Skip to content

KC-1457: Block Service Mode from ever accessing its own config records - #2372

Merged
amangalampalli-ks merged 4 commits into
add/restrict-sm-config-recordsfrom
add/restrict-sm-config-records-int
Sep 18, 2026
Merged

amangalampalli-ks merged 4 commits into
add/restrict-sm-config-recordsfrom
add/restrict-sm-config-records-int

Conversation

@amangalampalli-ks

@amangalampalli-ks amangalampalli-ks commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Blocks Service Mode from ever reading, editing, resharing, or deleting its own two config records ("Commander Service Mode Config" and "Commander Service Mode Docker Config"), no matter which command or how it's used.

Changes

  • Reject any Service Mode command whose arguments reference either config record by name or by ID.
  • Hide both records from the vault data while a command runs, so they can't surface indirectly either.
  • Applied to every command, not a specific list, so new commands added later are covered automatically.
  • None of this affects normal Commander usage outside of Service Mode — it only applies to commands run through the Service Mode API.

@amangalampalli-ks amangalampalli-ks self-assigned this Sep 17, 2026
@amangalampalli-ks
amangalampalli-ks marked this pull request as ready for review September 17, 2026 09:56
@amangalampalli-ks
amangalampalli-ks force-pushed the add/restrict-sm-config-records-int branch 2 times, most recently from 3168cfa to 45c2764 Compare September 18, 2026 06:16
@amangalampalli-ks
amangalampalli-ks force-pushed the add/restrict-sm-config-records-int branch from 45c2764 to c9fd1c5 Compare September 18, 2026 17:13
@amangalampalli-ks
amangalampalli-ks merged commit 2681c40 into add/restrict-sm-config-records Sep 18, 2026
4 checks passed
sk-keeper pushed a commit that referenced this pull request Sep 18, 2026
#2372)

* Block Service Mode from ever accessing its own config records

* Fix copilot review comments

* Fix claude review comments

* Fix review comments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants