fix: allow AgentOS workspace filesystem

This commit is contained in:
-Puter
2026-07-28 18:18:24 +05:30
parent d47fa0e96a
commit 24d82e2a06
2 changed files with 6 additions and 4 deletions

View File

@@ -12,6 +12,7 @@ describe("Codex agent-os config", () => {
it("allows outbound VM networking", () => { it("allows outbound VM networking", () => {
const config = makeCodexAgentOsConfig(); const config = makeCodexAgentOsConfig();
expect(config.permissions?.network).toBe("allow"); expect(config.permissions?.network).toBe("allow");
expect(config.permissions?.fs).toBe("allow");
}); });
it("builds model-provider session env", () => { it("builds model-provider session env", () => {

View File

@@ -108,20 +108,21 @@ export const codexSessionEnv = (
export interface CodexAgentOsConfigInput { export interface CodexAgentOsConfigInput {
/** Extra software merged after the Codex+git bundle. */ /** Extra software merged after the Codex+git bundle. */
readonly software?: NonNullable<AgentOSConfigInput<undefined>["software"]>; readonly software?: NonNullable<AgentOSConfigInput<undefined>["software"]>;
/** VM permission overrides merged over the default network-enabled policy. */ /** VM permission overrides merged over the execution policy. */
readonly permissions?: AgentOSConfigInput<undefined>["permissions"]; readonly permissions?: AgentOSConfigInput<undefined>["permissions"];
} }
/** /**
* are always present; software the caller passes is appended, never replacing * are always present; software the caller passes is appended, never replacing
* the harness or git. Outbound networking is explicitly enabled for repository * the harness or git. Filesystem and outbound networking are explicitly enabled
* and model-provider access. Model-provider env is supplied per session via * for repository work and model-provider access. Model-provider env is supplied
* `codexSessionEnv`, not here — the actor config has no env field. * per session via `codexSessionEnv`, not here — the actor config has no env field.
*/ */
export const makeCodexAgentOsConfig = ( export const makeCodexAgentOsConfig = (
input: CodexAgentOsConfigInput = {} input: CodexAgentOsConfigInput = {}
): AgentOSConfigInput<undefined> => ({ ): AgentOSConfigInput<undefined> => ({
permissions: { permissions: {
fs: "allow",
network: "allow", network: "allow",
...input.permissions, ...input.permissions,
}, },