Enable edit and bash tools by default when sandbox is enabled

[Copilot]

When the sandbox is enabled (either explicitly via sandbox.agent or auto-enabled via network restrictions), agents now automatically receive file editing and bash command capabilities without explicit tool configuration.

Changes

Modified applyDefaultTools() signature

• Added SandboxConfig and NetworkPermissions parameters to detect when sandbox is active
• Added isSandboxEnabled() helper to check sandbox state (explicit config or auto-enablement)

Default tool injection
When the sandbox is enabled:

• tools.edit: true - enables file editing
• tools.bash: ["*"] - enables all bash commands

The sandbox is considered enabled when:

• sandbox.agent is explicitly set (awf/srt)
• Firewall is auto-enabled due to network restrictions
• Legacy sandbox.type: srt is configured

Explicit tool configuration overrides these defaults.

Example

Before:

network:
  allowed:
    - github.com
tools:
  edit: true
  bash: ["*"]

After:

network:
  allowed:
    - github.com
# edit and bash tools automatically available (firewall auto-enabled)

Or with explicit sandbox:

sandbox:
  agent: awf
# edit and bash tools automatically available

Behavior Matrix

Configuration	edit tool	bash tool
sandbox.agent: awf	✓ added	✓ added
sandbox.agent: srt	✓ added	✓ added
Network restrictions (auto-firewall)	✓ added	✓ added
sandbox.agent: false	✗ not added	✗ not added
No sandbox and no network	✗ not added	✗ not added
Explicit tools:	User config takes precedence	User config takes precedence

Original prompt

Enable editing and bash * by default when the sandbox.agent is enabled

tools.edit: true
tools.bash: ["*"]

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[pelikhan]

@copilot the sandbox does not need to be specified as long as it is enabled

[Copilot]

@copilot the sandbox does not need to be specified as long as it is enabled

Fixed in 8085b5c. The logic now enables edit and bash tools whenever the sandbox is enabled, including when the firewall is auto-enabled via network restrictions (not just when sandbox.agent is explicitly configured).