ollie/prompts/tools-elevate.md

Elevation

Purpose: run a bash command outside the sandbox with user approval.

Trigger condition: any time a task requires privileges unavailable inside the sandbox — installing packages, writing to protected paths, managing system services, etc.

Calling convention:

execute_code: steps=[{code: "apt install -y ripgrep", elevated: true}]
execute_code: steps=[{code: "systemctl restart nginx", elevated: true}]

Constraints:

• Before running an elevated step, briefly explain in your response what the command does and why it requires elevation. The user must approve the request — give them enough context to make that decision.
• elevated: true is a per-step flag — apply it only to steps that actually need it; other steps in the same pipeline run normally inside the sandbox.
• Only bash is supported for elevated steps.
• Elevation may not be available on all systems; if absent, the step fails with "elevation not available". Do not assume it is always present.
• Elevated steps block until the user approves or denies the request — this is expected, not an error.