Joao Moura 7cbba7bd0a fix(agents): close two heredoc bypasses in the guard ...

A body piped into a shell is executable, not data, so it is no longer
stripped: bash <<'EOF' containing a blocked command is matched again.

The opener's own line is now preserved, so a redirect written after the
delimiter is still seen. Only the body between delimiters is replaced.

Both found by review on the previous commit.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ASfWmW3RGy4qAQm6s8U9jH

2026-08-08 21:24:04 -07:00

..

hooks

fix(agents): close two heredoc bypasses in the guard

2026-08-08 21:24:04 -07:00

settings.json

chore(agents): load AGENTS.md in Claude Code and guard its rules

2026-08-08 16:29:40 -07:00