Skip to content

fix: harden executable override policy#398

Merged
thymikee merged 1 commit into
mainfrom
codex/harden-executable-overrides
Apr 11, 2026
Merged

fix: harden executable override policy#398
thymikee merged 1 commit into
mainfrom
codex/harden-executable-overrides

Conversation

@thymikee

Copy link
Copy Markdown
Member

Summary

  • Harden process helpers to reject relative executable command paths by default while preserving bare PATH commands and absolute executable paths.
  • Validate local override inputs for the macOS helper and bundletool jar, and require executable aapt discovery from absolute SDK paths.
  • Add regression coverage plus README, website docs, and skill guidance for supported override paths.

Fixes #365.

Touched 12 files; scope stayed within process helper/override policy plus docs/tests.

Validation

  • pnpm format
  • pnpm exec vitest run src/utils/__tests__/exec.test.ts src/platforms/android/__tests__/index.test.ts src/platforms/ios/__tests__/index.test.ts
  • pnpm check:quick
  • pnpm check:unit

@github-actions

github-actions Bot commented Apr 11, 2026

Copy link
Copy Markdown
PR Preview Action v1.8.1

QR code for preview link

🚀 View preview at
https://callstackincubator.github.io/agent-device/pr-preview/pr-398/

Built to branch gh-pages at 2026-04-11 19:08 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

@thymikee thymikee force-pushed the codex/harden-executable-overrides branch 2 times, most recently from f519034 to 056149b Compare April 11, 2026 18:35
@thymikee thymikee force-pushed the codex/harden-executable-overrides branch from 056149b to 67fdea7 Compare April 11, 2026 19:08
@thymikee thymikee merged commit d63cfcd into main Apr 11, 2026
16 checks passed
@thymikee thymikee deleted the codex/harden-executable-overrides branch April 11, 2026 19:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Harden executable override policy for process helpers

1 participant