Jacob Tomlinson 7bd2761b92 Exec approvals: detect command carriers in strict inline eval (#57842) ...

* Exec approvals: detect command carriers in strict inline eval

* Exec approvals: cover carrier option edge cases

* Exec approvals: cover make and find carriers

* Exec approvals: catch attached eval flags

* Exec approvals: keep sed -E out of inline eval

* Exec approvals: treat sed in-place flags as optional

2026-03-31 10:58:17 +01:00

..

config.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

exec-policy.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

exec-policy.ts

fix(security): block shell-wrapper line-continuation allowlist bypass

2026-02-22 22:36:29 +01:00

invoke-system-run-allowlist.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

invoke-system-run-plan.test.ts

test: dedupe config and utility suites

2026-03-28 00:46:53 +00:00

invoke-system-run-plan.ts

refactor: separate exec policy and execution targets

2026-03-23 19:36:44 -07:00

invoke-system-run.test.ts

Exec approvals: detect command carriers in strict inline eval (#57842)

2026-03-31 10:58:17 +01:00

invoke-system-run.ts

refactor: separate exec policy and execution targets

2026-03-23 19:36:44 -07:00

invoke-types.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

invoke.sanitize-env.test.ts

test: align extension runtime mocks with plugin-sdk (#51289)

2026-03-20 15:59:53 -07:00

invoke.ts

refactor: remove legacy browser bridge entrypoints

2026-03-26 23:11:17 +00:00

runner.credentials.test.ts

test: share node host credential assertions

2026-03-13 21:40:54 +00:00

runner.ts

Reduce lint suppressions in core tests and runtime

2026-03-27 02:11:26 -05:00

with-timeout.ts

fix: add safety timeout to session.compact() to prevent lane deadlock (#16533)

2026-02-14 17:54:12 -05:00