@kilocode/sdk 7.4.3 → 7.4.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1176,6 +1176,23 @@ export type Config = {
1176
1176
  */
1177
1177
  url?: string;
1178
1178
  };
1179
+ /**
1180
+ * Sandbox configuration for agent tools
1181
+ */
1182
+ sandbox?: {
1183
+ /**
1184
+ * Enable sandbox confinement for new sessions (default: false)
1185
+ */
1186
+ enabled?: boolean;
1187
+ /**
1188
+ * Control outbound network access from sandboxed tools (default: deny)
1189
+ */
1190
+ network?: "allow" | "deny";
1191
+ /**
1192
+ * Additional filesystem paths that sandboxed tools may write to
1193
+ */
1194
+ writable_paths?: Array<string>;
1195
+ };
1179
1196
  experimental?: {
1180
1197
  hook?: {
1181
1198
  file_edited?: {
@@ -1206,14 +1223,6 @@ export type Config = {
1206
1223
  * Enable OpenTelemetry spans for AI SDK calls (using the 'experimental_telemetry' flag)
1207
1224
  */
1208
1225
  openTelemetry?: boolean;
1209
- /**
1210
- * Run agent tools inside a sandbox that restricts writes to project and Kilo state directories and can restrict outbound network access
1211
- */
1212
- sandbox?: boolean;
1213
- /**
1214
- * Restrict outbound network access for model-originated commands and first-party HTTP tools; local MCP servers and plugin hooks are not covered (default: true)
1215
- */
1216
- sandbox_restrict_network?: boolean;
1217
1226
  /**
1218
1227
  * Tools that should only be available to primary agents.
1219
1228
  */
@@ -1151,6 +1151,27 @@ export type Config = {
1151
1151
  terminal_command_display?: "expanded" | "collapsed";
1152
1152
  code_edit_display?: "expanded" | "collapsed";
1153
1153
  hide_prompt_training_models?: boolean;
1154
+ /**
1155
+ * Sandbox configuration for agent tools
1156
+ */
1157
+ sandbox?: {
1158
+ /**
1159
+ * Enable sandbox confinement for new sessions (default: false)
1160
+ */
1161
+ enabled?: boolean;
1162
+ /**
1163
+ * Control outbound network access from sandboxed tools (default: deny)
1164
+ */
1165
+ network?: "allow" | "deny";
1166
+ /**
1167
+ * Additional filesystem paths that sandboxed tools may write to
1168
+ */
1169
+ writable_paths?: Array<string>;
1170
+ /**
1171
+ * Exact network destinations sandboxed tools may access while network restriction is enabled
1172
+ */
1173
+ allowed_hosts?: Array<string>;
1174
+ };
1154
1175
  model?: string;
1155
1176
  small_model?: string;
1156
1177
  subagent_model?: string;
@@ -1258,9 +1279,6 @@ export type Config = {
1258
1279
  openTelemetry?: boolean;
1259
1280
  primary_tools?: Array<string>;
1260
1281
  continue_loop_on_deny?: boolean;
1261
- sandbox?: boolean;
1262
- sandbox_restrict_network?: boolean;
1263
- sandbox_writable_paths?: Array<string>;
1264
1282
  swe_pruner?: boolean;
1265
1283
  swe_pruner_model?: string;
1266
1284
  mcp_timeout?: number;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "$schema": "https://json.schemastore.org/package.json",
3
3
  "name": "@kilocode/sdk",
4
- "version": "7.4.3",
4
+ "version": "7.4.6",
5
5
  "type": "module",
6
6
  "license": "MIT",
7
7
  "scripts": {