Repository navigation

fix(engine): evaluate tool permissions on the same argument decode the tool executes - #2265

Merged

peppescg merged 8 commits into

mainfrom

fix/policy-args-single-decode

Oct 16, 2026

Merged

fix(engine): evaluate tool permissions on the same argument decode the tool executes#2265
peppescg merged 8 commits into
mainfrom
fix/policy-args-single-decode

Commits on Oct 15, 2026
- fix(engine): evaluate tool permissions on the same argument decode the tool executes
  
  peppescg
  and
  claude
  committed
  500312c
- perf(engine): check tool arguments without allocating
  
  peppescg
  and
  claude
  committed
  3909455
- test(engine): restore the escaped-key cases in the argument checks
  
  peppescg
  and
  claude
  committed
  1f2e20f
- fix(engine): match a built-in tool's rules against the argument it runs
  
  peppescg
  and
  claude
  committed
  5755a51
- fix(engine): check PresentPlan arguments before surfacing the plan approval
  
  peppescg
  and
  claude
  committed
  3bd1413
- fix(engine): accept keys that exactly name an untagged argument field
  
  peppescg
  and
  claude
  committed
  ed8f2cd
- test(engine): pin which ambiguous Shell arguments reach policy evaluation
  
  peppescg
  and
  claude
  committed
  1a2fa81
- test(engine): pin the argument check on every re-authorization path
  
  peppescg
  and
  claude
  committed
  40cb393