Add an opt-in toggle (require_admin_for_exec_approval, default false) that restricts who can click Approve/Deny on a dangerous-command prompt to admins listed in allow_admin_from. Off by default, so the v0.16-restored user-scope behavior is unchanged. When on, the clicker must pass the normal admission check AND be an admin; fails closed (logged) when no admins are configured. Only ExecApprovalView is gated — model picker / clarify / update-prompt stay user-scope. |
||
|---|---|---|
| .. | ||
| dingtalk | ||
| discord | ||
| feishu | ||
| google_chat | ||
| homeassistant | ||
| irc | ||
| line | ||
| matrix | ||
| mattermost | ||
| ntfy | ||
| photon | ||
| raft | ||
| simplex | ||
| slack | ||
| sms | ||
| teams | ||
| telegram | ||
| wecom | ||