Pine/deepseek-harness
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

fix(sandbox): clear failed ACL temp state

Browse Source
This commit is contained in:
Tianyi Cui
2026-08-10 17:56:38 +08:00
parent be880473e2
commit ba63251c48
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/sandbox/sandbox-windows-acl/src/index.ts
+1
View File
@@ -324,6 +324,7 @@ export class AclSandbox {
this.token = undefined this.token = undefined
this.writeSidPtr = undefined this.writeSidPtr = undefined
this.tempWriteSidPtr = undefined this.tempWriteSidPtr = undefined
this.tempDirResolved = undefined
this.grantedPaths = [] this.grantedPaths = []
if (cleanupFailures.length > 0) { if (cleanupFailures.length > 0) {
throw new AggregateError( throw new AggregateError(
packages/sandbox/sandbox-windows-acl/tests/probe.spec.ts
+9
View File
@@ -98,4 +98,13 @@ describe.skipIf(!isWin32 || !pwshAvailable())('AclSandbox write restriction', ()
const broken = new AclSandbox({ writableDirs: [writableDir], tempDir: null, writeSid: 'S-1-4-abc-1', mode: 'workspace-write' }) const broken = new AclSandbox({ writableDirs: [writableDir], tempDir: null, writeSid: 'S-1-4-abc-1', mode: 'workspace-write' })
await expect(broken.init()).rejects.toThrow(/ConvertStringSidToSidW/u) await expect(broken.init()).rejects.toThrow(/ConvertStringSidToSidW/u)
}, 15_000) }, 15_000)
it('failed init clears provisional temp state before a retry', async () => {
const broken = new AclSandbox({ writableDirs: [writableDir], tempDir: null, writeSid: 'S-1-4-abc-1', mode: 'workspace-write' })
const provisionalState = broken as unknown as { tempDirResolved: string | undefined }
provisionalState.tempDirResolved = isolatedTemp
await expect(broken.init()).rejects.toThrow(/ConvertStringSidToSidW/u)
expect(broken.tempDir).toBeUndefined()
}, 15_000)
}) })