Skip to content

v0.1.3

Choose a tag to compare

@Rianico Rianico released this 15 Aug 15:39
· 28 commits to main since this release

Fixed

  • Sandboxed sessions rejected in-workspace edits while the built-in write succeeded: the shadowed mutating tools called fs.writeText without the per-call sandbox policy, so a confined backend fell back to the deployment root. Tools now mirror @deepseek-ai/dsh-tool-fs's FsSandboxController — resolve the policy with the session cwd as the workspace root, advertise sandbox_permissions/justification, pass the policy to fs.writeText, and map FS_SANDBOX_DENIED to the shared [sandbox: …] marker.