From 64e656af820fe70f6467abc22600d9f991425e91 Mon Sep 17 00:00:00 2001
From: Cash Williams <cashwilliams@gmail.com>
Date: Sun, 4 Jan 2026 10:13:28 -0600
Subject: [PATCH] fix: default elevated level to 'off' when not allowed

When elevatedAllowed is false (e.g., for heartbeat surface which isn't
in any allowFrom list), the elevated level was incorrectly defaulting
to 'on', causing bash commands to fail with 'elevated is not available'.

Now defaults to 'off' when elevated isn't allowed, so bash works
normally without trying to use elevated mode.

Fixes: https://github.com/clawdbot/clawdbot/issues/181
---
 src/auto-reply/reply.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/auto-reply/reply.ts b/src/auto-reply/reply.ts
index 39e848d57..2ac40c61f 100644
--- a/src/auto-reply/reply.ts
+++ b/src/auto-reply/reply.ts
@@ -305,7 +305,7 @@ export async function getReplyFromConfig(
       (sessionEntry?.elevatedLevel as ElevatedLevel | undefined) ??
       (agentCfg?.elevatedDefault as ElevatedLevel | undefined) ??
       "on")
-    : "on";
+    : "off";
   const resolvedBlockStreaming =
     agentCfg?.blockStreamingDefault === "off" ? "off" : "on";
   const resolvedBlockStreamingBreak: "text_end" | "message_end" =