potiuk opened a new pull request, #20:
URL: https://github.com/apache/airflow-steward/pull/20
## Summary
- `tools/agent-isolation/sandbox-status-line.sh` now reads `sandbox.enabled`
from the same precedence Claude Code itself uses — project
`settings.local.json` → project `settings.json` →
`~/.claude/settings.local.json` → `~/.claude/settings.json` — and stops
at the first file that sets the key (to `true` *or* `false`, so an
explicit `false` is no longer mis-read as missing). The `/sandbox`
slash-command toggle persists to project `settings.local.json`, so the
prefix now updates after an in-session toggle instead of being stuck
on whatever the static `settings.json` said.
- `secure-agent-setup.md` and `tools/agent-isolation/README.md` updated
in lockstep: documented precedence, called out that `/sandbox` toggles
are reflected, removed the stale "in-session permission-mode changes
are missed" trade-off (CLI flags like `--bypass-permissions` remain the
only blind spot).
## Test plan
- [ ] In a repo whose `.claude/settings.json` sets `sandbox.enabled: true`,
run `/sandbox` to disable; status line flips to `[NO SANDBOX]` on
next render.
- [ ] Run `/sandbox` again to re-enable; status line flips back to
`[sandbox]`.
- [ ] In a repo with no `.claude/settings.local.json` and
`settings.json` unset, prefix still resolves correctly via
user-scope settings.
- [ ] `prek run --files` passes on the changed files.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
