ci(upstream-merge): pass sandbox/approval flags after subcommand (code exec …) so Exec CLI receives them; should switch from read-only to workspace-write in CI

2026-10-25 03:32:32 +00:00 · 2025-09-06 23:18:21 +10:00
parent c4ce20880c
commit 854525c955
1 changed files with 1 additions and 1 deletions
@@ -169,8 +169,8 @@ jobs:
            GH_TOKEN="$GH_TOKEN" \
            npm_config_cache="$SAFE_HOME/.npm" \
            npx -y @just-every/code@latest \
-            -s workspace-write -a never -c sandbox_workspace_write.allow_git_writes=true \
            exec \
+            -s workspace-write -a never -c sandbox_workspace_write.allow_git_writes=true \
            --cd "$GITHUB_WORKSPACE" \
            --skip-git-repo-check \
            - | tee .github/auto/AGENT_STDOUT.txt