Coder/deepseek-harness
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: rebalance prose cleanup and add trimming skill

Browse Source
This commit is contained in:
Tianyi Cui
2026-07-13 23:27:00 +08:00
parent fcdc318dda
commit 148046b9c8
392 changed files with 2801 additions and 1754 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
examples/sandbox-acp-agent/tests/acp.snapshot.ts
View File

@@ -3,20 +3,25 @@ import { fileURLToPath } from 'node:url'
import { defineAcpSnapshotSuite, type Scenario, type SnapshotSuiteOptions } from '@deepseek-ai/dsh-acp-snapshot'
/**
* Snapshot suite for the sandboxed composition (`../cordis.yml`, swapped to the sibling
* `cordis.snapshot.yml` replay overlay by the bin under `DSH_SNAPSHOT=replay`).
* Snapshot suite for the sandboxed composition. Replay swaps only the model;
* bash still runs under the host's Seatbelt/bwrap backend, so fixtures use
* portable `cat`/`printf` commands. Real denial stderr is deliberately absent
* because its wording varies by backend and platform; unit and kernel e2e tests
* own that path, while escalation fixtures start from a user-stated denial.
*/
const SCENARIOS: Scenario[] = [
// Protocol-only (keyless, authored): the session config-option surface this composition adds
// — both advertised selects on session/new, the complete refreshed state every
// session/set_config_option answers with, and both rejection shapes — as committed wire
// bytes.
// bytes. It runs no bash and therefore works without a sandbox runner.
{ name: 'config-options', hasModelTurn: false, recorded: false },
// The runtime mode-switching arc, and NECESSARILY the pinned-header scenario: an
// approval-policy switch rewrites its prompt section, and the resulting request/header-delta
// is legal only in the pinning scenario (the factory's uniformity guard).
// is legal only in the pinning scenario. The pin includes that delta and
// notice; the sandbox switch stays prompt-silent and is proven by a confined write.
{ name: 'mode-switching', hasModelTurn: true, recorded: true, pinsHeader: true, expectedHeaderDeltas: 1 },
// Pin both approval branches under the default read-only/ask policy.
// Under default read-only/ask, approval executes a confined retry; rejection
// executes nothing and returns deterministic text.
{ name: 'escalation-approved', hasModelTurn: true, recorded: true },
{ name: 'escalation-rejected', hasModelTurn: true, recorded: true },
]

9
examples/sandbox-acp-agent/tests/escalation.e2e.ts
View File

@@ -17,7 +17,10 @@ import {
} from '@agentclientprotocol/sdk'
/**
* examples/sandbox-acp-agent end to end.
* Sandbox ACP end to end. The keyless leg boots the real composition through
* initialize and session/new without a model or runner. With a key and runner,
* a scripted client grants a read-only denial's escalation once and the retried
* write must land on disk; unavailable prerequisites self-skip.
*/
const binScript = fileURLToPath(new URL('../../../packages/ui/acp-agent/src/bin.ts', import.meta.url))
@@ -27,8 +30,8 @@ const tsxLoader = fileURLToPath(import.meta.resolve('tsx'))
// tsconfig so the unbuilt `paths` map resolves (see examples/AGENTS.md).
const repoTsconfig = fileURLToPath(new URL('../../../tsconfig.json', import.meta.url))
// A usable confining runner, probed the same way the executor suites do: bwrap on Linux,
// Seatbelt's sandbox-exec on macOS.
// Without a usable bwrap/Seatbelt runner, the strict attempt fails closed with
// SANDBOX_UNAVAILABLE instead of producing the denial this flow requires.
const hasBwrap = spawnSync('bwrap', ['--ro-bind', '/', '/', '--dev', '/dev', '--proc', '/proc', '--die-with-parent', '--', 'true'], {
timeout: 5_000,
stdio: 'ignore',