Security: the manual-mode permission gate now fails closed. If the extension can't put the agent into manual mode on connect, it refuses to send prompts (with a clear message) instead of letting the agent run tools unguarded.
Security
- Manual-mode gate fails closed. On connect the extension asks the CLI to
enter manual mode (so dangerous tools require approval). If that request fails — e.g. a transient error or a CLI too old to support it — the session would otherwise stay in unguarded auto mode. The extension now retries once and, if it still can't arm the gate, refuses to send prompts and surfaces an actionable error ("update the Codeep CLI and reload"), rather than silently running tools without confirmation. Pairs with the CLI 2.7.0 ACP hardening.
Changed
- Pin the
codeep-reviewCI workflow to the immutable[email protected].