{"record":{"id":"9fc7292a38a62859","repo":"deepseek-ai/deepseek-harness","slug":"windows-acl-run-detail","errorCode":null,"errorMessage":"windows-acl-run: ${detail}","messagePattern":"windows-acl-run: (.+?)","errorType":"console","errorClass":null,"httpStatus":null,"severity":"error","filePath":"packages/sandbox/sandbox-windows-acl/src/runner.ts","lineNumber":61,"sourceCode":" * signature. The child is NEVER spawned unrestricted.\n * @module @deepseek-ai/dsh-sandbox-windows-acl/runner\n */\n\nimport { existsSync, mkdtempSync, rmSync, statSync } from 'node:fs'\nimport { join } from 'node:path'\n\nimport { win32 } from './ffi.ts'\nimport { AclSandbox, assertTempRootOutsideWorkspace } from './index.ts'\nimport { tempWriteSid, workspaceWriteSid } from './workspace-sid.ts'\n\nconst RUNNER_SIGNATURE = 'windows-acl-run'\nconst RUNNER_FAILURE_EXIT = 127\n\nclass RunnerFailure extends Error {}\n\n/** Print the runner-failure signature line and unwind. */\nfunction fail(detail: string): never {\n  process.stderr.write(`${RUNNER_SIGNATURE}: ${detail}\\n`)\n  throw new RunnerFailure(detail)\n}\n\ninterface ParsedArgs {\n  workspace: string\n  temp: string\n  mode: 'read-only' | 'workspace-write'\n  writeSid: string | undefined\n  tempWriteSid: string | undefined\n  command: string\n  args: string[]\n}\n\nfunction parseArgs(raw: string[]): ParsedArgs {\n  let workspace: string | undefined\n  let temp: string | undefined\n  let mode: string | undefined\n  let writeSid: string | undefined","sourceCodeStart":43,"sourceCodeEnd":79,"githubUrl":"https://github.com/deepseek-ai/deepseek-harness/blob/b150a551b8d465e31e418e1b2eaf5e79bbb7d28e/packages/sandbox/sandbox-windows-acl/src/runner.ts#L43-L79","documentation":"Error \"windows-acl-run: ${detail}\" thrown in deepseek-ai/deepseek-harness.","triggerScenarios":"Thrown at packages/sandbox/sandbox-windows-acl/src/runner.ts:61 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Read the detail in the message for the failing step and fix the reported ACL, token, or spawn precondition."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b150a551b8d465e31e418e1b2eaf5e79bbb7d28e","analyzedAt":"2026-08-24T18:12:29.105Z","schemaVersion":2},"datasetVersion":"2026-08-24T22:17:12.610Z"}