Four tools now declare that they can run code, which permission logic reads.
What's wrong with this entry?
The session-requeue and local-runner-spawn admin tools, along with the PowerShell tool and cron job creation, now carry a flag marking them as capable of executing code. This is a declaration read by permission and classification logic, not a change to what the tools do.
- The two runner tools already required classifier review in auto mode and prompted otherwise.
enablesCodeExecution, start a local self-hosted runner process for try-it-out
Strings lifted out of the shipped bundle, so the claim above can be checked against them.