fix: per-agent sandbox overrides

2026-01-07 12:24:12 +01:00
parent e13225c9d1
commit 573fe74a9c
13 changed files with 138 additions and 223 deletions
--- a/src/config/zod-schema.ts
+++ b/src/config/zod-schema.ts
@@ -236,6 +236,9 @@ const RoutingSchema = z
                    z.literal("all"),
                  ])
                  .optional(),
+                workspaceAccess: z
+                  .union([z.literal("none"), z.literal("ro"), z.literal("rw")])
+                  .optional(),
                scope: z
                  .union([
                    z.literal("session"),
@@ -245,6 +248,12 @@ const RoutingSchema = z
                  .optional(),
                perSession: z.boolean().optional(),
                workspaceRoot: z.string().optional(),
+                tools: z
+                  .object({
+                    allow: z.array(z.string()).optional(),
+                    deny: z.array(z.string()).optional(),
+                  })
+                  .optional(),
              })
              .optional(),
            tools: z