xy200303 1ebc56ca39 fix(approval): detect shell-expanded command names (#36846) ... Command-name obfuscation bypassed the dangerous-command denylist: the executable name could be spelled with shell tricks that survive regex matching but still resolve to a blocked command at runtime — $(echo rm), ${0/x/r}m, backticks, and printf substitutions. Adds a non-executing shell-word scanner that deobfuscates only at command positions (start, after ;|&&||, inside $(...), after sudo/env/exec/... wrappers) and feeds the resulting variants through the existing HARDLINE_PATTERNS / DANGEROUS_PATTERNS — no second blocklist. Scoping to command words keeps ordinary arguments (echo $(echo rm) -rf /) from being promoted into command names. Co-authored-by: egilewski <1078345+egilewski@users.noreply.github.com>		2026-07-01 01:39:10 -07:00
..
acp	fix: bound threat-pattern/FTS5 regex input and cover V4A Move-File edits	2026-07-01 01:05:28 -07:00
acp_adapter
agent	feat(classifier): Anthropic-specific guidance for subscription exhaustion	2026-07-01 01:36:34 -07:00
ci
cli	fix(cli): route /sessions and /history through prompt_toolkit-safe printing	2026-07-01 01:25:43 -07:00
computer_use
cron	fix(cron): commit one-shot dispatch before side effect to stop crash re-fire loop (#56177)	2026-07-01 01:30:36 -07:00
docker
e2e
fakes
fixtures/plugins/example-dashboard/dashboard
gateway	fix(api_server): pop fallback model kwarg to prevent AIAgent collision	2026-07-01 01:26:27 -07:00
hermes_cli	fix(doctor): ignore disabled toolsets in missing-API-key summary	2026-07-01 01:25:43 -07:00
hermes_state
honcho_plugin
integration
openviking_plugin
plugins	fix(memory/holographic): sanitize FTS5 queries for natural-language recall	2026-06-30 15:55:11 -07:00
providers
run_agent	fix(agent): never persist empty-response recovery scaffolding	2026-07-01 01:08:27 -07:00
scripts
skills
stress
tools	fix(approval): detect shell-expanded command names (#36846)	2026-07-01 01:39:10 -07:00
tui_gateway
website
__init__.py
conftest.py
run_interrupt_test.py
test_account_usage.py
test_assistant_ui_tap_compat.py
test_atomic_replace_symlinks.py
test_base_url_hostname.py
test_batch_runner_checkpoint.py
test_bitwarden_secrets.py
test_cli_file_drop.py
test_cli_manual_compress.py
test_cli_skin_integration.py
test_code_skew.py
test_ctx_halving_fix.py
test_dashboard_sidecar_close_on_disconnect.py
test_delegate_cascade_49148.py
test_desktop_electron_pin.py
test_desktop_mac_entitlements.py
test_dispatch_session_id.py
test_empty_model_fallback.py
test_empty_session_hygiene.py
test_env_loader_secret_sources.py
test_evidence_store.py
test_fast_safe_load.py
test_gateway_streaming_nested_config.py
test_get_tool_definitions_cache_isolation.py
test_hermes_bootstrap.py
test_hermes_constants.py
test_hermes_home_profile_warning.py
test_hermes_logging.py
test_hermes_state.py	fix: bound threat-pattern/FTS5 regex input and cover V4A Move-File edits	2026-07-01 01:05:28 -07:00
test_hermes_state_compression_locks.py
test_hermes_state_wal_fallback.py
test_honcho_client_concurrency.py
test_honcho_client_config.py
test_honcho_session_context.py
test_honcho_startup_fail_open.py
test_install_diverged_update.py	test(installer): cover diverged managed-clone recovery in install scripts	2026-06-30 20:11:01 +07:00
test_install_lockfile_churn.py
test_install_no_initial_commit.py
test_install_ps1_native_stderr_eap.py
test_install_ps1_python_fallback_venv.py
test_install_ps1_uv_powershell_host.py
test_install_sh_browser_install.py
test_install_sh_install_method_stamp.py
test_install_sh_node_global_prefix.py
test_install_sh_pythonpath_sanitization.py
test_install_sh_root_fhs_uv_python_path.py
test_install_sh_setup_wizard_tty_probe.py
test_install_sh_symlink_stomp.py
test_install_sh_termux_network_prereqs.py
test_install_unmerged_index.py
test_ipv4_preference.py
test_lazy_session_regressions.py
test_lint_config.py
test_live_system_guard_self_test.py
test_mcp_serve.py
test_mini_swe_runner.py
test_minimax_model_validation.py
test_minimax_oauth.py
test_minisweagent_path.py
test_model_forces_max_completion_tokens.py
test_model_picker_scroll.py
test_model_tools.py
test_model_tools_async_bridge.py
test_ollama_num_ctx.py
test_output_cap_parsing.py
test_package_json_lazy_deps.py
test_packaging_metadata.py
test_plugin_skills.py
test_plugin_utils.py
test_process_loop_event_loop_warning.py
test_profile_isolation_runtime.py	test(profile): two-profile regression suite + preserve skills_hub monkeypatch seam	2026-06-30 15:30:06 -07:00
test_project_metadata.py
test_retry_utils.py
test_run_tests_parallel.py
test_sanitize_tool_error.py
test_setup_temporary_outputs.py
test_slash_worker_watchdog.py
test_sql_injection.py
test_stale_utils_module_import.py
test_state_db_malformed_repair.py
test_subprocess_home_isolation.py
test_termux_all_extra_compat.py
test_timezone.py
test_toolset_distributions.py
test_toolsets.py
test_trajectory_compressor.py
test_trajectory_compressor_async.py
test_transform_llm_output_hook.py
test_transform_tool_result_hook.py
test_tui_gateway_loop_noise.py
test_tui_gateway_queue_on_busy.py
test_tui_gateway_server.py	fix(tui_gateway): clamp -1 post-compression sentinel in context_used	2026-07-01 13:36:50 +05:30
test_tui_gateway_ws.py
test_tui_mcp_late_refresh.py
test_utils_truthy_values.py
test_web_server.py
test_wheel_locales_e2e.py
test_windows_subprocess_no_window_flags.py
test_yaml_indent_consistency_31999.py
test_yuanbao_integration.py
test_yuanbao_markdown.py
test_yuanbao_pipeline.py
test_yuanbao_proto.py
test_yuanbao_shutdown.py