Vincent Koc 4d6593642e fix(exec): avoid default approval store writes (#86964) ...

* fix(exec): avoid default approval store writes

* fix(exec): harden token approvals on default policy

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-05-26 20:59:24 +01:00

..

config.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

exec-policy.test.ts

…

exec-policy.ts

…

invoke-system-run-allowlist.test.ts

Recheck rebuilt system.run argv [AI] (#84090)

2026-05-20 12:30:26 +05:30

invoke-system-run-allowlist.ts

Recheck rebuilt system.run argv [AI] (#84090)

2026-05-20 12:30:26 +05:30

invoke-system-run-plan.test.ts

Bind shell script operands after combined options [AI] (#81882)

2026-05-15 14:55:37 +05:30

invoke-system-run-plan.ts

Bind shell script operands after combined options [AI] (#81882)

2026-05-15 14:55:37 +05:30

invoke-system-run.test.ts

fix(exec): bind approval trust to realpaths (#82825)

2026-05-17 03:41:50 +01:00

invoke-system-run.ts

fix(exec): avoid default approval store writes (#86964)

2026-05-26 20:59:24 +01:00

invoke-types.ts

…

invoke.sanitize-env.test.ts

…

invoke.test.ts

fix(node-host): wrap malformed invoke params json

2026-05-14 19:35:45 +08:00

invoke.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

plugin-node-host.test.ts

…

plugin-node-host.ts

…

runner.credentials.test.ts

…

runner.test.ts

Require canonical node platform IDs [AI] (#81880)

2026-05-15 14:46:46 +05:30

runner.ts

fix(exec): bind approval trust to realpaths (#82825)

2026-05-17 03:41:50 +01:00

with-timeout.ts

…