From b9ea6584dd3fba04c1e65839d3265c69e11419eb Mon Sep 17 00:00:00 2001
From: JOJO <1498581755@qq.com>
Date: Mon, 7 Sep 2026 12:27:58 +0800
Subject: [PATCH] =?UTF-8?q?fix(approval):=20=E5=AE=A1=E6=89=B9=20transcrip?=
 =?UTF-8?q?t=20=E8=B0=83=E8=AF=95=E8=90=BD=E7=9B=98=E9=BB=98=E8=AE=A4?=
 =?UTF-8?q?=E5=85=B3=E9=97=AD=EF=BC=8C=E9=98=B2=E6=95=8F=E6=84=9F=E4=BF=A1?=
 =?UTF-8?q?=E6=81=AF=E6=B3=84=E6=BC=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/approval_agent.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/approval_agent.py b/modules/approval_agent.py
index 3538a135..6cdb81a5 100644
--- a/modules/approval_agent.py
+++ b/modules/approval_agent.py
@@ -16,7 +16,9 @@ from modules.i18n import tr
 DEFAULT_MAX_ROUNDS = 3
 DEFAULT_TIMEOUT_SECONDS = 60
 DEFAULT_MAX_COMMAND_TIMEOUT = 20
-DEBUG_SAVE_APPROVAL_AGENT_TRANSCRIPT = True
+# 审批 transcript 含完整 messages / 命令 / 结果，最容易接触敏感动作与路径，
+# 默认关闭（防 Secret Sink）；仅在调试审批链路时临时改回 True，用完恢复。
+DEBUG_SAVE_APPROVAL_AGENT_TRANSCRIPT = False
 DEBUG_TRANSCRIPT_DIR = Path(LOGS_DIR) / "approval_agent"