From 90cdccee1ecb04144247b01b85e16e1f14700dfe Mon Sep 17 00:00:00 2001
From: sheeek <gitlab@ott.team>
Date: Wed, 7 Jan 2026 11:57:57 +0100
Subject: [PATCH] feat(config): add Zod validation for routing.agents sandbox
 and tools

Validate per-agent sandbox config:
- mode: 'off' | 'non-main' | 'all'
- scope: 'session' | 'agent' | 'shared'
- perSession: boolean
- workspaceRoot: string

Validate per-agent tools config:
- allow: string[]
- deny: string[]
---
 src/config/zod-schema.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/config/zod-schema.ts b/src/config/zod-schema.ts
index 28eeb4d1b..0f4e018d3 100644
--- a/src/config/zod-schema.ts
+++ b/src/config/zod-schema.ts
@@ -247,6 +247,12 @@ const RoutingSchema = z
                 workspaceRoot: z.string().optional(),
               })
               .optional(),
+            tools: z
+              .object({
+                allow: z.array(z.string()).optional(),
+                deny: z.array(z.string()).optional(),
+              })
+              .optional(),
           })
           .optional(),
       )