mirror of
https://github.com/deepseek-ai/deepseek-harness.git
synced 2026-09-09 04:02:35 +00:00
@yao-pkg/pkg's SEA bootstrap rewrites child_process commands named node -- including the string after a -c flag, exactly the Bash tool's bash -c form -- to the executable itself and stamps PKG_EXECPATH into every child environment, so a model-issued 'node --version' silently booted the dsh CLI instead of the machine's Node. Pin the packager as an exact root devDependency invoked through pnpm exec and patch out the single patchChildProcess call from the SEA bootstrap bundle; packaged children now resolve node through PATH like any other process. The third-party notices drop the build-time tools section: the packager is now a declared, patched devDependency, so the manifest and patch tiers disclose it.