{"record":{"id":"1ca5364a704fc2a9","repo":"deepseek-ai/deepseek-harness","slug":"aclsandbox-init-failed-and-cleanupfailures-lengt","errorCode":null,"errorMessage":"AclSandbox init failed and ${cleanupFailures.length} cleanup operation(s) also failed","messagePattern":"AclSandbox init failed and (.+?) cleanup operation\\(s\\) also failed","errorType":"exception","errorClass":"AggregateError","httpStatus":null,"severity":"error","filePath":"packages/sandbox/sandbox-windows-acl/src/index.ts","lineNumber":332,"sourceCode":"        try {\n          revokeWrite(api, grant.path, grant.sidPtr)\n        } catch (cleanupError) {\n          cleanupFailures.push(cleanupError)\n        }\n      }\n      for (const [label, sidPtr] of [['workspace write SID', this.writeSidPtr], ['temp write SID', this.tempWriteSidPtr]] as const) {\n        freeSidBestEffort(api, sidPtr, label, cleanupFailures)\n      }\n      for (const sidPtr of this.sidAllocations.splice(0)) {\n        freeSidBestEffort(api, sidPtr, 'init SID allocation', cleanupFailures)\n      }\n      this.token = undefined\n      this.writeSidPtr = undefined\n      this.tempWriteSidPtr = undefined\n      this.tempDirResolved = undefined\n      this.grantedPaths = []\n      if (cleanupFailures.length > 0) {\n        throw new AggregateError(\n          [error, ...cleanupFailures],\n          `AclSandbox init failed and ${cleanupFailures.length} cleanup operation(s) also failed`,\n        )\n      }\n      throw error\n    }\n  }\n\n  /**\n   * Spawn a process under the restricted token. Fails closed: throws on every\n   * Win32 failure; the child is never created unrestricted. With\n   * `stdio: 'inherit'` the child shares the caller's stdio directly and is\n   * placed in a kill-on-close job (dies with the caller). Call dispose() only\n   * after all children have exited — revoking grants under a live child\n   * removes its remaining write allowance.\n   * @param options - the program, argv/cwd, and stdio shape.\n   * @returns the running child.\n   */","sourceCodeStart":314,"sourceCodeEnd":350,"githubUrl":"https://github.com/deepseek-ai/deepseek-harness/blob/b150a551b8d465e31e418e1b2eaf5e79bbb7d28e/packages/sandbox/sandbox-windows-acl/src/index.ts#L314-L350","documentation":"Error \"AclSandbox init failed and ${cleanupFailures.length} cleanup operation(s) also failed\" thrown in deepseek-ai/deepseek-harness.","triggerScenarios":"Thrown at packages/sandbox/sandbox-windows-acl/src/index.ts:332 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Fix the root initialization failure first, then inspect the attached cleanup failure causes and remove leftover ACL entries manually."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b150a551b8d465e31e418e1b2eaf5e79bbb7d28e","analyzedAt":"2026-08-24T18:12:29.105Z","schemaVersion":2},"datasetVersion":"2026-08-24T22:17:12.610Z"}