Devin Robison 1b3a1246d0 Block reset-profile on lower-privilege browser request surfaces (#54618) ...

* Block reset-profile on lower-privilege browser request surfaces

* add missing tests

* Fix tests

* Test fix

2026-03-25 13:36:59 -06:00

..

config.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

exec-policy.test.ts

…

exec-policy.ts

…

invoke-browser.test.ts

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

invoke-browser.ts

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

invoke-system-run-allowlist.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

invoke-system-run-plan.test.ts

Gateway: treat scope-limited probe RPC as degraded reachability (#45622)

2026-03-13 23:13:33 -05:00

invoke-system-run-plan.ts

refactor: separate exec policy and execution targets

2026-03-23 19:36:44 -07:00

invoke-system-run.test.ts

test: harden vitest no-isolate coverage

2026-03-22 10:48:21 -07:00

invoke-system-run.ts

refactor: separate exec policy and execution targets

2026-03-23 19:36:44 -07:00

invoke-types.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

invoke.sanitize-env.test.ts

test: align extension runtime mocks with plugin-sdk (#51289)

2026-03-20 15:59:53 -07:00

invoke.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

runner.credentials.test.ts

test: share node host credential assertions

2026-03-13 21:40:54 +00:00

runner.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

with-timeout.ts

…