Skip to content

docs(approvals): reviewers see the full redacted command before approving - #58

Merged
mrgoonie merged 13 commits into
devfrom
claude/dazzling-archimedes-1cusv7
Oct 20, 2026
Merged

mrgoonie merged 13 commits into
devfrom
claude/dazzling-archimedes-1cusv7

Conversation

@mrgoonie

Copy link
Copy Markdown
Contributor

Summary

Updates the exec-approvals paragraph (en/vi) in concepts/tools-and-permissions.md to match nextlevelbuilder/dewee#1573 and #1580:

  • Approvers see the full command with secrets redacted.
  • Approvals recorded before full commands were kept can only be denied.
  • The gateway refuses up front any command it cannot show exactly: over 64 KiB, hidden or bidi characters, or shell syntax hidden behind a redacted secret.
  • Only owners, admins and the requester see the full command.

Test Plan

npx vitest run: 35 files, 466 tests passed.


Generated by Claude Code

mrgoonie and others added 13 commits September 25, 2026 20:28
feat: Self-install, Early Access, lead mail, advisor chat and install files
feat: Early Access deadline time and Self-install refund terms
feat: PostHog analytics, and fix the website chat agent
fix: chat history order while the widget connects
feat: chat renders agent replies as Markdown
Release: structured chat lead capture, visit context and daily digest
feat: feature dewee-webchat on integrations, docs and the ecosystem shelf
Release: self-install Compose sync, security and console docs
release: sync selfhost trusted proxy settings to main
release: decision layer (Jev) docs and console/security notes
release: multiplayer agent platform positioning
@mrgoonie
mrgoonie merged commit aa7e8f0 into dev Oct 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants