Teknium e2fe529efb feat(approvals): user-defined deny rules that block commands even under yolo (#59164) ... Adds approvals.deny to config.yaml — a list of fnmatch globs matched against terminal commands. A match blocks unconditionally, BEFORE the --yolo / /yolo / approvals.mode=off bypass, making it the user-editable counterpart to the code-shipped hardline blocklist. - Checked in both command gates (check_dangerous_command and check_all_command_guards), after the hardline floor and sudo-stdin guard, before the yolo bypass and permanent allowlist. - Matching runs over the same normalized/deobfuscated command variants as the dangerous-pattern detector, case-insensitive. - Opt-in: empty/absent list is a no-op; behavior unchanged. Supersedes the trust-engine approach from #21500 with a minimal config-native design: the only capability the existing stack lacked was deny-that-beats-yolo. Allow already exists (command_allowlist), ask already exists (session approvals).		2026-07-05 14:48:40 -07:00
..
computer_use	fix(computer-use): sanitize env on the 4 remaining cua-driver spawn sites (#59165)	2026-07-05 14:48:20 -07:00
environments	fix(docker): widen docker_network to file/code-exec paths + guard container reuse	2026-07-05 14:41:51 -07:00
neutts_samples
__init__.py
ansi_strip.py
approval.py	feat(approvals): user-defined deny rules that block commands even under yolo (#59164)	2026-07-05 14:48:40 -07:00
async_delegation.py	fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)	2026-07-02 04:20:43 -07:00
binary_extensions.py
blueprints.py
browser_camofox.py	fix(browser): block Camofox input on private pages	2026-07-03 03:27:47 -07:00
browser_camofox_state.py
browser_cdp_tool.py	fix(browser): apply private-page guard to browser_cdp frame_id routing	2026-07-03 03:27:47 -07:00
browser_dialog_tool.py
browser_supervisor.py	fix(browser): harden browser tool safety boundaries	2026-07-01 05:04:41 -07:00
browser_tool.py	fix(browser): guard Camofox eval private pages	2026-07-02 13:10:30 +05:30
budget_config.py
checkpoint_manager.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
clarify_gateway.py
clarify_tool.py
close_terminal_tool.py	fix(config): accept 'on' as truthy for env flags via shared env_var_enabled helper	2026-07-02 03:00:59 -07:00
code_execution_tool.py	fix(docker): widen docker_network to file/code-exec paths + guard container reuse	2026-07-05 14:41:51 -07:00
computer_use_tool.py
credential_files.py	fix(vision): unified image-source resolver + terminal-backend confinement	2026-07-04 15:30:50 -07:00
cronjob_tools.py	security(cron): block base_url overrides that exfiltrate provider credentials	2026-07-01 14:23:01 +05:30
daemon_pool.py	fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)	2026-07-02 04:20:43 -07:00
debug_helpers.py
delegate_tool.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
discord_tool.py
env_passthrough.py	fix(security): strip dynamic Hermes secrets from all subprocess spawn env	2026-07-01 14:37:22 +05:30
env_probe.py
fal_common.py
feishu_doc_tool.py
feishu_drive_tool.py
file_operations.py
file_state.py
file_tools.py	fix: disclose mid-line clamp in truncation hint	2026-07-05 14:42:05 -07:00
fuzzy_match.py	fix(patch): preserve file Unicode when unicode_normalized strategy matches	2026-07-01 17:48:32 +05:30
homeassistant_tool.py
hook_output_spill.py	feat(hooks): spill oversized hook-injected context to disk (#20468)	2026-07-05 13:51:26 -07:00
image_generation_tool.py
image_source.py	security(vision): route local-file inputs through the shared credential-read guard	2026-07-05 00:47:54 -07:00
interrupt.py
kanban_tools.py	feat(kanban): route notifications via owning profile + wake creator agent	2026-07-02 00:05:48 +05:30
lazy_deps.py	fix(update): skip unsupported Matrix refresh on Windows	2026-07-04 13:40:59 -07:00
managed_tool_gateway.py
mcp_oauth.py	refactor(mcp): DRY the non-interactive OAuth guard + positive-control test	2026-07-04 14:10:33 +05:30
mcp_oauth_manager.py	fix(mcp-oauth): anchor 401 handler task to prevent GC mid-flight	2026-06-30 16:56:15 -07:00
mcp_tool.py	feat(mcp): adopt mcp__server__tool naming convention	2026-07-05 13:40:21 -07:00
memory_tool.py
microsoft_graph_auth.py
microsoft_graph_client.py
neutts_synth.py
openrouter_client.py
osv_check.py
patch_parser.py
path_security.py
process_registry.py
project_tools.py
read_extract.py
read_terminal_tool.py	fix(config): accept 'on' as truthy for env flags via shared env_var_enabled helper	2026-07-02 03:00:59 -07:00
registry.py	fix(security): use caller package root for deregister opt-in policy lookup	2026-07-01 15:37:58 +05:30
schema_sanitizer.py
send_message_tool.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
session_search_tool.py
skill_manager_tool.py
skill_provenance.py
skill_usage.py
skills_ast_audit.py
skills_guard.py
skills_hub.py	fix(skills): retry rate-limited Contents API directory listings	2026-07-04 15:15:31 -07:00
skills_sync.py
skills_tool.py
slash_confirm.py
terminal_tool.py	feat: add Docker terminal network toggle	2026-07-05 14:41:51 -07:00
thread_context.py
threat_patterns.py	fix: bound threat-pattern/FTS5 regex input and cover V4A Move-File edits	2026-07-01 01:05:28 -07:00
tirith_security.py
todo_tool.py	fix(agent): restrict todo hydration to paired assistant todo calls	2026-07-01 01:02:17 -07:00
tool_backend_helpers.py
tool_output_limits.py
tool_result_storage.py
tool_search.py
transcription_tools.py
tts_tool.py	fix(tts): coerce direct-only OpenAI model on the managed audio gateway	2026-07-03 05:30:16 -05:00
url_safety.py	fix(browser): narrow credential-query denylist to unambiguous names	2026-07-01 05:04:41 -07:00
video_generation_tool.py
vision_tools.py	security(vision): route local-file inputs through the shared credential-read guard	2026-07-05 00:47:54 -07:00
voice_mode.py
web_tools.py	refactor(web_tools): single registry authority for custom-provider availability	2026-07-03 20:14:27 +05:30
website_policy.py	fix(website-policy): key blocklist cache on the real default config path	2026-07-04 15:08:49 -07:00
write_approval.py
x_search_tool.py
xai_http.py
xai_video_tools.py
yuanbao_tools.py