linco-connect 1.1.3 → 1.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "linco-connect",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "自研 IM 桥接多 Agent 服务",
   "main": "server.js",
   "bin": {

package/src/agents/codex.js

@@ -232,6 +232,7 @@ function ensureThread(session) {
       threadId: session.agentSessionId,
       cwd: session.workspace,
       approvalPolicy: 'untrusted',
+      ...buildCodexThreadSandbox(session),
     }).then(result => {
       return session.agentSessionId;
     }).catch(err => {
@@ -250,6 +251,7 @@ function startNewThread(session, agentConfig) {
     cwd: session.workspace,
     model: agentConfig.model || null,
     approvalPolicy: 'untrusted',
+    ...buildCodexThreadSandbox(session),
   }).then(result => {
     const threadId = result?.thread?.id || result?.id || result?.threadId;
     if (threadId) {
@@ -359,6 +361,37 @@ function sendJsonRpc(child, message) {
   }
 }
 
+function buildCodexThreadSandbox(session) {
+  const writableRoots = [session.workspace, session.outboxDir].filter(Boolean);
+  return {
+    sandbox: 'workspace-write',
+    config: {
+      sandbox_mode: 'workspace-write',
+      sandbox_workspace_write: {
+        writable_roots: [...new Set(writableRoots)],
+        network_access: false,
+        exclude_tmpdir_env_var: false,
+        exclude_slash_tmp: false,
+      },
+    },
+  };
+}
+
+function buildCodexPermissionGrant(session) {
+  const writableRoots = [session.outboxDir].filter(Boolean);
+  return {
+    fileSystem: {
+      read: null,
+      write: writableRoots,
+      entries: writableRoots.map(root => ({
+        path: { type: 'path', path: root },
+        access: 'write',
+      })),
+    },
+    network: { enabled: false },
+  };
+}
+
 function handleServerRequest(message, session) {
   const method = message.method || '';
   const params = message.params || {};
@@ -434,7 +467,7 @@ function handleServerRequest(message, session) {
     sendJsonRpc(session.codexAppServer, {
       jsonrpc: '2.0',
       id: message.id,
-      result: { permissions: { fileSystem: { entries: [] }, network: { enabled: false } }, scope: 'session' },
+      result: { permissions: buildCodexPermissionGrant(session), scope: 'session' },
     });
     return;
   }