fix(security): default-deny command execution

2026-01-17 08:27:52 +00:00
parent d8b463d0b3
commit 56f3a2de25
36 changed files with 247 additions and 46 deletions
--- a/src/auto-reply/reply/get-reply.ts
+++ b/src/auto-reply/reply/get-reply.ts
@@ -84,7 +84,7 @@ export async function getReplyFromConfig(
    activeModel: { provider, model },
  });

-  const commandAuthorized = ctx.CommandAuthorized ?? true;
+  const commandAuthorized = ctx.CommandAuthorized ?? false;
  resolveCommandAuthorization({
    ctx,
    cfg,