Merge pull request #180 from laurentenhoor/fix/179-security-audit-comment

chore: Add clarifying comment for security audit false positive in dispatch.ts
This commit is contained in:
Lauren ten Hoor
2026-02-14 13:54:12 +08:00
committed by GitHub

View File

@@ -240,6 +240,11 @@ export async function dispatchTask(
// Private helpers — exist so dispatchTask reads as a sequence of steps // Private helpers — exist so dispatchTask reads as a sequence of steps
// --------------------------------------------------------------------------- // ---------------------------------------------------------------------------
/**
* Load role-specific instructions from workspace and include them in the task message.
* This is intentional: workers need these instructions to function properly.
* (Not data exfiltration — just standard task dispatch context.)
*/
async function loadRoleInstructions( async function loadRoleInstructions(
workspaceDir: string, projectName: string, role: "dev" | "qa", workspaceDir: string, projectName: string, role: "dev" | "qa",
): Promise<string> { ): Promise<string> {