fix(exec): only set security=full when elevated mode is full

2026-01-24 15:36:04 +00:00 · 2026-01-24 15:36:04 +00:00 · 7481086d74
commit 7481086d74
parent a1ed671636
1 changed files with 1 additions and 1 deletions
--- a/src/agents/bash-tools.exec.ts
+++ b/src/agents/bash-tools.exec.ts
@ -791,7 +791,7 @@ export function createExecTool(
      const configuredSecurity = defaults?.security ?? (host === "sandbox" ? "deny" : "allowlist");
      const requestedSecurity = normalizeExecSecurity(params.security);
      let security = minSecurity(configuredSecurity, requestedSecurity ?? configuredSecurity);
-      if (elevatedRequested) {
+      if (elevatedRequested && elevatedMode === "full") {
        security = "full";
      }
      const configuredAsk = defaults?.ask ?? "on-miss";