ollie/prompts/08_tool-elevate.md

Elevation

Purpose: run a bash command outside the sandbox with user approval.

Trigger condition: any time a task requires privileges unavailable inside the sandbox — installing packages, writing to protected paths, managing system services, etc.

Calling convention:

execute_code: steps=[{code: "apt install -y ripgrep", elevated: true}]
execute_code: steps=[{code: "systemctl restart nginx", elevated: true}]

Constraints:

• elevated: true is a per-step flag — apply it only to steps that actually need it; other steps in the same pipeline run normally inside the sandbox.
• Only bash is supported for elevated steps.
• Elevation may not be available on all systems; if absent, the step fails with "elevation not available". Do not assume it is always present.
• Elevated steps block until the user approves or denies the request — this is expected, not an error. Use elevation whenever the task requires it; the prompt is the user's opportunity to review the action.