feat: add pluggable Excel analyst report guard

2026-07-17 11:52:21 +08:00
parent 75b32d959c
commit 0c1c0c3b48
20 changed files with 2099 additions and 8 deletions
@@ -1869,10 +1869,14 @@ export function createUserAuth(pool, options = {}) {
      policyState.policies,
    );
    // Wire up the sandbox MCP for user workspace tools and the private data space.
-    // File operations are OS-bound to the user's workspace; private_data_* tools
-    // only touch the user's isolated PostgreSQL schema.
+    // File and Excel operations are OS-bound to the user's workspace;
+    // private_data_* tools only touch the user's isolated PostgreSQL schema.
    let sandboxMcp = null;
-    if (effectiveCapabilities.static_publish || effectiveCapabilities.private_data_space) {
+    if (
+      effectiveCapabilities.static_publish ||
+      effectiveCapabilities.private_data_space ||
+      effectiveCapabilities.excel_analysis
+    ) {
      try {
        const workspaceCapability = resolveMindSpaceAgentWorkspaceCapability({
          h5Root,