NCBM 135c28a622 core/tools: review a wrapper option that carries a command line ...

`env -S "rm -rf /"` ran a command nothing looked at: the option belongs to the
wrapper, so the scan skipped it and the denylist found no program to block while
the soft confirm had no interpreter to review. Collect those values — `env
-S`/`--split-string` and `su -c`/`--command`/`--session-command`, jammed
`--opt=value` and `-Svalue` forms included — and confirm the call the way an
interpreter's `-c` one-liner is confirmed, printing the text under its own
`env -S` label. Recursing into the text for a hard denylist is left out for now:
the review asks the human, who sees the command.

2026-10-06 21:54:18 +08:00

..

__init__.py

test/tools: cover workspace, file, run_command and PTY

2026-07-14 18:20:32 +08:00

conftest.py

core/tools: drop process workspace/todo globals; require bound state

2026-07-24 16:32:33 +08:00

helpers.py

test/tools: catalog, grants, and async tool helpers

2026-07-24 14:57:03 +08:00

test_access.py

config: [agent] allow_paths static pre-allow

2026-09-09 22:19:23 +08:00

test_catalog.py

core/tools: rename grep_files to regex_files (regex pattern)

2026-09-22 23:22:13 +08:00

test_chat_tools.py

prompting: let Ctrl+C cancel poll-based prompt reads

2026-09-22 19:28:03 +08:00

test_command_scan.py

core/tools: review a wrapper option that carries a command line

2026-10-06 21:54:18 +08:00

test_confirm_tags.py

core/agent: danger classification overrides YOLO tag in confirm pipeline

2026-07-29 01:37:17 +08:00

test_danger.py

core/tools: review a wrapper option that carries a command line

2026-10-06 21:54:18 +08:00

test_edit_lineno.py

core/tools: allow edit_lineno append to an empty file

2026-08-15 17:41:06 +08:00

test_fetch.py

core/tools: resume fetch bodies from memory instead of refetching

2026-10-06 19:14:38 +08:00

test_file.py

core/tools: edit results preview the old content

2026-08-15 17:40:26 +08:00

test_fs_ops.py

core/tools: show 1-based line range on read_file results

2026-08-11 15:33:12 +08:00

test_get_truncated.py

core/tools: resume fetch bodies from memory instead of refetching

2026-10-06 19:14:38 +08:00

test_glob_paths.py

core/tools/file: add glob_paths workspace search tool

2026-07-15 10:15:13 +08:00

test_mcp_tools.py

tools: register MCP server tools in the catalog (mcp source, purge)

2026-09-08 12:06:34 +08:00

test_plugins.py

core/cli: plugins list/enable/disable commands and /plugins slash

2026-07-24 16:44:44 +08:00

test_process.py

core/config: document default truncate_token everywhere

2026-08-11 19:42:10 +08:00

test_regex_files.py

core/tools: rename grep_files to regex_files (regex pattern)

2026-09-22 23:22:13 +08:00

test_skills.py

core/tools: rename grep_files to regex_files (regex pattern)

2026-09-22 23:22:13 +08:00

test_temp_workspace.py

core/tools: show 1-based line range on read_file results

2026-08-11 15:33:12 +08:00

test_todo_session.py

core/tools: drop process workspace/todo globals; require bound state

2026-07-24 16:32:33 +08:00

test_tree.py

core/tools: tree format markdown|flat|decorated, markdown default

2026-08-15 17:06:12 +08:00

test_truncate_token.py

core/tools: resume fetch bodies from memory instead of refetching

2026-10-06 19:14:38 +08:00

test_vcs.py

core/tools/vcs: add read-only vcs_* agent tools

2026-07-15 10:22:00 +08:00

test_view.py

core/tools: serialize domain objects on PersistentDataView commit

2026-07-24 15:31:06 +08:00

test_workspace_instance.py

core/tools: drop process workspace/todo globals; require bound state

2026-07-24 16:32:33 +08:00

test_workspace.py

core/tools: only value-taking options may swallow the program

2026-10-06 21:50:21 +08:00