mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-02 11:01:34 +00:00
1fc81c2054
* fix: bind allow-always exec approvals to argv * test: update exec approval persistence expectations * fix: hash reusable exec approval arguments * test: pin POSIX exec approval hash expectation * fix: match hashed exec approvals in macOS * fix: encode exec approval argv hashes unambiguously * fix: bind native exec approval grants to argv * test: expect hashed exec approval patterns * fix: ignore legacy broad exec approval grants * fix: hash shell script allow-always grants * fix: require argv binding for package manager grants * fix: bind positional carrier approval grants * fix: address approval check failures * fix: format approval policy test * fix: reject context-changing package manager grants * fix: keep build-enabled pnpm dlx grants one-shot * fix: reject npm exec context grants * fix: catch npm exec tail context options * fix: block npm package context approvals * fix: block leading pnpm dlx context grants * fix: restrict durable positional carrier grants * docs: clarify generated exec approvals * fix: block post-dlx pnpm context grants