5 Commits

Author	SHA1	Message	Date
NCBM	ba021cb138	tools/workspace: mode-aware path grants and escape hint	2026-09-09 22:11:50 +08:00
NCBM	1d718582ac	core/tools: drop process workspace/todo globals; require bound state	2026-07-24 16:32:33 +08:00
NCBM	d6616d0da3	core/tools: timed human allow for denylisted commands ... Denylist hits ask the user (default deny, timeout) instead of only hard rejecting when a policy hook is installed. Independent of YOLO soft-confirm; session grants skip re-prompt for the same basename. CLI installs the hook via install_cli_limit_hooks.	2026-07-20 03:02:34 +08:00
NCBM	510dd67a54	core/tools: classify destructive tools and clarify policy denies ... Add classify_danger for delete/move/overwrite paths, get_path_denylist, and clearer path/command denial messages.	2026-07-14 23:30:02 +08:00
NCBM	f45af76c9b	test/tools: cover workspace, file, run_command and PTY	2026-07-14 18:20:32 +08:00