Files
deepseek-harness/examples/acp-agent/tests/snapshots/escalation-approved/session.jsonl
Hypatia May a23a6bdd15 Merge origin/master into codex/status-bar-token-metrics
Resolve the agent-loop import conflict by retaining both durable request context and runtime policy context. Refresh the combined session fixtures and regenerate documentation catalogs. Mark PDF artifacts as binary so staged whitespace checks do not parse PDF bytes as text.
2026-07-31 16:53:03 +08:00

36 lines
10 KiB
JSON

{"type":"session","version":0,"id":"f3cbd087-fb45-4b32-b0f2-3082d65bfcb4","createdAt":1783860675270,"cwd":"{{cwd}}","delegationDepth":0}
{"type":"turn/start","seq":0,"time":1783860675271,"data":{"turn":1,"trigger":{"kind":"message","source":{"kind":"user"}}}}
{"type":"user/message","seq":1,"time":1784821261714,"data":{"content":[{"type":"text","text":"The sandbox already denied writing /tmp/dsh-escalated.txt earlier (it is outside this workspace). Retry it now exactly once: one single bash call with the command printf 'escalated\\n' > /tmp/dsh-escalated.txt && cat /tmp/dsh-escalated.txt && rm /tmp/dsh-escalated.txt, with sandbox_permissions set to danger-full-access and the justification 'the user asked to write a file outside the workspace'. Do not run it without sandbox_permissions first. I will approve the permission prompt. After the result, reply with the single word DONE and stop."}],"source":{"kind":"user"},"role":"user","id":"beebaefe-58d1-48a2-80fe-e8108b3a33aa"},"surfaceOp":"append"}
{"type":"session/title","seq":2,"time":1784821261714,"data":{"title":"The sandbox already denied writing","messageSeqs":[1],"source":{"kind":"fallback"}}}
{"type":"user/message","seq":3,"time":1785464676286,"data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent DSH file policy: workspace-write. Any available operation enforced by the DSH file sandbox may modify files under the session workspace: \"{{cwd}}\". Some platform temporary areas may also be writable.\n\nApproval policy: ask. Operations that require approval may ask through the configured answerers; without an available answerer, the request fails closed."}],"source":{"kind":"plugin","plugin":"@deepseek-ai/dsh-system-prompt"},"role":"user","id":"1bb48742-b971-44f6-b519-0ddafe9b0b32"},"surfaceOp":"append"}
{"type":"step/start","seq":4,"time":1785464676286,"data":{"turn":1,"step":1}}
{"type":"request/header","seq":5,"time":1785464676286,"data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash"},"system":"{{system}}","tools":"{{tools}}"},"reason":"initial"}}
{"type":"request/context","seq":6,"time":1785487647359,"data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
{"type":"assistant/chunk","seq":7,"time":1784821261748,"data":{"turn":1,"step":1,"chunk":{"type":"block-start","index":0,"blockType":"reasoning"}}}
{"type":"reasoning-chunks","seq0":8,"time0":1784821261748,"data":{"turn":1,"step":1,"index":0,"dt":[-960585284,1,0,0,0,34,0,0,23,3,0,0,28,0,1,0,0,29,0,28,28,1,32,1,32,23,59],"texts":["The"," user"," wants"," me"," to"," run"," a"," command"," with"," sand","box","_per","missions"," set"," to"," danger","-full","-access",","," no"," prior"," run"," needed",","," justified"," as"," instructed","."]}}
{"type":"assistant/chunk","seq":36,"time":1783860676788,"data":{"turn":1,"step":1,"chunk":{"type":"block-start","index":1,"blockType":"tool-call"}}}
{"type":"tool-call-chunks","seq0":37,"time0":1783860676816,"data":{"turn":1,"step":1,"index":1,"dt":[0,0,0,29,0,1,0,32,0,0,0,0,1,30,2,1,0,0,27,2,0,0,0,26,2,0,1,0,0,33,0,0,0,1,0,22,0,0,0,0,0,29,30,2,0,0,0,28,0,1,0,30,1,1,26,28,0,0,0,0,36,0,0,0,37,0,1,0,16,1,27,1,0,0,28,0,0,0,0,0,39,0,0,0,104,1,0,0],"id":"call_00_d0sAHpJ9mYOJi0z7KNy30441","name":"bash","args":["","{","\"","command","\"",": ","\"","printf"," '","es","cal","ated","\\\\n","'"," >"," /","tmp","/d","sh","-es","cal","ated",".txt"," &&"," cat"," /","tmp","/d","sh","-es","cal","ated",".txt"," &&"," rm"," /","tmp","/d","sh","-es","cal","ated",".txt","\"",", ","\"","description","\"",": ","\"","Write"," file"," outside"," workspace"," and"," verify","\"",", ","\"","sand","box","_per","missions","\"",": ","\"","danger","-full","-access","\"",", ","\"","just","ification","\"",": ","\"","the"," user"," asked"," to"," write"," a"," file"," outside"," the"," workspace","\"","}"]}}
{"type":"assistant/chunk","seq":126,"time":1783860677493,"data":{"turn":1,"step":1,"chunk":{"type":"block-end","index":0,"block":{"type":"reasoning","text":"The user wants me to run a command with sandbox_permissions set to danger-full-access, no prior run needed, justified as instructed."}}}}
{"type":"assistant/chunk","seq":127,"time":1783860677493,"data":{"turn":1,"step":1,"chunk":{"type":"block-end","index":1,"block":{"type":"tool-call","id":"call_00_d0sAHpJ9mYOJi0z7KNy30441","name":"bash","arguments":"{\"command\": \"printf 'escalated\\\\n' > /tmp/dsh-escalated.txt && cat /tmp/dsh-escalated.txt && rm /tmp/dsh-escalated.txt\", \"description\": \"Write file outside workspace and verify\", \"sandbox_permissions\": \"danger-full-access\", \"justification\": \"the user asked to write a file outside the workspace\"}"}}}}
{"type":"assistant/chunk","seq":128,"time":1785464676300,"data":{"turn":1,"step":1,"chunk":{"type":"usage","usage":{"inputTokens":1501,"outputTokens":174,"cacheReadTokens":0,"reasoningTokens":28}}}}
{"type":"assistant/chunk","seq":129,"time":1785487647372,"data":{"turn":1,"step":1,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}}
{"type":"assistant/message","seq":130,"time":1785487647372,"data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"reasoning","text":"The user wants me to run a command with sandbox_permissions set to danger-full-access, no prior run needed, justified as instructed."},{"type":"tool-call","id":"call_00_d0sAHpJ9mYOJi0z7KNy30441","name":"bash","arguments":"{\"command\": \"printf 'escalated\\\\n' > /tmp/dsh-escalated.txt && cat /tmp/dsh-escalated.txt && rm /tmp/dsh-escalated.txt\", \"description\": \"Write file outside workspace and verify\", \"sandbox_permissions\": \"danger-full-access\", \"justification\": \"the user asked to write a file outside the workspace\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"a0a715de-89d5-4e16-8171-ed394b25915c"},"usage":{"inputTokens":1501,"outputTokens":174,"cacheReadTokens":0,"reasoningTokens":28}},"sourceEventSeqs":[7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129],"surfaceOp":"append"}
{"type":"tool/call","seq":131,"time":1785487647372,"data":{"turn":1,"step":1,"callId":"call_00_d0sAHpJ9mYOJi0z7KNy30441","name":"bash","arguments":"{\"command\": \"printf 'escalated\\\\n' > /tmp/dsh-escalated.txt && cat /tmp/dsh-escalated.txt && rm /tmp/dsh-escalated.txt\", \"description\": \"Write file outside workspace and verify\", \"sandbox_permissions\": \"danger-full-access\", \"justification\": \"the user asked to write a file outside the workspace\"}"}}
{"type":"approval/asked","seq":132,"time":1785487647380,"data":{"id":"522686b2-f12a-41b7-b6e7-cbb422a9f866","toolName":"bash","callId":"call_00_d0sAHpJ9mYOJi0z7KNy30441","reason":"escalate sandbox to danger-full-access: the user asked to write a file outside the workspace"}}
{"type":"approval/decided","seq":133,"time":1785487647382,"data":{"id":"522686b2-f12a-41b7-b6e7-cbb422a9f866","outcome":"allowed-once"}}
{"type":"tool/result","seq":134,"time":1785487647399,"data":{"turn":1,"step":1,"message":{"source":{"kind":"tool","callId":"call_00_d0sAHpJ9mYOJi0z7KNy30441"},"content":[{"type":"tool-result","toolCallId":"call_00_d0sAHpJ9mYOJi0z7KNy30441","content":[{"type":"text","text":"escalated\n"}],"isError":false}],"role":"user","id":"a6bb0ebd-16b1-4d66-93b8-dfa72eb9553e"}},"sourceEventSeqs":[131],"surfaceOp":"append"}
{"type":"step/end","seq":135,"time":1785487647400,"data":{"turn":1,"step":1}}
{"type":"step/start","seq":136,"time":1785487647408,"data":{"turn":1,"step":2}}
{"type":"assistant/chunk","seq":137,"time":1784821261788,"data":{"turn":1,"step":2,"chunk":{"type":"block-start","index":0,"blockType":"reasoning"}}}
{"type":"reasoning-chunks","seq0":138,"time0":1784821261788,"data":{"turn":1,"step":2,"index":0,"dt":[-960582977,0,22,1,0,34,0,0,36,1,21,0,0,49,1,0,0,0,0,23,2,1,0,0,14,1,0,0,29,1,1,0,31,0,24,33,0,0],"texts":["The"," command"," succeeded"," —"," it"," wrote"," the"," file",","," read"," it"," back"," (","output"," \"","es","cal","ated","\"),"," and"," removed"," it","."," The"," user"," asked"," me"," to"," reply"," with"," the"," single"," word"," D","ONE"," after"," the"," result","."]}}
{"type":"assistant/chunk","seq":177,"time":1783860679136,"data":{"turn":1,"step":2,"chunk":{"type":"block-start","index":1,"blockType":"text"}}}
{"type":"assistant/chunk","seq":178,"time":1783860679136,"data":{"turn":1,"step":2,"chunk":{"type":"text-delta","index":1,"text":"D"}}}
{"type":"assistant/chunk","seq":179,"time":1783860679137,"data":{"turn":1,"step":2,"chunk":{"type":"text-delta","index":1,"text":"ONE"}}}
{"type":"assistant/chunk","seq":180,"time":1783860679137,"data":{"turn":1,"step":2,"chunk":{"type":"block-end","index":0,"block":{"type":"reasoning","text":"The command succeeded — it wrote the file, read it back (output \"escalated\"), and removed it. The user asked me to reply with the single word DONE after the result."}}}}
{"type":"assistant/chunk","seq":181,"time":1783860679137,"data":{"turn":1,"step":2,"chunk":{"type":"block-end","index":1,"block":{"type":"text","text":"DONE"}}}}
{"type":"assistant/chunk","seq":182,"time":1785464676343,"data":{"turn":1,"step":2,"chunk":{"type":"usage","usage":{"inputTokens":27,"outputTokens":42,"cacheReadTokens":1664,"reasoningTokens":39}}}}
{"type":"assistant/chunk","seq":183,"time":1785487647415,"data":{"turn":1,"step":2,"chunk":{"type":"finish","reason":{"kind":"stop"}}}}
{"type":"assistant/message","seq":184,"time":1785487647415,"data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"reasoning","text":"The command succeeded — it wrote the file, read it back (output \"escalated\"), and removed it. The user asked me to reply with the single word DONE after the result."},{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"73a958f0-102f-4671-b780-b650cedcac53"},"usage":{"inputTokens":27,"outputTokens":42,"cacheReadTokens":1664,"reasoningTokens":39}},"sourceEventSeqs":[137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183],"surfaceOp":"append"}
{"type":"step/end","seq":185,"time":1785487647415,"data":{"turn":1,"step":2}}
{"type":"turn/end","seq":186,"time":1785487647415,"data":{"turn":1,"reason":{"kind":"completed"}}}