fix(exec): restore strict inline-eval allow-always reuse

This commit is contained in:
Peter Steinberger
2026-03-31 23:44:48 +09:00
parent 5aac609e08
commit 5e30da3cad
7 changed files with 128 additions and 4 deletions

View File

@@ -96,6 +96,7 @@ type SystemRunPolicyPhase = SystemRunParsePhase & {
approvals: ResolvedExecApprovals;
security: ExecSecurity;
policy: ReturnType<typeof evaluateSystemRunPolicy>;
strictInlineEval: boolean;
inlineEvalHit: ReturnType<typeof detectInterpreterInlineEvalArgv>;
allowlistMatches: ExecAllowlistEntry[];
analysisOk: boolean;
@@ -439,6 +440,7 @@ async function evaluateSystemRunPolicyPhase(
approvals,
security,
policy,
strictInlineEval,
inlineEvalHit,
allowlistMatches,
analysisOk,
@@ -555,6 +557,7 @@ async function executeSystemRunPhase(
cwd: phase.cwd,
env: phase.env,
platform: process.platform,
strictInlineEval: phase.strictInlineEval,
});
for (const pattern of patterns) {
if (pattern) {