docs(ack): clarify OMP yolo as authorized approval mode

2026-08-23 22:25:36 +08:00
parent 1a74b15ed5
commit b7b6d814b2
3 changed files with 14 additions and 3 deletions
@@ -503,6 +503,9 @@ def render_worker_argv(
        return argv

    if cli == "omp":
+        # OMP --approval-mode yolo is a worker approval mode, not a CLI bypass flag.
+        # It applies only to cli=omp and requires explicit user authorization for
+        # workspace-write profiles; --auto-approve stays forbidden.
        omp_approval = "always-ask" if permission == "read-only" else "yolo"
        return [
            executable,