fix: harden exec sandbox fallback semantics (#23398) (thanks @bmendonca3)

This commit is contained in:
Peter Steinberger
2026-02-22 10:49:15 +01:00
parent c76a47cce2
commit 1b327da6e3
8 changed files with 49 additions and 7 deletions

View File

@@ -178,7 +178,7 @@ export type GroupToolPolicyConfig = {
export type GroupToolPolicyBySenderConfig = Record<string, GroupToolPolicyConfig>;
export type ExecToolConfig = {
/** Exec host routing (default: sandbox). */
/** Exec host routing (default: sandbox with sandbox runtime, otherwise gateway). */
host?: "sandbox" | "gateway" | "node";
/** Exec security mode (default: deny). */
security?: "deny" | "allowlist" | "full";