feat(sandbox): add workspace access mode

2026-01-07 09:32:49 +00:00
parent 94d3a9742b
commit 0914517ee3
14 changed files with 229 additions and 55 deletions
--- a/src/agents/bash-tools.ts
+++ b/src/agents/bash-tools.ts
@@ -165,10 +165,14 @@ export function createBashTool(
      const sessionId = randomUUID();
      const warnings: string[] = [];
      const elevatedDefaults = defaults?.elevated;
+      const elevatedDefaultOn =
+        elevatedDefaults?.defaultLevel === "on" &&
+        elevatedDefaults.enabled &&
+        elevatedDefaults.allowed;
      const elevatedRequested =
        typeof params.elevated === "boolean"
          ? params.elevated
-          : elevatedDefaults?.defaultLevel === "on";
+          : elevatedDefaultOn;
      if (elevatedRequested) {
        if (!elevatedDefaults?.enabled || !elevatedDefaults.allowed) {
          throw new Error("elevated is not available right now.");