runners: share protocol and reviewer policy

2026-04-11 05:07:05 +09:00
parent 94d53e4cc3
commit f5c3393c32
17 changed files with 648 additions and 276 deletions
--- a/runners/shared/src/reviewer-git-guard.ts
+++ b/runners/shared/src/reviewer-git-guard.ts
@@ -4,6 +4,7 @@ import os from 'os';
 import path from 'path';

 import type { RoomRoleContext } from './room-role-context.js';
+import { isUnsafeHostPairedModeEnabled } from './reviewer-runtime-policy.js';

 const BLOCKED_GIT_SUBCOMMANDS = new Set([
  'add',
@@ -26,7 +27,7 @@ const BLOCKED_GIT_SUBCOMMANDS = new Set([
 ]);

 export function isReviewerRuntime(roomRoleContext?: RoomRoleContext): boolean {
-  if (process.env.EJCLAW_UNSAFE_HOST_PAIRED_MODE === '1') {
+  if (isUnsafeHostPairedModeEnabled()) {
    return false;
  }
  return roomRoleContext?.role === 'reviewer';