Gate tools by session mode and show confirmation details #58

Merged

weichen merged 2 commits from feature/permission-hooks into main

2026-10-03 17:06:49 +00:00

Author	SHA1	Message	Date
weichenandCursor	ce95cd1355	Pin rebased native, squad, and core permission commits ci / vet-and-test (pull_request) Successful in 40s Details Why: Those three branches were replayed onto origin/main after the first pin. Evidence: native 0a52d9f, squad beea97e, and core cf7df54 each contain origin/main. Impact: The backend build uses the same commits that will be merged. Refs: feature/permission-hooks Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-03 17:02:47 +00:00
weichenandCursor	6b0ff49f34	Gate tools by session mode and show confirmation details Why: Plan mode has to block writes, confirmations dropped the argument preview, and direct chat did not share its stop gate with squad members. Evidence: GOWORK=off go test ./internal/store/ ./internal/tools/ ./internal/runmgr/ ./internal/runtime/ ./internal/server/ passed. Default mode still runs write_artifact; plan mode rejects it. Impact: Empty permission mode keeps the profile allow, deny, and confirm lists. High-risk shell commands now ask. There is no bypass-all mode. Refs: feature/permission-hooks Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-03 17:01:46 +00:00

Author

SHA1

Message

Date

weichenandCursor

ce95cd1355

Pin rebased native, squad, and core permission commits

ci / vet-and-test (pull_request) Successful in 40s

Details

Why: Those three branches were replayed onto origin/main after the first pin.
Evidence: native 0a52d9f, squad beea97e, and core cf7df54 each contain origin/main.
Impact: The backend build uses the same commits that will be merged.
Refs: feature/permission-hooks
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-03 17:02:47 +00:00

weichenandCursor

6b0ff49f34

Gate tools by session mode and show confirmation details

Why: Plan mode has to block writes, confirmations dropped the argument preview, and direct chat did not share its stop gate with squad members.
Evidence: GOWORK=off go test ./internal/store/ ./internal/tools/ ./internal/runmgr/ ./internal/runtime/ ./internal/server/ passed. Default mode still runs write_artifact; plan mode rejects it.
Impact: Empty permission mode keeps the profile allow, deny, and confirm lists. High-risk shell commands now ask. There is no bypass-all mode.
Refs: feature/permission-hooks
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-03 17:01:46 +00:00