Breaking change: deny all permissions by default#509

Merged

SteveSandersonMS merged 16 commits intomainfrom

stevesa/default-deny-permissions

Feb 18, 2026

Commits on Feb 18, 2026

feat!: default-deny permissions across all SDK languages

SteveSandersonMS
and
Copilot
committed
fix: add onPermissionRequest handlers to E2E tests for default-deny behavior

SteveSandersonMS
and
Copilot
committed
fix: add OnPermissionRequest handlers to Go hooks tests

SteveSandersonMS
and
Copilot
committed
refactor: add PermissionHandlers.approveAll helper, remove verbose README sections

SteveSandersonMS
and
Copilot
committed
Rename PermissionHandlers to PermissionHandler across all SDK languages

SteveSandersonMS
and
Copilot
committed
Fix ruff import sort in session.py

SteveSandersonMS
and
Copilot
committed
Node.js: export approveAll directly instead of PermissionHandler namespace

SteveSandersonMS
and
Copilot
committed
go fmt

SteveSandersonMS
and
Copilot
committed
debug: log all events in default-deny test to inspect event structure

SteveSandersonMS
and
Copilot
committed
Fix default-deny e2e tests: check Permission denied in tool.execution_complete event

SteveSandersonMS
and
Copilot
committed
fix: check error.message not result.content for permission denied detection

SteveSandersonMS
and
Copilot
committed
fix: move requestPermission outside config nil-guard in Go; add resume deny-by-default e2e tests

SteveSandersonMS
and
Copilot
committed
fix: import PermissionHandler in Python e2e test

SteveSandersonMS
and
Copilot
committed
fix: remove redundant inline asyncio imports in Python e2e tests

SteveSandersonMS
and
Copilot
committed
fix: add approveAll to invokes_built-in_tools test and regenerate snapshot

SteveSandersonMS
and
Copilot
committed
fix(go): add permission handler to abort test and regenerate snapshot

SteveSandersonMS
and
Copilot
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Breaking change: deny all permissions by default#509

Breaking change: deny all permissions by default#509
SteveSandersonMS merged 16 commits intomainfrom
stevesa/default-deny-permissions

Commits on Feb 18, 2026

feat!: default-deny permissions across all SDK languages

fix: add onPermissionRequest handlers to E2E tests for default-deny behavior

fix: add OnPermissionRequest handlers to Go hooks tests

refactor: add PermissionHandlers.approveAll helper, remove verbose README sections

Rename PermissionHandlers to PermissionHandler across all SDK languages

Fix ruff import sort in session.py

Node.js: export approveAll directly instead of PermissionHandler namespace

go fmt

debug: log all events in default-deny test to inspect event structure

Fix default-deny e2e tests: check Permission denied in tool.execution_complete event

fix: check error.message not result.content for permission denied detection

fix: move requestPermission outside config nil-guard in Go; add resume deny-by-default e2e tests

fix: import PermissionHandler in Python e2e test

fix: remove redundant inline asyncio imports in Python e2e tests

fix: add approveAll to invokes_built-in_tools test and regenerate snapshot

fix(go): add permission handler to abort test and regenerate snapshot