Commit 03fcd8b8a24 for nodejs

commit 03fcd8b8a248ea2792924ff1ad79c80e5410a3a1
Author: yunshingng <yunshingng25@gmail.com>
Date:   Tue Sep 22 04:53:24 2026 -0400

    doc: clarify Worker execArgv vs Permission Model grants

    Omit execArgv: the worker keeps the parent's CLI flags, including
    --permission and --allow-*. Explicit execArgv (including []) replaces
    inheritance and can drop those grants. That is intended.
    Documented after nodejs/node#65359. No runtime change.

    Refs: https://github.com/nodejs/node/pull/65359
    Signed-off-by: yunshingng <yunshingng25@gmail.com>
    PR-URL: https://github.com/nodejs/node/pull/66124
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>

diff --git a/doc/api/permissions.md b/doc/api/permissions.md
index dc5e3e6111c..e84cbc0cce2 100644
--- a/doc/api/permissions.md
+++ b/doc/api/permissions.md
@@ -338,7 +338,13 @@ easy to configure permissions as needed when using `npx`.

 There are constraints you need to know before using this system:

-* The model does not inherit to a worker thread.
+* The model does not inherit to a worker thread. A default
+  `worker_threads.Worker` (no `execArgv` option) still receives the parent
+  process CLI flags, including `--permission` and `--allow-*` if those were
+  passed to the parent. Setting `execArgv` explicitly, including
+  `execArgv: []`, replaces the inherited flags. The worker then does not keep
+  the parent's Permission Model grants unless those flags are listed again in
+  `execArgv`. That difference is intended, not a bypass.
 * When using the Permission Model the following features will be restricted:
   * Native modules
   * Network
diff --git a/doc/api/worker_threads.md b/doc/api/worker_threads.md
index d39365d965e..08da7b35f15 100644
--- a/doc/api/worker_threads.md
+++ b/doc/api/worker_threads.md
@@ -1633,6 +1633,12 @@ changes:
     process (such as `--title`) are not supported. If set, this is provided
     as [`process.execArgv`][] inside the worker. By default, options are
     inherited from the parent thread.
+    Passing an explicit `execArgv` (including an empty array) replaces that
+    inheritance: the worker receives only the listed flags. Under the
+    [Permission Model](permissions.md#permission-model), that means an explicit
+    `execArgv` can drop the parent's `--permission` / `--allow-*` grants.
+    Omit `execArgv` to keep the parent's CLI flags. This is intended. See
+    [Permission Model limitations](permissions.md#limitations-and-known-issues).
   * `stdin` {boolean} If this is set to `true`, then `worker.stdin`
     provides a writable stream whose contents appear as `process.stdin`
     inside the Worker. By default, no data is provided.