From 1558742539e504e7628f9fecbfa50e69faee2aad Mon Sep 17 00:00:00 2001
From: jeffaf <jeffbarron@protonmail.com>
Date: Fri, 27 Feb 2026 08:20:56 -0500
Subject: [PATCH] fix: disable rubberband in obfuscation approval test

The approval-id test for obfuscated commands (echo ... | sh) exercises the
separate obfuscation detection + approval flow. RubberBand's indirect_execution
pattern correctly catches this command, but the test needs the approval flow to
run instead. Disable RubberBand for this specific test case.
---
 src/agents/bash-tools.exec.approval-id.test.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/agents/bash-tools.exec.approval-id.test.ts b/src/agents/bash-tools.exec.approval-id.test.ts
index 211d8e3dcaa..ee037f9ab1f 100644
--- a/src/agents/bash-tools.exec.approval-id.test.ts
+++ b/src/agents/bash-tools.exec.approval-id.test.ts
@@ -746,6 +746,7 @@ describe("exec approvals", () => {
       ask: "off",
       security: "full",
       approvalRunningNoticeMs: 0,
+      defaults: { rubberband: { enabled: false } },
     });
 
     const result = await tool.execute("call6", {