@yiln-dsh/dsh-plugin-sandbox-guidance 0.1.0 → 0.1.1

package/README.md

@@ -11,9 +11,10 @@ command remains unexecuted.
 ## Behavior
 
 The plugin adds a `systemPrompt` section that tells the model to omit
-`sandbox_permissions` during ordinary calls and to explain this failure instead
-of repeating it blindly. It also listens to `tools/post-execute` and replaces
-only the matching bash failure text with a diagnostic containing:
+`sandbox_permissions` and `justification` during ordinary calls, and to explain
+this failure instead of repeating it blindly. It also listens to
+`tools/post-execute` and replaces only the matching bash failure text with a
+diagnostic containing:
 
 - the fact that bash did not run;
 - the requested sandbox mode;
@@ -22,9 +23,14 @@ only the matching bash failure text with a diagnostic containing:
 
 Other bash failures pass through unchanged.
 
+When a sandbox denial genuinely requires more access, the injected guidance
+instructs the model to retry the exact command once with the narrowest wider mode
+and a non-empty justification, allowing DSH's native approval flow to ask the
+user. It does not ask for approval in chat first.
+
 ## Install
 
-The published package is `@yiln-dsh/dsh-plugin-sandbox-guidance@0.1.0`.
+The published package is `@yiln-dsh/dsh-plugin-sandbox-guidance@0.1.1`.
 
 ```bash
 dsh plugin --profile web add @yiln-dsh/dsh-plugin-sandbox-guidance@latest

package/index.js

@@ -7,7 +7,7 @@
 export const name = "sandbox-guidance";
 export const inject = ["tools", "systemPrompt"];
 
-const NON_WIDENING_ERROR = /^sandbox escalation to "([^"]+)" is not strictly wider than this call's current "([^"]+)" mode$/u;
+const NON_WIDENING_ERROR = /sandbox escalation to "([^"]+)"\s+is not strictly wider than (?:this call's )?current "([^"]+)"\s+mode/iu;
 
 /**
  * Turn the native sandbox error into a model-facing diagnostic that says what
@@ -24,8 +24,8 @@ export function explainSandboxFailure(message) {
     "Bash was not executed; this failure happened before the command ran.",
     `Cause: sandbox_permissions requested \"${requested}\", but the current effective sandbox mode is \"${effective}\".`,
     sameMode
-      ? "The requested mode is already active, so sandbox_permissions must be omitted for the retry."
-      : "sandbox_permissions is only valid for a retry that requests a strictly wider mode; do not retry with this mode.",
+      ? "The requested mode is already active, so omit both sandbox_permissions and justification for the retry."
+      : "The requested mode is not wider than the current mode, so omit both sandbox_permissions and justification when the current mode is sufficient.",
     "Explain this cause to the user instead of silently repeating the same bash call.",
   ].join(" ");
 }
@@ -33,15 +33,14 @@ export function explainSandboxFailure(message) {
 const SYSTEM_PROMPT = [
   "Sandbox escalation recovery:",
   "- Do not include sandbox_permissions in an ordinary bash call.",
-  "- Only include it when retrying a call that was actually denied by the sandbox and the requested mode is strictly wider than the effective mode.",
+  "- Never send justification by itself. When the current effective mode is sufficient, omit both sandbox_permissions and justification.",
+  "- Only include sandbox_permissions and a non-empty justification when retrying a call that was actually denied by the sandbox and the requested mode is strictly wider than the effective mode.",
   "- If a bash result says the requested mode is not strictly wider than the current mode, state that the command did not run, explain the requested and effective modes, and retry without sandbox_permissions when the current mode is sufficient.",
-  "- If a wider mode is genuinely required, explain why to the user and request approval rather than repeating the failed call.",
+  "- If a denied command genuinely needs a wider mode, retry the exact same command once with the narrowest wider sandbox_permissions value and a non-empty justification. This retry triggers the approval flow; do not ask for approval in chat first.",
 ].join("\n");
 
 export function apply(ctx) {
-  const order = typeof ctx.systemPrompt.getSectionOrder === "function"
-    ? ctx.systemPrompt.getSectionOrder("TOOL_BASH") + 1
-    : 105;
+  const order = ctx.systemPrompt.getSectionOrder("TOOL_BASH") + 1;
   ctx.systemPrompt.section({
     name: "tool:sandbox-guidance",
     order,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yiln-dsh/dsh-plugin-sandbox-guidance",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "publishConfig": {
     "access": "public"
   },