dgf1988/codewhale
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(execpolicy): add typed ask rule foundation (#2404)

Browse Source 
* feat(execpolicy): add typed ask rule foundation

* fix(execpolicy): tighten typed ask diagnostics

---------

Co-authored-by: greyfreedom <greyfreedom@163.com>
This commit is contained in:
Hunter Bown
2026-05-31 01:37:15 -07:00
committed by GitHub
parent 3aa0a33fe2
commit 8f095b882f
4 changed files with 268 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/TOOL_SURFACE.md
+7
View File
@@ -63,6 +63,13 @@ controls for live jobs. Jobs are process-local; after restart, live process
state is not reattached, and any remembered detached entries must be marked
stale rather than presented as live processes.
Shell permission policy is evaluated by `crates/execpolicy`. Deny prefixes are
checked before trusted prefixes and block matching commands regardless of layer.
Trusted prefixes only skip approval in modes that permit trust shortcuts. Typed
ask records are currently a narrow foundation: when one matches under
`AskForApproval::Never`, the command is rejected because the runtime cannot ask
the user; existing allow/deny behavior is otherwise unchanged.
### MCP manager and palette discovery
MCP server configuration is surfaced in the TUI through `/mcp` and the