qwen-code/packages
胡玮文 6ad990e1e7 fix(mcp): restore trust+isTrustedFolder permission check in getDefaultPermission
The trust/isTrustedFolder logic was accidentally dropped during the
permission system refactor in feat/support-permission (PR #2283).

Previously, shouldConfirmExecute() returned false (no confirmation) when
both conditions were met:
  - MCP server config has trust: true
  - The workspace folder is trusted (isTrustedFolder())

The refactor replaced shouldConfirmExecute() with getDefaultPermission() but
left out the trust check entirely, adding a comment claiming 'trust logic is
now handled by PM rules' — however no PM rules were ever generated from the
trust setting, making trust: true completely non-functional.

This fix restores the original behavior: MCP tools from a trusted server
(trust: true) auto-approve only when the workspace is also trusted, preserving
the security gate that prevents trust settings from bypassing confirmation in
untrusted folders.
2026-03-24 21:11:43 +08:00
..
cli add singal abort for hooks 2026-03-23 16:02:54 +08:00
core fix(mcp): restore trust+isTrustedFolder permission check in getDefaultPermission 2026-03-24 21:11:43 +08:00
sdk-java fix(core/rateLimit): add support for IdealTalk rate limit error code 1305 2026-02-28 11:05:41 +08:00
sdk-typescript feat: add system prompt customization options in SDK and CLI 2026-03-16 02:57:31 +08:00
test-utils chore: bump version to 0.13.0 2026-03-18 10:41:32 +08:00
vscode-ide-companion recover changes 2026-03-23 11:09:55 +08:00
web-templates refactor(export): clean up unnecessary fields and simplify data structure 2026-03-19 14:33:33 +08:00
webui feat(vscode-ide-companion): add image paste support (#1978) 2026-03-20 13:47:09 +08:00
zed-extension chore(zed-extension): update package version to 0.10.0 2026-02-06 14:26:01 +08:00