NCBM 2b3b2073a0 core/tools: only value-taking options may swallow the program ...

The wrapper option table listed flags as if they consumed the next token, so
the program behind them was skipped: `exec -c git -c init.defaultBranch=main
init` resolved to `init` and the policy denied it as a denylisted basename,
while `exec -c rm -rf /`, `command -p rm -rf /` and `command -v rm` hid `rm`
from the denylist completely and `exec -c python -c …` lost the interpreter
review. Drop the entries that take no value — `exec -c`/`-l`, the whole
`command` entry, `pkexec --disable-internal-agent`, `su -p`, and `xargs -e`
(its argument is optional, and the jammed form needs no entry) — so the
resolved program is the one that really runs.

2026-10-06 21:50:21 +08:00

..

__init__.py

test/tools: cover workspace, file, run_command and PTY

2026-07-14 18:20:32 +08:00

conftest.py

core/tools: drop process workspace/todo globals; require bound state

2026-07-24 16:32:33 +08:00

helpers.py

test/tools: catalog, grants, and async tool helpers

2026-07-24 14:57:03 +08:00

test_access.py

config: [agent] allow_paths static pre-allow

2026-09-09 22:19:23 +08:00

test_catalog.py

core/tools: rename grep_files to regex_files (regex pattern)

2026-09-22 23:22:13 +08:00

test_chat_tools.py

prompting: let Ctrl+C cancel poll-based prompt reads

2026-09-22 19:28:03 +08:00

test_command_scan.py

core/tools: only value-taking options may swallow the program

2026-10-06 21:50:21 +08:00

test_confirm_tags.py

core/agent: danger classification overrides YOLO tag in confirm pipeline

2026-07-29 01:37:17 +08:00

test_danger.py

core/tools: only value-taking options may swallow the program

2026-10-06 21:50:21 +08:00

test_edit_lineno.py

core/tools: allow edit_lineno append to an empty file

2026-08-15 17:41:06 +08:00

test_fetch.py

core/tools: resume fetch bodies from memory instead of refetching

2026-10-06 19:14:38 +08:00

test_file.py

core/tools: edit results preview the old content

2026-08-15 17:40:26 +08:00

test_fs_ops.py

core/tools: show 1-based line range on read_file results

2026-08-11 15:33:12 +08:00

test_get_truncated.py

core/tools: resume fetch bodies from memory instead of refetching

2026-10-06 19:14:38 +08:00

test_glob_paths.py

core/tools/file: add glob_paths workspace search tool

2026-07-15 10:15:13 +08:00

test_mcp_tools.py

tools: register MCP server tools in the catalog (mcp source, purge)

2026-09-08 12:06:34 +08:00

test_plugins.py

core/cli: plugins list/enable/disable commands and /plugins slash

2026-07-24 16:44:44 +08:00

test_process.py

core/config: document default truncate_token everywhere

2026-08-11 19:42:10 +08:00

test_regex_files.py

core/tools: rename grep_files to regex_files (regex pattern)

2026-09-22 23:22:13 +08:00

test_skills.py

core/tools: rename grep_files to regex_files (regex pattern)

2026-09-22 23:22:13 +08:00

test_temp_workspace.py

core/tools: show 1-based line range on read_file results

2026-08-11 15:33:12 +08:00

test_todo_session.py

core/tools: drop process workspace/todo globals; require bound state

2026-07-24 16:32:33 +08:00

test_tree.py

core/tools: tree format markdown|flat|decorated, markdown default

2026-08-15 17:06:12 +08:00

test_truncate_token.py

core/tools: resume fetch bodies from memory instead of refetching

2026-10-06 19:14:38 +08:00

test_vcs.py

core/tools/vcs: add read-only vcs_* agent tools

2026-07-15 10:22:00 +08:00

test_view.py

core/tools: serialize domain objects on PersistentDataView commit

2026-07-24 15:31:06 +08:00

test_workspace_instance.py

core/tools: drop process workspace/todo globals; require bound state

2026-07-24 16:32:33 +08:00

test_workspace.py

core/tools: only value-taking options may swallow the program

2026-10-06 21:50:21 +08:00