# Add agent sandbox permissions settings page \(\#59448\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/54cd09218922eaf79f20681e0a987268a666f930)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 54cd09218922eaf79f20681e0a987268a666f930

Requested commit: 54cd09218922eaf79f20681e0a987268a666f930

Commit: 54cd09218922eaf79f20681e0a987268a666f930

Tree: 3ff8e92b3d51b8a66e09c3bdf7dd3aa98cc09a80

Author: MartinYe1234

Committer: GitHub

## Message

```
Add agent sandbox permissions settings page (#59448)

Adds a dedicated Sandbox settings page under the AI settings, letting
users review and manage the elevated terminal sandbox permissions that
are always allowed without prompting.

The page exposes:
- Network: an "Allow All Domains" toggle and an editable list of allowed
domains (exact domains or leading-`*.` subdomain wildcards), with
validation.
- Filesystem: an "Allow All Filesystem Writes" toggle and an editable
list of writable paths.
- Sandbox: an "Allow Unsandboxed Terminal Commands" toggle.

This replaces the single "Allow Unsandboxed Terminal Commands" setting
item with the new page, and updates the agent panel's settings shortcut
to open it. "Allow always" sandbox grants now persist to settings only
and are no longer also cached as an in-memory thread grant.

Closes AI-413

Release Notes:

- Added a settings page for managing the agent terminal sandbox
permissions (allowed domains, writable paths, and unsandboxed command
execution).
```

## Parents

- [ea035a7a46bd1a9e24aba7f770422f0c81f6f2e5](https://git.cafe/gitcafe/zed/commit/ea035a7a46bd1a9e24aba7f770422f0c81f6f2e5?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/54cd09218922eaf79f20681e0a987268a666f930?format=markdown)