fix(security): harden exec approval boundaries

2026-04-21 14:11:26 +00:00 · 2026-03-22 09:35:16 -07:00
parent e99d44525a
commit a94ec3b79b
29 changed files with 835 additions and 67 deletions
--- a/src/config/schema.help.quality.test.ts
+++ b/src/config/schema.help.quality.test.ts
@@ -476,6 +476,7 @@ const TOOLS_HOOKS_TARGET_KEYS = [
  "tools.alsoAllow",
  "tools.byProvider",
  "tools.exec.approvalRunningNoticeMs",
+  "tools.exec.strictInlineEval",
  "tools.links.enabled",
  "tools.links.maxLinks",
  "tools.links.models",