gridcraft

mirror of https://github.com/storytold/gridcraft.git synced 2026-10-30 05:37:00 -06:00

Files

T

prxnvt 23c0107511 Engine: macro policy checks a step's parameters after tokens resolve; any path counts as file access

A path given as a token (`{"$ref": "Input"}` or `{{Input}}`) became a file name only when the
step ran, after the policy had passed it, so a macro without permissions or approval could write
a file, even from macro.check. Exports also wrote to blank paths the policy ignored. Any `path`
other than null now needs the permission and approval, and the runner checks the policy again on
the resolved parameters before the command runs.

2026-10-22 02:26:32 -04:00

calc

fix(functions): avoid overflow in median midpoints (#1579 ) (#1585 )

2026-10-17 21:13:03 -06:00

chart

Fix-up: repair test files after merging the conflicting PRs

2026-10-13 00:34:01 -04:00

core

RangeRef::parse: whole columns take at most one $ too

2026-10-19 12:21:01 -04:00

engine

Engine: macro policy checks a step's parameters after tokens resolve; any path counts as file access