fix(exec): keep implicit sandbox default and restore no-alert baseline

This commit is contained in:
Peter Steinberger
2026-02-23 02:17:43 +01:00
parent f6c2e99f5d
commit 45febecf2a
4 changed files with 29 additions and 8 deletions

View File

@@ -215,7 +215,7 @@ export function parseToolsBySenderTypedKey(
export type GroupToolPolicyBySenderConfig = Record<string, GroupToolPolicyConfig>;
export type ExecToolConfig = {
/** Exec host routing (default: sandbox with sandbox runtime, otherwise gateway). */
/** Exec host routing (default: sandbox). */
host?: "sandbox" | "gateway" | "node";
/** Exec security mode (default: deny). */
security?: "deny" | "allowlist" | "full";