Breaking change: deny all permissions by default - #509

Merged

SteveSandersonMS merged 16 commits into

mainfrom

stevesa/default-deny-permissions

Feb 18, 2026

Commits on Feb 18, 2026

feat!: default-deny permissions across all SDK languages

SteveSandersonMS
and
Copilot
committed
ca0e7f7
fix: add onPermissionRequest handlers to E2E tests for default-deny behavior

SteveSandersonMS
and
Copilot
committed
07bdcd1
fix: add OnPermissionRequest handlers to Go hooks tests

SteveSandersonMS
and
Copilot
committed
7ba9d36
refactor: add PermissionHandlers.approveAll helper, remove verbose README sections

SteveSandersonMS
and
Copilot
committed
64256b9
Rename PermissionHandlers to PermissionHandler across all SDK languages

SteveSandersonMS
and
Copilot
committed
a7bee9d
Fix ruff import sort in session.py

SteveSandersonMS
and
Copilot
committed
ae9a038
Node.js: export approveAll directly instead of PermissionHandler namespace

SteveSandersonMS
and
Copilot
committed
1135709
go fmt

SteveSandersonMS
and
Copilot
committed
2ade8c3
debug: log all events in default-deny test to inspect event structure

SteveSandersonMS
and
Copilot
committed
f124485
Fix default-deny e2e tests: check Permission denied in tool.execution_complete event

SteveSandersonMS
and
Copilot
committed
9941b3a
fix: check error.message not result.content for permission denied detection

SteveSandersonMS
and
Copilot
committed
6091fd7
fix: move requestPermission outside config nil-guard in Go; add resume deny-by-default e2e tests

SteveSandersonMS
and
Copilot
committed
9ca4554
fix: import PermissionHandler in Python e2e test

SteveSandersonMS
and
Copilot
committed
a5cc0b7
fix: remove redundant inline asyncio imports in Python e2e tests

SteveSandersonMS
and
Copilot
committed
594196b
fix: add approveAll to invokes_built-in_tools test and regenerate snapshot

SteveSandersonMS
and
Copilot
committed
63852b5
fix(go): add permission handler to abort test and regenerate snapshot

SteveSandersonMS
and
Copilot
committed
8aa82f4

Navigation Menu

Uh oh!

Breaking change: deny all permissions by default - #509

Breaking change: deny all permissions by default#509
SteveSandersonMS merged 16 commits into
mainfrom
stevesa/default-deny-permissions

Commits on Feb 18, 2026

feat!: default-deny permissions across all SDK languages

fix: add onPermissionRequest handlers to E2E tests for default-deny behavior

fix: add OnPermissionRequest handlers to Go hooks tests

refactor: add PermissionHandlers.approveAll helper, remove verbose README sections

Rename PermissionHandlers to PermissionHandler across all SDK languages

Fix ruff import sort in session.py

Node.js: export approveAll directly instead of PermissionHandler namespace

go fmt

debug: log all events in default-deny test to inspect event structure

Fix default-deny e2e tests: check Permission denied in tool.execution_complete event

fix: check error.message not result.content for permission denied detection

fix: move requestPermission outside config nil-guard in Go; add resume deny-by-default e2e tests

fix: import PermissionHandler in Python e2e test

fix: remove redundant inline asyncio imports in Python e2e tests

fix: add approveAll to invokes_built-in_tools test and regenerate snapshot

fix(go): add permission handler to abort test and regenerate snapshot