feat: let a request approved in a plugin run by permissions

This commit is contained in:
LukeGus committed 2026-11-03 23:03:20 -06:00
1 parent 446596989e
commit 03029cd372
2 files changed
+11 -1

No files matched your search

+2 -1
View File
@@ -69,7 +69,8 @@ export function clearApprovalPolicies(): void {
}
const RANK = { allow: 0, approve: 1, deny: 2 } as const;
const TRUSTED_VIA = new Set(["automation", "rollout", "fleet"]);
// approved: a person approved this exact request in the plugin's own UI.
const TRUSTED_VIA = new Set(["automation", "rollout", "fleet", "approved"]);
const SELF_APPROVE_VIA = new Set(["assistant", "mcp", "automation"]);
/** A person is the check when the request came from something else. */