fix: harden exec sandbox fallback semantics (#23398) (thanks @bmendonca3)

2026-05-08 01:11:23 +00:00 · 2026-02-22 10:49:15 +01:00
parent c76a47cce2
commit 1b327da6e3
8 changed files with 49 additions and 7 deletions
--- a/src/agents/bash-tools.exec.pty-fallback-failure.test.ts
+++ b/src/agents/bash-tools.exec.pty-fallback-failure.test.ts
@@ -26,7 +26,12 @@ test("exec cleans session state when PTY fallback spawn also fails", async () =>
    .mockRejectedValueOnce(new Error("pty spawn failed"))
    .mockRejectedValueOnce(new Error("child fallback failed"));

-  const tool = createExecTool({ allowBackground: false });
+  const tool = createExecTool({
+    allowBackground: false,
+    host: "gateway",
+    security: "full",
+    ask: "off",
+  });

  await expect(
    tool.execute("toolcall", {