Hey, thanks for the report. You’ve found a workflow issue with sandbox mode.
Current sandbox behavior: when commands fail due to sandbox restrictions, the agent doesn’t always retry with full permissions after you manually accept them. This is frustrating, especially for git operations like git push.
Related issue: there’s a known bug where sandbox mode completely bypasses command allowlists for git operations: 2.0.73: executing unauthorized commands!
Potential workaround:
- Open Settings → Agents → Auto Run
- Enable “Legacy Terminal Tool”
- This restores the older allowlist-based approach where you can pre-approve commands
- However, it might not fully solve the retry-after-accept issue
Your feature request makes sense - if you manually accept a sandboxed command, the agent should smartly retry with the necessary permissions.
Did the Legacy Terminal Tool option help your workflow?