fix(ui): read exec security from tools config (#79207)

steipete · web-flow · commit fd08fd0b1fee · 2026-05-08T06:41:02.000+01:00
diff --git a/ui/src/ui/app-render.assistant-avatar.test.ts b/ui/src/ui/app-render.assistant-avatar.test.ts
@@ -241,6 +241,19 @@ describe("renderApp assistant avatar routing", () => {
     expect(shell?.style.getPropertyValue("--chat-message-max-width")).toBe("min(1280px, 82%)");
   });
 
+  it("passes tools.exec.security to Quick Settings", () => {
+    renderApp(
+      createState({
+        configForm: {
+          tools: { exec: { security: "full" } },
+          agents: { defaults: { exec: { security: "deny" } } },
+        },
+      }),
+    );
+
+    expect(quickSettingsProps.current?.security.execPolicy).toBe("full");
+  });
+
   it("does not throw when stale cron state contains a job without a payload", () => {
     expect(() =>
       renderApp(
