Pine/deepseek-harness
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

feat(tool-pwsh): teach the confined named-pipe capture boundary to the model

Browse Source 
Under read-only and workspace-write the Windows ACL sandbox leaves
programs unable to open named pipes, so a piped-stdio spawn fails with
EPERM. State that boundary in the pwsh tool description next to the
ConstrainedLanguage contract, pin it in the tool tests, and bring the
package README and both implemented Agent Notes current with it.
This commit is contained in:
Huanqi Cao
2026-08-09 16:34:25 +08:00
parent 8f2c7c5047
commit 33e4c6580f
11 changed files with 34 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/bash/tool-pwsh/tests/tools.spec.ts
+5 -2
View File
@@ -552,13 +552,15 @@ describe('sandbox escalation through ctx.approval', () => {
justification: 'the command needs workspace writes',
}
it('advertises the sandbox fields, the escalation clause, and the ConstrainedLanguage contract', async () => {
it('advertises the sandbox fields, the escalation clause, and the confined-mode contracts', async () => {
const { ctx } = await setupSandboxed()
const schema = ctx.tools.schemas().find(item => item.name === 'pwsh')!
const properties = schema.parameters.properties as Record<string, { enum?: string[] }>
expect(properties['sandbox_permissions']?.enum).toEqual(['workspace-write', 'danger-full-access'])
expect(schema.description).toContain('approval prompt')
expect(schema.description).toContain('ConstrainedLanguage')
expect(schema.description).toContain('named pipes')
expect(schema.description).toContain('fails with EPERM')
for (const args of [
{ command: 'Write-Output ok', description: 'd', sandbox_permissions: 'workspace-write' },
@@ -569,10 +571,11 @@ describe('sandbox escalation through ctx.approval', () => {
}
})
it('the escalation fields and the ConstrainedLanguage clause stay out of sandbox-less compositions', async () => {
it('the escalation fields and the confined-mode clauses stay out of sandbox-less compositions', async () => {
const { ctx } = await setup()
const schema = ctx.tools.schemas().find(item => item.name === 'pwsh')!
expect(schema.description).not.toContain('ConstrainedLanguage')
expect(schema.description).not.toContain('named pipes')
expect(schema.description).not.toContain('sandbox_permissions')
expect(schema.parameters.properties).not.toHaveProperty('sandbox_permissions')
})