From 9c5a5155016c8a79a0c58593a48ed0795c9fb47b Mon Sep 17 00:00:00 2001 From: Turtle Date: Thu, 30 Jul 2026 16:52:14 +0800 Subject: [PATCH] fix(example): drop the never-activated bash stack from the inheritance fixture dsh-bash-local injects `subprocess`, which this tree never mounted, so the bash chain sat PENDING and the bundle's tool-bash waited with it. The shared boot() all-ACTIVE assertion now surfaces that as a load failure. The scenario probes filesystem confinement only, so the rows are removed and the bundle opts out with `toolBash: false`. The recorded transcript is unchanged because bash never reached the model. --- .../subagent-inheritance.cordis.snapshot.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml b/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml index fb614a5372..554fb620fd 100644 --- a/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml +++ b/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml @@ -16,11 +16,6 @@ - id: replay name: '@deepseek-ai/dsh-llm-replay' -- id: bash - name: '@deepseek-ai/dsh-bash-local' - config: - timeoutMs: 60000 - # The confining filesystem stack: the wide deployment default lives on the # shared policy home; the seeded parent's read-only override must beat it # INSIDE the child for the scenario to deny. @@ -39,6 +34,9 @@ - id: tool-fs name: '@deepseek-ai/dsh-tool-fs' +# This scenario probes filesystem confinement only, so the bash stack is absent: +# without it the bundle's `toolBash: false` is required, because `tool-bash` would +# otherwise wait forever for a `bash` executor this tree never mounts. - id: agent name: '@deepseek-ai/dsh-agent-spine-demo' config: @@ -46,6 +44,7 @@ workspaceContext: false skills: enabled: false + toolBash: false toolTasks: false goals: false