deepseek-harness/scripts
kingwl ca39fd89b0 feat(example): sandbox-acp-agent — the live composition; RFCs to implemented
The three-entry cordis.yml (dsh-sandbox-local + dsh-bash-sandbox at a
read-only default + dsh-approval) served over ACP: the first live approval
composition. Recorded snapshot scenarios pin the wire end to end —
config-options advertisement, the mode-switching arc as the suite pinned
header (both switches, the prompt-section delta, one changed-by-the-user
notice per knob, a confined write landing under the switched mode), and
both escalation branches over scripted permissionAnswers (a grant runs
confined under workspace-write; a rejection executes nothing and pins the
fail-closed text). The with-key escalation e2e drives a real model +
real runner + the real bridge answerer, world-verified; ci.yml snapshot
lane and e2e.yml install bubblewrap so the confined replays actually
execute.

Both RFCs move to implemented/ (Decision/Consequences form, deferred
phases tracked in their own sections), with every cross-reference flipped.
2026-07-10 15:44:38 +08:00
..
check-vendor-manifest.sh Add lefthook git hooks with a vendor-manifest guard 2026-06-11 15:07:55 +08:00
check-workspace-constraints.ts workflow: swap the engine's internals to node:worker_threads 2026-07-09 19:31:14 +08:00
demo-code-mode.mjs refactor: unify the Code Mode demos on base-plus-overlay 2026-07-09 13:02:19 +08:00
doc-budgets.manifest.json feat(example): sandbox-acp-agent — the live composition; RFCs to implemented 2026-07-10 15:44:38 +08:00
doc-typecheck.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
gen-config-catalog.ts feat(example): sandbox-acp-agent — the live composition; RFCs to implemented 2026-07-10 15:44:38 +08:00
gen-cordis-api.ts scripts: gen-cordis-api — the generated runtime API catalog pipeline 2026-07-09 13:57:03 +08:00
gen-cordis-catalog.ts scripts: gen-cordis-api — the generated runtime API catalog pipeline 2026-07-09 13:57:03 +08:00
gen-doc-graphs.ts feat(tool-bash): sandbox escalation — one approved wider retry after a denial 2026-07-10 15:43:28 +08:00
gen-module-graph.ts chore: register the cordis group across repo gates and docs 2026-07-09 13:57:03 +08:00
gen-persistence-catalog.ts docs: flatten single-file catalog dirs to docs/tool-catalog.md and docs/persistence-catalog.md 2026-07-06 22:26:06 +08:00
gen-rfc-index.ts docs(rfc): define and enforce a uniform RFC format; adopt it across the corpus 2026-07-05 22:58:25 +08:00
gen-tool-catalog.ts Merge remote-tracking branch 'origin/master' into workflow-vm-to-workerthread 2026-07-09 23:48:17 +08:00
install-lefthook.mjs fix(dev): make hooks and bash seams safer 2026-06-17 21:26:44 +08:00
jsdoc.ts Merge remote-tracking branch 'origin/master' into worktree-export-jsdoc-gate 2026-07-07 09:34:12 +08:00
publint-all.ts chore: parallelize pre-push gates 2026-07-06 00:52:00 +08:00
rfc-index.ts docs(rfc): define and enforce a uniform RFC format; adopt it across the corpus 2026-07-05 22:58:25 +08:00
run-gates.ts Merge remote-tracking branch 'origin/master' into workflow-vm-to-workerthread 2026-07-09 21:34:52 +08:00
translation-pairing.manifest.json fix: retarget the i18n pairing exclusions to the flattened catalog paths 2026-07-07 00:08:55 +08:00
type-equiv.manifest.json feat(bash): the sandboxed executor — per-call policy carrier, denial facts, runner-failure classification 2026-07-10 15:43:02 +08:00
verify-doc-budgets.ts docs(budgets): ceilings carry at least 5% working headroom 2026-07-04 17:20:18 +08:00
verify-doc-refs.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
verify-export-jsdoc.ts fix review findings: CI leaf-gate wiring, heritage return surface, AGENTS.md self-containedness 2026-07-07 20:30:34 +08:00
verify-md-links.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
verify-md-wrap.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
verify-mermaid.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
verify-node-next-types.ts docs: update rewriteRelativeImportExtensions to current rfc 2026-06-22 09:03:28 +08:00
verify-package-paths.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
verify-rfc-classification.ts docs(rfc): define and enforce a uniform RFC format; adopt it across the corpus 2026-07-05 22:58:25 +08:00
verify-rfc-format.ts docs(rfc): address Codex review — fence-aware format gate, exact corpus counts 2026-07-05 23:45:34 +08:00
verify-translation-pairing.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00
verify-type-equiv.ts fix(scripts): replace async fs glob with globSync (failed on Node 22.18) 2026-07-07 17:15:41 +08:00