feat: add per-agent elevated controls

2026-01-09 20:42:16 +00:00
parent 1a97aadb6b
commit 5fa26bfec7
13 changed files with 349 additions and 26 deletions
--- a/src/config/types.ts
+++ b/src/config/types.ts
@@ -843,6 +843,13 @@ export type QueueConfig = {
 export type AgentToolsConfig = {
  allow?: string[];
  deny?: string[];
+  /** Per-agent elevated bash gate (can only further restrict global tools.elevated). */
+  elevated?: {
+    /** Enable or disable elevated mode for this agent (default: true). */
+    enabled?: boolean;
+    /** Approved senders for /elevated (per-provider allowlists). */
+    allowFrom?: AgentElevatedAllowFromConfig;
+  };
  sandbox?: {
    tools?: {
      allow?: string[];