A merged Vercel change adds approval checks at construction, per call and on resume; a separate fix guards approved tool inputs during replay.
By [Ryan Merket](https://runtimewire.com/author/ryan-merket)
· Published
Vercel's WorkflowAgent now accepts the 'toolApproval' policy configuration that it previously rejected in TypeScript and ignored at runtime. The pull request states the old behavior plainly: a tool without 'needsApproval' "always ran," even when an application supplied the richer policy used by 'ToolLoopAgent'.
WorkflowAgent runs agent loops inside a durable workflow, so a run can for a human decision and resume later. The approval rule now travels with that durable run and gets applied again when the run resumes. A separate fix protects the exact arguments the person approved.…
source & further reading
runtimewire.com — original article
Claude Code on desktop now lets users build custom themes with mods
PyTorch starts securing plaintext TCPStore with mutual TLS and PSKs
Vercel patches AI SDK flaw that turned 7.5 KB into 53.9 MB