feat: resolve sandbox file paths for hf_jobs script display

- Extract resolve_sandbox_script utility in sandbox_tool.py to detect
file paths and read content from sandbox via cat
- Resolve script paths before sending approval_required event so the
frontend receives actual file content for display and editing
- Show sandbox bash tool description arg instead of tool name in UI

agent/core/agent_loop.py

@@ -491,6 +491,16 @@ class Handlers:
                             tool_args = json.loads(tc.function.arguments)
                         except (json.JSONDecodeError, TypeError):
                             tool_args = {}
+
+                        # Resolve sandbox file paths for hf_jobs scripts so the
+                        # frontend can display & edit the actual file content.
+                        if tool_name == "hf_jobs" and isinstance(tool_args.get("script"), str):
+                            from agent.tools.sandbox_tool import resolve_sandbox_script
+                            sandbox = getattr(session, "sandbox", None)
+                            content, _ = await resolve_sandbox_script(sandbox, tool_args["script"])
+                            if content:
+                                tool_args = {**tool_args, "script": content}
+
                         tools_data.append(
                             {
                                 "tool": tool_name,

agent/tools/sandbox_tool.py

@@ -12,6 +12,7 @@ a cpu-basic sandbox is auto-created (no approval needed).
 from __future__ import annotations
 
 import asyncio
+import shlex
 from typing import Any
 
 from huggingface_hub import HfApi, SpaceHardware
@@ -19,6 +20,37 @@ from huggingface_hub import HfApi, SpaceHardware
 from agent.core.session import Event
 from agent.tools.sandbox_client import Sandbox
 
+
+def _looks_like_path(script: str) -> bool:
+    """Return True if the script string looks like a file path (not inline code)."""
+    return (
+        isinstance(script, str)
+        and script.strip() == script
+        and not any(c in script for c in "\r\n\0")
+        and (script.startswith("/") or script.startswith("./") or script.startswith("../"))
+    )
+
+
+async def resolve_sandbox_script(sandbox: Any, script: str) -> tuple[str | None, str | None]:
+    """Read a file from the sandbox if *script* looks like a path.
+
+    Returns:
+        (content, error) — content is the file text on success,
+        error is a message on failure.  Both None means *script*
+        is not a path (caller should use it as-is).
+    """
+    if not sandbox or not _looks_like_path(script):
+        return None, None
+    try:
+        result = await asyncio.to_thread(
+            sandbox.bash, f"cat {shlex.quote(script)}"
+        )
+        if result.success and result.output:
+            return result.output, None
+        return None, f"Failed to read {script} from sandbox: {result.error}"
+    except Exception as e:
+        return None, f"Failed to read {script} from sandbox: {e}"
+
 # ── Tool name mapping (short agent names → Sandbox client names) ──────
 
 

frontend/src/components/Chat/ToolCallGroup.tsx

@@ -546,7 +546,7 @@ export default function ToolCallGroup({ tools, approveTools }: ToolCallGroupProp
                     whiteSpace: 'nowrap',
                   }}
                 >
-                  {toolDisplayMap[tool.toolCallId] || tool.toolName}
+                  {toolDisplayMap[tool.toolCallId] || String((tool.input as Record<string, unknown>)?.description || '') || tool.toolName}
                 </Typography>
 
                 {/* Status chip (non hf_jobs, or hf_jobs without final status) */}