fix(security): harden exec approval boundaries

2026-03-25 08:52:12 +00:00 · 2026-03-22 09:35:16 -07:00
parent e99d44525a
commit a94ec3b79b
29 changed files with 835 additions and 67 deletions
--- a/src/agents/bash-tools.exec.ts
+++ b/src/agents/bash-tools.exec.ts
@@ -448,6 +448,7 @@ export function createExecTool(
          agentId,
          security,
          ask,
+          strictInlineEval: defaults?.strictInlineEval,
          timeoutSec: params.timeout,
          defaultTimeoutSec,
          approvalRunningNoticeMs,
@@ -470,6 +471,7 @@ export function createExecTool(
          ask,
          safeBins,
          safeBinProfiles,
+          strictInlineEval: defaults?.strictInlineEval,
          agentId,
          sessionKey: defaults?.sessionKey,
          turnSourceChannel: defaults?.messageProvider,