feat(hooks): `Hook.runAs` — `'system' | 'user' | 'inherit'`, default `'inherit'` - #14915

Merged

hotlong merged 13 commits into

mainfrom

claude/issue-14010-hook-run-as-inherit

Sep 3, 2026

Commits on Sep 3, 2026

feat(spec,objectql): Hook.runAs — system | user | inherit, default inherit
claude
committed
c1d44c6
test(objectql): pin Hook.runAs on the in-process surface
claude
committed
92cdef2
test(runtime): pin Hook.runAs parity on the sandboxed (L2 body) surface
claude
committed
39e0131
test(dogfood): the #14010 symptom, end to end through the real security stack
claude
committed
d6b6233
docs,lint: teach runAs where the old prose said a hook cannot elevate
claude
committed
dff837f
chore(spec): regenerate references + liveness counts; add the changeset
claude
committed
f1041fa
fix(tests,census): satisfy the derived gate family
claude
committed
22f1446
chore(i18n): regenerate the metadata-form bundles for the hook runAs field
claude
committed
fecdeca
test(objectql): address the recorder's updates and await through try/catch
claude
committed
c59f87b
Merge remote-tracking branch 'origin/main' into claude/issue-14010-hook-run-as-inherit
claude
committed
91bbaee
chore: merge main and regenerate the two os-regen artifacts
claude
committed
78da2cb
Merge remote-tracking branch 'origin/main' into claude/issue-14010-hook-run-as-inherit
claude
committed
8ea4fd1
chore: regenerate generated artifacts after merging main
claude
committed
423e269