fix(security): use in-memory set for permanent allowlist save

2026-03-07 05:38:20 +03:30
parent f75b1d21b4
commit 40bc7216e1
1 changed files with 1 additions and 1 deletions
--- a/tools/approval.py
+++ b/tools/approval.py
@@ -295,6 +295,6 @@ def check_dangerous_command(command: str, env_type: str,
    elif choice == "always":
        approve_session(session_key, pattern_key)
        approve_permanent(pattern_key)
-        save_permanent_allowlist(load_permanent_allowlist() | {pattern_key})
+        save_permanent_allowlist(_permanent_approved)

    return {"approved": True, "message": None}