feat(sandbox-policy): describe enforced file families

2026-07-30 18:51:29 +08:00
parent d3323494ba
commit 87a4aaa32e
48 changed files with 623 additions and 140 deletions
--- a/packages/fs/fs-sandbox/src/index.ts
+++ b/packages/fs/fs-sandbox/src/index.ts
@@ -63,6 +63,7 @@ export class SandboxedFileSystem extends LocalFileSystem {
  constructor(ctx: Context, config: Config) {
    super(ctx, config)
    this.defaultMode = ctx.sandboxPolicy.defaultMode
+    ctx.sandboxPolicy.registerEnforcedFamily('filesystem')
  }

  /** The deployment default mode — the capability fact the tool layer reads to advertise escalation. */