What
A mode that strips all bash command allowlist entries from the permission context, effectively requiring re-approval for all bash commands.
Status
Feature-flagged (disabled by default)
Details
- Gated behind
tengu_bash_allowlist_strip_allflag with default!1(false) - When enabled, the
stripAllBashFlagproperty activates in the permission decision flow - May be intended as a security hardening measure for sensitive environments
Evidence
Flag R8("tengu_bash_allowlist_strip_all", !1) assigned to stripAllBashFlag (search for "tengu_bash_allowlist_strip_all")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.