Skip to content

feat: let agents ask for network access, which their pod decides - #302

Open
tjholm wants to merge 1 commit into
sandbox-agent-toolsfrom
sandbox-network-access
Open

tjholm wants to merge 1 commit into
sandbox-agent-toolsfrom
sandbox-network-access

Conversation

@tjholm

@tjholm tjholm commented Oct 6, 2026 •

Copy link
Copy Markdown
Member

request_network_access

  • Asks for a host the pod's sandbox can't reach; the turn waits for an answer.
  • Allowing it adds the host to the pod's sandbox.
  • A host the workspace blocks is refused immediately without asking anyone, and so is approving one that became blocked while the request waited.

Approvals

  • Built-in tools can now raise approvals, not just connections.
  • Who decides follows from the tool: for this one, whoever decides the pod's hosts.

Stack created with GitHub Stacks CLI • Give Feedback 💬

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
sugabots-website d14c614 Oct 07 2026, 09:03 AM

@tjholm
tjholm added this pull request to stack #305 October 6, 2026 03:35
@tjholm
tjholm force-pushed the sandbox-network-access branch 2 times, most recently from 2b0815d to d3a4914 Compare October 6, 2026 21:29
@tjholm
tjholm force-pushed the sandbox-network-access branch from d3a4914 to 82ff9ee Compare October 7, 2026 02:48
@tjholm
tjholm marked this pull request as ready for review October 7, 2026 02:56
@tjholm
tjholm removed this pull request from stack #305 October 7, 2026 02:58
@tjholm
tjholm added this pull request to stack #327 October 7, 2026 02:58
@tjholm
tjholm force-pushed the sandbox-network-access branch 4 times, most recently from 1cf05e0 to 9d01a69 Compare October 7, 2026 06:27
@tjholm
tjholm force-pushed the sandbox-network-access branch from 9d01a69 to 392e8ad Compare October 7, 2026 07:35
@tjholm
tjholm force-pushed the sandbox-network-access branch from 392e8ad to 2759b4b Compare October 7, 2026 07:38
request_network_access asks for a host the pod's sandbox can't reach, and the turn waits for an answer. Approvals can now come from built-in tools as well as connections, and who decides one follows from its tool: those who decide the pod's hosts decide this one, and allowing it adds the host for the pod's sandbox. A request for a host the workspace blocked is refused at once, without asking anyone, as is allowing one blocked while it waited.
@tjholm
tjholm force-pushed the sandbox-network-access branch from 2759b4b to d14c614 Compare October 7, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant