You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Sandboxed sessions rejected in-workspace edits while the built-in write succeeded: the shadowed mutating tools called fs.writeText without the per-call sandbox policy, so a confined backend fell back to the deployment root. Tools now mirror @deepseek-ai/dsh-tool-fs's FsSandboxController — resolve the policy with the session cwd as the workspace root, advertise sandbox_permissions/justification, pass the policy to fs.writeText, and map FS_SANDBOX_DENIED to the shared [sandbox: …] marker.