Skip to content

Document VS Code agent-sandbox filesystem restrictions #70

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
MatanEden1 wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Document VS Code agent-sandbox filesystem restrictions #70

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
d290434
Document VS Code agent-sandbox filesystem restrictions
MatanEden1 Sep 3, 2026
1e8bc21
Trim VS Code sandbox note
MatanEden1 Sep 3, 2026
98be2f4
Fix inaccurate sandbox-bypass prompt wording
MatanEden1 Sep 3, 2026
e53afec
Address PR review: split MODULE_NOT_FOUND from credential fix
MatanEden1 Sep 3, 2026
74671b0
Trim VS Code sandbox note wording
MatanEden1 Sep 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions plugin/skills/jfrog-mcp-management/references/harness-vscode.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,20 @@ Rules for the `inputs` block:
- `description`: use the catalog `description`; if empty, construct a brief one.
- `Bearer` headers: use `"Bearer ${input:<id>}"` and ask only for the token.

## VS Code's sandbox

`chat.agent.sandbox.enabled` blocks filesystem access outside the workspace
for the agent's terminal commands only — MCP server `${input:...}` values are
resolved by VS Code itself and unaffected.

- `MODULE_NOT_FOUND` on Step 0's script: the script itself is unreadable, env
vars won't help. Re-run with `sandboxBypass: true` ("Run in terminal
outside the sandbox?") or disable `chat.agent.sandbox.enabled`.
- Unreadable `~/.jfrog/` (Unknown) or `EROFS` on the npm cache: unlike Codex,
env vars pass through the sandbox — prefer `JFROG_URL` +
`JFROG_ACCESS_TOKEN` ([agent-guard-common.md](agent-guard-common.md)) over
`--server`; same bypass fallback otherwise.

## Enable

Writing the entry is not enough — the server must be started via the UI. If it
Expand Down
Loading