o
Other
•
feat
other-apps
Permission-respecting sandbox for the execute tool
Replaces permissionless Frappe safe_exec with an allowlisted sandbox that enforces the running user's permissions on all reads and writes.