fix: let a sandboxed session read the agent list, which silently truncates

fix: let a sandboxed session read the agent list, which silently truncates #1209