mirror of
https://github.com/deepseek-ai/deepseek-harness.git
synced 2026-09-09 04:02:35 +00:00
imccyu
c732dedc69
@yao-pkg/pkg's SEA bootstrap rewrites child_process commands named node -- including the string after a -c flag, exactly the Bash tool's bash -c form -- to the executable itself and stamps PKG_EXECPATH into every child environment, so a model-issued 'node --version' silently booted the dsh CLI instead of the machine's Node. Pin the packager as an exact root devDependency invoked through pnpm exec and patch out the single patchChildProcess call from the SEA bootstrap bundle; packaged children now resolve node through PATH like any other process. The third-party notices drop the build-time tools section: the packager is now a declared, patched devDependency, so the manifest and patch tiers disclose it.
13 lines
640 B
Diff
13 lines
640 B
Diff
diff --git a/prelude/sea-bootstrap.bundle.js b/prelude/sea-bootstrap.bundle.js
|
|
index ac14980e953134f2285e326a5111cf52de717cf5..6b0c9d5b5063f447cb8aa3e0fc9d342729f29989 100644
|
|
--- a/prelude/sea-bootstrap.bundle.js
|
|
+++ b/prelude/sea-bootstrap.bundle.js
|
|
@@ -5560,7 +5560,6 @@ var require_sea_bootstrap_core = __commonJS({
|
|
var insideSnapshot = vfs.insideSnapshot;
|
|
var SNAPSHOT_PREFIX = vfs.SNAPSHOT_PREFIX;
|
|
shared.patchDlopen(insideSnapshot);
|
|
- shared.patchChildProcess(entrypoint2);
|
|
shared.setupProcessPkg(entrypoint2, manifest2.entrypoint);
|
|
if (manifest2.debug) {
|
|
shared.installDiagnostic(SNAPSHOT_PREFIX);
|