fix: allow AgentOS workspace filesystem
This commit is contained in:
@@ -12,6 +12,7 @@ describe("Codex agent-os config", () => {
|
|||||||
it("allows outbound VM networking", () => {
|
it("allows outbound VM networking", () => {
|
||||||
const config = makeCodexAgentOsConfig();
|
const config = makeCodexAgentOsConfig();
|
||||||
expect(config.permissions?.network).toBe("allow");
|
expect(config.permissions?.network).toBe("allow");
|
||||||
|
expect(config.permissions?.fs).toBe("allow");
|
||||||
});
|
});
|
||||||
|
|
||||||
it("builds model-provider session env", () => {
|
it("builds model-provider session env", () => {
|
||||||
|
|||||||
@@ -108,20 +108,21 @@ export const codexSessionEnv = (
|
|||||||
export interface CodexAgentOsConfigInput {
|
export interface CodexAgentOsConfigInput {
|
||||||
/** Extra software merged after the Codex+git bundle. */
|
/** Extra software merged after the Codex+git bundle. */
|
||||||
readonly software?: NonNullable<AgentOSConfigInput<undefined>["software"]>;
|
readonly software?: NonNullable<AgentOSConfigInput<undefined>["software"]>;
|
||||||
/** VM permission overrides merged over the default network-enabled policy. */
|
/** VM permission overrides merged over the execution policy. */
|
||||||
readonly permissions?: AgentOSConfigInput<undefined>["permissions"];
|
readonly permissions?: AgentOSConfigInput<undefined>["permissions"];
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* are always present; software the caller passes is appended, never replacing
|
* are always present; software the caller passes is appended, never replacing
|
||||||
* the harness or git. Outbound networking is explicitly enabled for repository
|
* the harness or git. Filesystem and outbound networking are explicitly enabled
|
||||||
* and model-provider access. Model-provider env is supplied per session via
|
* for repository work and model-provider access. Model-provider env is supplied
|
||||||
* `codexSessionEnv`, not here — the actor config has no env field.
|
* per session via `codexSessionEnv`, not here — the actor config has no env field.
|
||||||
*/
|
*/
|
||||||
export const makeCodexAgentOsConfig = (
|
export const makeCodexAgentOsConfig = (
|
||||||
input: CodexAgentOsConfigInput = {}
|
input: CodexAgentOsConfigInput = {}
|
||||||
): AgentOSConfigInput<undefined> => ({
|
): AgentOSConfigInput<undefined> => ({
|
||||||
permissions: {
|
permissions: {
|
||||||
|
fs: "allow",
|
||||||
network: "allow",
|
network: "allow",
|
||||||
...input.permissions,
|
...input.permissions,
|
||||||
},
|
},
|
||||||
|
|||||||
Reference in New Issue
Block a user