relax tool sandboxing overrides for plan mode to match defaults. (#24762)

2026-04-08 04:10:35 -07:00 · 2026-04-06 22:18:10 +00:00
parent df67f973ed
commit 984f02c180
2 changed files with 2 additions and 3 deletions
--- a/packages/core/src/policy/policies/sandbox-default.toml
+++ b/packages/core/src/policy/policies/sandbox-default.toml
@@ -2,7 +2,7 @@
 network = false
 readonly = true
 approvedTools = []
-allowOverrides = false
+allowOverrides = true

 [modes.default]
 network = false
@@ -17,4 +17,3 @@ approvedTools = ['sed', 'grep', 'awk', 'perl', 'cat', 'echo', 'Add-Content', 'Se
 allowOverrides = true

 [commands]
-
--- a/packages/core/src/policy/sandboxPolicyManager.ts
+++ b/packages/core/src/policy/sandboxPolicyManager.ts
@@ -64,7 +64,7 @@ export class SandboxPolicyManager {
                network: false,
                readonly: true,
                approvedTools: [],
-                allowOverrides: false,
+                allowOverrides: true,
              },
              default: {
                network: false,