ZacharyZhang-NY fd52dc0861 Gate autonomous task runs on the execution approval ...

The manual runTask path enforces assertExecutionApproval, but the
autonomous heartbeat path (enqueueHeartbeatRuns -> enqueueRun -> the
queue worker) did not, so a high-risk or filesystem task whose approval
was still pending — the normal state in ai_cofounder mode, or after an
operator declines — was executed unsupervised.

Apply the same gate in enqueueRun. Pending/declined approvals leave the
task unqueued (the heartbeat's existing try/catch skips it) and it is
picked up on the next tick once approved. ai_ceo mode auto-approves at
task creation, so autonomous companies are unaffected.

2026-06-26 17:34:09 -04:00

..

agent-messaging.test.ts

Route agent messages to department channels and thread hand-offs between agents

2026-05-30 10:50:36 -04:00

agent-run-loop.test.ts

Revert tool-choice forcing — the Codex regression was strict:null

2026-06-10 23:17:42 -04:00

audit-service.test.ts

Make audit events immutable

2026-05-23 22:35:35 -04:00

cascade-safe-triangle.test.ts

Give cascading menus hover intent with a safe triangle

2026-06-10 20:26:35 -04:00

chat-governance.test.ts

Bound autonomous agent-to-agent chat wake loops per thread

2026-06-26 17:28:13 -04:00

compliance-service.test.ts

Record provider auth sessions

2026-05-23 23:03:09 -04:00

domain-services.test.ts

Make migration-report test robust to symlinked tmpdir

2026-06-10 19:39:11 -04:00

file-helpers.test.ts

Make the Files tree show real file counts, not agent counts

2026-06-10 19:58:56 -04:00

identity-access-service.test.ts

Add identity access controls

2026-05-23 17:58:42 -04:00

migration-service.test.ts

Scope task run isolation

2026-05-23 23:09:13 -04:00

operations-service.test.ts

Add provider rate limit registry

2026-05-23 19:50:20 -04:00

org-governance-service.test.ts

Auto-approve agent work in AI CEO mode instead of gating on the operator

2026-05-29 23:27:37 -04:00

provider-auth-broker-migration.test.ts

Add provider auth broker profiles

2026-05-23 19:23:55 -04:00

provider-background-service.test.ts

Add provider background recovery lifecycle

2026-05-23 20:34:26 -04:00

provider-http.test.ts

Enforce deadlines across the whole provider request lifecycle

2026-06-09 21:18:51 -04:00

provider-models-fetch.test.ts

Fetch live provider model lists instead of the hardcoded catalog

2026-05-30 00:51:42 -04:00

provider-oauth.test.ts

Harden provider security and build dependencies

2026-06-07 14:04:32 -04:00

provider-rate-limit-registry.test.ts

Add provider rate limit registry

2026-05-23 19:50:20 -04:00

provider-service-streaming.test.ts

Scope provider requests to workspaces

2026-05-23 22:16:37 -04:00

provider-service.test.ts

Replace token-paste with native device-code/PKCE provider sign-in

2026-05-29 20:08:55 -04:00

provider-streaming.test.ts

Add provider streaming and cancel contracts

2026-05-23 20:04:28 -04:00

provider-tool-turns.test.ts

Accumulate Codex stream output items so tool calls aren't lost

2026-06-11 00:23:52 -04:00

rollback-service.test.ts

Resolve migration reconciliation items

2026-05-23 22:46:50 -04:00

sdlc-service.test.ts

Add SDLC review and eval controls

2026-05-23 18:39:05 -04:00

search-service.test.ts

Add permission aware search

2026-05-23 17:34:50 -04:00

social-service.test.ts

Record browser action evidence metadata

2026-05-23 22:33:33 -04:00

startup-recovery.test.ts

Harden recovery and department paths after adversarial review

2026-06-09 21:36:18 -04:00

task-execution-service.test.ts

Gate autonomous task runs on the execution approval

2026-06-26 17:34:09 -04:00

task-queue-worker.test.ts

Run the CEO agent autonomously with a real tool-use loop

2026-05-29 21:08:04 -04:00