Coder/deepseek-harness
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory

Browse Source
This commit is contained in:
Huanqi Cao
2026-08-08 17:29:43 +08:00
parent 91d3ed6c5a
commit abfb933620
40 changed files with 1239 additions and 118 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
packages/sandbox/sandbox-windows-acl/src/spawn.ts
View File

@@ -87,7 +87,11 @@ export interface SpawnedNative {
/**
* Create a process under the restricted token with piped stdio. The child's
* stdin is closed immediately (EOF), matching the POC; stdout/stderr read ends
* are returned for draining.
* are returned for draining. The child inherits the caller's environment block
* (lpEnvironment NULL); the caller rewrites entries through
* SetEnvironmentVariableW before spawning (the runner's per-session temp
* contract) — passing an explicit block through koffi trips
* ERROR_INVALID_PARAMETER in CreateProcessAsUserW (verified empirically).
* @param api - the binding table.
* @param token - the restricted token the child runs under.
* @param options - command, args, and working directory.