76bda6cf55
- Fill TimeZoneId only for a configured session/host zone with a resolvable IANA id (IExtensionHost.TimeZoneId); otherwise children inherit the host's TZ instead of TZ=Local/UTC. - Host hardening logs a warning instead of throwing when libc/prctl can't be resolved. - A hook or process_spawn handler returning a null or incomplete context fails the spawn with InvalidOperationException, so bash reports "process environment hook failed". - Move tool-result redaction into the Agent slice with a behavioural no-change check. - ProcessSpawnContext.ApplyTo(psi) sets cwd and replaces the environment; used by bash and ExecAsync. - Split the Telegram process environment types into their own files; move the Extensions.Tests NoHostHardening under Support/; check the Claude Code assembly never references the spawn policy. - Spec and docs: TZ inheritance, incomplete contexts, ApplyTo, async spawn handlers, root skip.
11 lines
445 B
C#
11 lines
445 B
C#
namespace Volcanic.AgenticCore.Telegram;
|
|
|
|
/// <summary>The <c>ProcessEnvironment</c> configuration section. Its lists are added to the core defaults, not replacing them.</summary>
|
|
public sealed class ProcessEnvironmentSection
|
|
{
|
|
public const string SectionName = "ProcessEnvironment";
|
|
public List<string> Deny { get; set; } = [];
|
|
public List<string> Allow { get; set; } = [];
|
|
public bool HardenHostProcess { get; set; } = true;
|
|
}
|