fix(security): bind system.run approvals to argv identity

2026-02-26 03:40:42 +01:00
parent baf656bc6f
commit 03e689fc89
12 changed files with 102 additions and 9 deletions
--- a/src/agents/bash-tools.exec-host-node.ts
+++ b/src/agents/bash-tools.exec-host-node.ts
@@ -194,6 +194,7 @@ export async function executeNodeHostCommand(
      const registration = await registerExecApprovalRequestForHost({
        approvalId,
        command: params.command,
+        commandArgv: argv,
        workdir: params.workdir,
        host: "node",
        nodeId,