fix(agent): authorize exact actions after untrusted context

2026-09-26 18:12:21 +02:00 · 2026-08-15 05:37:47 +00:00
parent 2811c7e815
commit 1b09c568d8
16 changed files with 1510 additions and 52 deletions
@@ -725,6 +725,7 @@ async def do_app_api(content: str, owner: Optional[str] = None) -> Dict:
                "status_code": resp.status_code,
                "body": preview,
                "exit_code": 1,
+                "untrusted_content": True,
            }
        return {
            "output": f"{method} {path} -> {resp.status_code}\n{preview}",