Coder/deepseek-harness
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(e2b): harden SDK shell and cleanup boundaries

Browse Source 
E2B starts command and PTY requests through login shells, so isolate each control shell behind a fresh randomized HOME and blank sandbox credential names before mutable profiles can run. Preserve the real remote HOME only for the requested argv.

Collapse duplicate termination state, keep failed force cleanup retryable until quiescence is observed, and make terminal state allocation cancellable. Leave numeric PGID reuse as an explicit provider-level TODO because a userspace precheck would remain TOCTOU.
This commit is contained in:
Tianyi Cui
2026-07-29 15:30:32 +08:00
parent 091af03a81
commit 81e2e1f647
21 changed files with 438 additions and 211 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
packages/e2b/subprocess-e2b/README.i18n.yaml
View File

@@ -2,5 +2,5 @@
# side as of the last confirmed-consistent state. Both languages carry equal authority;
# after editing either side, bring the other along and re-record with:
# pnpm run verify-translation-pairing --write packages/e2b/subprocess-e2b/README.md
README.md: aaac559e60162c3051cc6f06cbcfac011f5eb59a
README.zh.md: 904e4fd1d9a13082ddfc8183c0e42abc25bd1caf
README.md: 9b86af428533ebcc2c0da56339e6ea2a28170fd3
README.zh.md: e3e8368534266e35ec04dcf5a2d6718829b4a016