From f6fefd7f5f5fc0bc7a526b9f6f782266ff25c65c Mon Sep 17 00:00:00 2001 From: Peter Steinberger Date: Sun, 18 Jan 2026 16:08:33 +0000 Subject: [PATCH] fix(exec-approvals): fix command token parsing --- CHANGELOG.md | 1 + src/infra/exec-approvals.ts | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index dec141d30..104f863e4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -48,6 +48,7 @@ Docs: https://docs.clawd.bot - Memory: avoid sqlite-vec unique constraint failures when reindexing duplicate chunk ids. (#1151) - Skills: improve remote bin probe logging with node labels + connectivity hints. - Exec approvals: enforce allowlist when ask is off; prefer raw command for node approvals/events. +- Exec approvals: fix command token parsing for PATH resolution. (#1167) — thanks @gumadeiras. - Tools: return a companion-app-required message when node exec is requested with no paired node. - Streaming: emit assistant deltas for OpenAI-compatible SSE chunks. (#1147) — thanks @alauppe. - Model fallback: treat timeout aborts as failover while preserving user aborts. (#1137) — thanks @cheeeee. diff --git a/src/infra/exec-approvals.ts b/src/infra/exec-approvals.ts index 213ce5a7c..3a7d89890 100644 --- a/src/infra/exec-approvals.ts +++ b/src/infra/exec-approvals.ts @@ -242,7 +242,7 @@ function parseFirstToken(command: string): string | null { if (end > 1) return trimmed.slice(1, end); return trimmed.slice(1); } - const match = /^[^\\s]+/.exec(trimmed); + const match = /^\S+/.exec(trimmed); return match ? match[0] : null; }