plyngent

mirror of https://github.com/NCBM/plyngent.git synced 2026-11-07 07:17:54 +08:00

Files

T

NCBM 2b3b2073a0 core/tools: only value-taking options may swallow the program

The wrapper option table listed flags as if they consumed the next token, so
the program behind them was skipped: `exec -c git -c init.defaultBranch=main
init` resolved to `init` and the policy denied it as a denylisted basename,
while `exec -c rm -rf /`, `command -p rm -rf /` and `command -v rm` hid `rm`
from the denylist completely and `exec -c python -c …` lost the interpreter
review. Drop the entries that take no value — `exec -c`/`-l`, the whole
`command` entry, `pkexec --disable-internal-agent`, `su -p`, and `xargs -e`
(its argument is optional, and the jammed form needs no entry) — so the
resolved program is the one that really runs.

2026-10-06 21:50:21 +08:00

test_agent

config: rename the DeepSeek flash model to deepseek-flash

2026-10-06 21:22:35 +08:00

test_cli

cli/display: hold a batch's later prefixes until the open row is done

2026-10-06 21:38:03 +08:00

test_config

config: rename the DeepSeek flash model to deepseek-flash

2026-10-06 21:22:35 +08:00

test_lmproto

config: rename the DeepSeek flash model to deepseek-flash