c0146b9c4a
Review follow-up (tianyicui): plan mode and the sandbox are orthogonal
AXES, not just orthogonal state — entering plan must not change what the
sandbox enforces, matching Codex's separation of Plan/Default
collaboration presets from sandbox and approval settings.
ModeDefinition.access, the bash/resolve-mode clamp, and both cap-derived
guards are removed; a ModeDefinition is exactly { section }, and a mode
now carries only its guidance section plus the exit_plan_mode review.
The bash seam's resolveMode + waterfall go with their only listener:
dsh-bash and dsh-tool-bash revert to master byte-for-byte, and the
dsh-mode → dsh-bash dependency edge is gone. A deployment that wants
kernel-enforced read-only planning pairs the mode picker with the
independent sandbox-mode option, in either order.
The RFC archives this as the second removed enforcement shape (after
the interim allowlist) with the same restart trigger — effects
self-declaration; the orthogonality FAQ now answers with the two-axis
rule. The plan example demonstrates the axes side by side, and the
re-recorded fixtures pin the guidance-only section.
67 lines
2.7 KiB
Markdown
67 lines
2.7 KiB
Markdown
<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
|
|
|
|
# ctx.bash
|
|
|
|
`BashExecutor` (abstract seam) — provided by `@deepseek-ai/dsh-bash`.
|
|
|
|
Abstract bash execution service. Subclass, implement the abstract methods, and load the subclass as a plugin — it registers as `ctx.bash` (one implementation per context; loading a second throws, which is cordis' standard duplicate-service behavior).
|
|
Implementations must honor these semantics:
|
|
- run rejects only for infrastructure failures. Nonzero exits, timeout kills, and abort kills resolve with a BashRunResult.
|
|
- start returns immediately; no timeout applies to background processes. `done` settles at process close and never rejects; spawn failures settle as `killed` with the error on stderr.
|
|
- BashProcess.readOutput is incremental: consecutive reads never repeat output. Lossy reads report truncation and available spill files.
|
|
- Disposal kills all running background processes and awaits their exit.
|
|
|
|
[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L49)
|
|
|
|
### ctx.bash.sandboxMode
|
|
|
|
```ts website-api
|
|
get sandboxMode(): SandboxMode | undefined
|
|
```
|
|
|
|
The sandbox mode this executor applies by default, or `undefined` when it does not sandbox commands.
|
|
|
|
[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L59)
|
|
|
|
### ctx.bash.resolve(request)
|
|
|
|
```ts website-api
|
|
abstract resolve(request: BashExecRequest): BashExecSpec
|
|
```
|
|
|
|
Apply implementation-owned defaults and caps to a request before execution.
|
|
|
|
- `request` — the caller's request; omitted fields get this implementation's defaults, capped fields are clamped.
|
|
|
|
**Returns** the fully-specified spec to hand to `run`/`start`.
|
|
|
|
[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L69)
|
|
|
|
### ctx.bash.run(spec)
|
|
|
|
```ts website-api
|
|
abstract run(spec: BashExecSpec): Promise<BashRunResult>
|
|
```
|
|
|
|
Run a command in the foreground; resolves when it finishes.
|
|
|
|
- `spec` — a resolved spec from `resolve`, never a raw request.
|
|
|
|
**Returns** the outcome; nonzero exits, timeout kills, and abort kills resolve with a descriptive result rather than reject.
|
|
|
|
[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L77)
|
|
|
|
### ctx.bash.start(spec)
|
|
|
|
```ts website-api
|
|
abstract start(spec: BashExecSpec): BashProcess
|
|
```
|
|
|
|
Start a background process and return its handle immediately.
|
|
|
|
- `spec` — a resolved spec from `resolve`, never a raw request.
|
|
|
|
**Returns** the live process handle (reads, kill, quiescence promise).
|
|
|
|
[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L84)
|