cui
724a0fb16c
Merge remote-tracking branch 'origin/master' into worktree/batch-session-persistence
2026-08-08 15:54:48 +08:00
Tianyi Cui
b837e30a80
test(apiproxy): register question callers
2026-08-08 15:48:22 +08:00
Tianyi Cui
e3162f3ba6
Merge origin/master into worktree/batch-session-persistence
2026-08-08 15:44:12 +08:00
Tianyi Cui
924c954469
feat(session): bound persistence write batching
2026-08-08 15:43:52 +08:00
Tianyi Cui
f6449c838c
docs: document delegated plan review failure
2026-08-08 15:43:06 +08:00
Tianyi Cui
6d0a14d428
Merge origin/master into codex/dsh-badge-plugin
2026-08-08 15:42:47 +08:00
Tianyi Cui
b9e7db5abf
fix(skill-badge): align with current base contracts
2026-08-08 15:39:19 +08:00
Tianyi Cui
e0f113f55b
Merge origin/master into codex/dsh-badge-plugin
2026-08-08 15:33:41 +08:00
Tianyi Cui
ed808adef3
Merge remote-tracking branch 'refs/remotes/origin/master' into worktree/fix-pr1145-revised-guard-20260808
2026-08-08 15:30:59 +08:00
Tianyi Cui
dc64c5f1c2
fix: guard human interaction by runtime ownership
2026-08-08 15:30:08 +08:00
Tianyi Cui
49dff10abd
fix(workspace-context): commit projections after tool steps
2026-08-08 15:29:36 +08:00
Tianyi Cui
37e4e1585b
fix(compact): enforce replay provenance
2026-08-08 15:28:35 +08:00
Tianyi Cui
8dcfe5c406
fix(replay): mark local compaction calls
2026-08-08 15:28:35 +08:00
Tianyi Cui
d301dbdc7d
Merge pull request #1995 from deepseek-harness/worktree/remove-dsh-cli-demo
...
cleanup(cli): remove separate dsh-cli-demo app
2026-08-08 15:26:56 +08:00
Yichen Jiang
ebd3a87834
fix(web): stabilize compact card snapshots
2026-08-08 15:24:50 +08:00
