roboomp e650607cad fix(coding-agent): segment bash approval commands with shell-aware tokenizer ...

The regex splitter only recognized `&&`, `||`, `;`, `|` and newlines, so a
single `&` (background operator) — also a command terminator — slipped a
dangerous command past a deny rule (`sleep 1 & rm -rf /tmp/x`), which under
approvalMode: yolo executed with no prompt.

Extract the shell-aware tokenizer from gh-cache-invalidation into a shared
tools/shell-tokenize.ts and reuse it for deny/prompt segmentation. It honors
every command boundary (`&&`, `||`, `;`, `|`, single `&`, subshells,
newlines) plus quoting and escapes, so both callers share one implementation.

Fixes #6695

2026-07-26 11:36:19 +00:00

..

skills

fix(extensions): isolated self-scheduled callbacks from killing the session

2026-07-16 07:17:10 +00:00

toolconv

chore: update docs

2026-06-17 04:37:39 +02:00

tools

feat(hashline): enabled leniency rule for bare bullet minus rows

2026-07-24 15:36:32 +02:00

adding-a-provider.md

refactor(catalog)!: split model catalog from pi-ai

2026-06-10 04:06:57 +02:00

advisor-watchdog.md

docs: corrected /advisor as session-scoped, not persisted

2026-07-21 21:20:34 +00:00

ai-schema-normalize.md

chore: update docs

2026-06-17 04:37:39 +02:00

approval-mode.md

feat: add native Codex computer use

2026-07-24 01:40:04 +00:00

arktype-guide.md

feat: migrated validation schemas and tool definitions from Zod to ArkType

2026-06-18 00:59:53 +02:00

auth-broker-gateway.md

fix(ai): close auth broker account pool gaps

2026-07-23 21:28:17 +00:00

bash-tool-runtime.md

feat: removed redundant pre-execution bash command fixup logic

2026-07-11 18:28:32 +02:00

blob-artifact-architecture.md

chore: update docs

2026-06-17 04:37:39 +02:00

collab.md

refactor(coding-agent/slash-commands): removed collab qrcode slash commands

2026-06-19 01:30:26 +02:00

compaction.md

refactor(coding-agent): consolidated tool surface onto xd:// devices and hub

2026-07-15 15:16:29 +02:00

computer-use.md

fix: screenshot latency, somehow calling screencapture is faster ???

2026-07-24 06:39:49 +02:00

config-usage.md

fix(coding-agent): restored profile keybinding inheritance

2026-07-09 18:27:22 +02:00

context-files.md

chore: update docs

2026-06-17 04:37:39 +02:00

custom-tools.md

refactor(coding-agent): consolidated tool surface onto xd:// devices and hub

2026-07-15 15:16:29 +02:00

environment-variables.md

feat(ai): implemented lite response overrides and computer call unrolling for codex

2026-07-24 06:10:00 +02:00

ERRATA-GPT5-HARMONY.md

chore: update docs

2026-06-17 04:37:39 +02:00

extension-loading.md

chore: update docs

2026-06-17 04:37:39 +02:00

extensions.md

feat(extensions): expose session service tiers

2026-07-23 21:49:20 +00:00

fs-scan-cache-architecture.md

refactor: renamed search and find tools to grep and glob

2026-06-27 00:57:55 +02:00

gemini-manifest-extensions.md

chore: updated docs

2026-05-31 04:36:14 +02:00

handoff-generation-pipeline.md

feat: optimized handoff generation and harden request safety

2026-06-22 20:05:40 +02:00

hooks.md

chore: update docs

2026-06-17 04:37:39 +02:00

install-id.md

chore: update docs

2026-06-17 04:37:39 +02:00

keybindings.md

Merge PR #2134: fix(coding-agent): submit /agents create form and hook editor on Ctrl+Q (@roboomp)

2026-06-21 17:06:15 +02:00

local-models.md

feat(coding-agent): replaced legacy pi/ role alias prefix with

2026-07-13 23:26:33 +02:00

lsp-config.md

feat(coding-agent): add Expert Elixir language server to built-in LSP defaults

2026-06-11 00:57:23 +02:00

macos-signing-notarization.md

docs: update docs

2026-06-12 14:43:35 +02:00

magic-keywords.md

docs: documented magic keywords

2026-07-15 15:16:20 +00:00

marketplace.md

Merge PR #1173: feat(marketplace): prefer .omp-plugin/marketplace.json catalog path

2026-06-15 19:46:14 +02:00

mcp-config.md

fix(coding-agent): harden profile auth shipping gaps

2026-06-14 20:30:50 -03:00

mcp-protocol-transports.md

fix(mcp): supported legacy sse transport

2026-06-28 07:48:40 +00:00

mcp-runtime-lifecycle.md

docs: update docs

2026-06-12 14:43:35 +02:00

mcp-server-tool-authoring.md

chore: update docs

2026-06-17 04:37:39 +02:00

memory.md

chore: update docs

2026-06-17 04:37:39 +02:00

mnemosyne-memory-backend.md

chore: update docs

2026-06-17 04:37:39 +02:00

models.md

fix(catalog): warned on LiteLLM metadata fallback

2026-07-17 07:38:06 +00:00

native-crates.md

docs(coding-agent): completed full omp docs sync

2026-07-01 00:00:52 +00:00

natives-addon-loader-runtime.md

chore: update docs

2026-06-17 04:37:39 +02:00

natives-architecture.md

docs(coding-agent): completed full omp docs sync

2026-07-01 00:00:52 +00:00

natives-binding-contract.md

chore: update docs

2026-06-17 04:37:39 +02:00

natives-build-release-debugging.md

feat: consolidated and automate changelog management

2026-06-27 03:08:52 +02:00

natives-media-system-utils.md

chore: update docs

2026-06-17 04:37:39 +02:00

natives-rust-task-cancellation.md

chore: update docs

2026-06-17 04:37:39 +02:00

natives-shell-pty-process.md

docs: update docs

2026-06-12 14:43:35 +02:00

natives-text-search-pipeline.md

chore: update docs

2026-06-17 04:37:39 +02:00

non-compaction-retry-policy.md

chore: update docs

2026-06-17 04:37:39 +02:00

notebook-tool-runtime.md

docs: update docs

2026-06-12 14:43:35 +02:00

plugin-manager-installer-plumbing.md

chore: update docs

2026-06-17 04:37:39 +02:00

porting-from-pi-mono.md

fix(coding-agent): implemented pi's ui.addAutocompleteProvider API

2026-07-09 18:27:23 +02:00

porting-to-natives.md

chore: updated docs

2026-05-31 04:36:14 +02:00

provider-endpoint-constraints.md

refactor(ai/providers): removed parallel tool call restriction

2026-06-21 00:20:56 +02:00

provider-streaming-internals.md

feat(coding-agent): added ARIA snapshot support for browser tools

2026-06-21 06:39:14 +02:00

providers.md

fix(ai): scope OpenAI Codex credential identity by ChatGPT workspace

2026-07-19 22:45:16 -04:00

python-repl.md

refactor(eval): rename agent() params agent_type→agent, return_handle→handle

2026-06-22 22:12:24 +02:00

resolve-tool-runtime.md

refactor(coding-agent): consolidated tool surface onto xd:// devices and hub

2026-07-15 15:16:29 +02:00

rpc.md

fix(rpc): stream v2 chunk frames with backpressure and recover stale page cursors

2026-07-23 12:38:13 +02:00

rulebook-matching-pipeline.md

docs(ttsr): clarified scope frontmatter forms

2026-07-15 06:39:11 +00:00

sdk.md

fix(coding-agent): queued extension sendUserMessage as steer while streaming

2026-07-09 18:27:22 +02:00

secrets.md

docs(secrets): correct placeholder key path to agent dir

2026-06-25 01:42:46 +05:30

session-operations-export-share-fork-resume.md

docs: document /vibe mode and /fresh command

2026-07-23 21:12:08 +00:00

session-switching-and-recent-listing.md

feat: migrated service tier settings to a per-model-family architecture

2026-06-30 04:14:48 +02:00

session-tree-plan.md

chore: update docs

2026-06-17 04:37:39 +02:00

session.md

refactor(coding-agent): consolidated tool surface onto xd:// devices and hub

2026-07-15 15:16:29 +02:00

settings.md

fix(coding-agent): segment bash approval commands with shell-aware tokenizer

2026-07-26 11:36:19 +00:00

skills.md

chore: update docs

2026-06-17 04:37:39 +02:00

slash-command-internals.md

chore: update docs

2026-06-17 04:37:39 +02:00

system-prompt-customization.md

feat(coding-agent): transitioned session title generation to xml markers

2026-07-06 17:38:00 +02:00

task-agent-discovery.md

feat(task): removed per-call model override from task tool

2026-07-24 14:51:48 +02:00

theme.md

refactor(coding-agent): migrated UI chrome to rounded box corners

2026-06-19 07:57:15 +02:00

tree.md

chore: update docs

2026-06-17 04:37:39 +02:00

ttsr-injection-lifecycle.md

docs: update docs

2026-06-12 14:43:35 +02:00

tui-core-renderer.md

Merge PR #5779: fix(tui): prevent vibe_wait TV-wall scrollback stacking (@roboomp)

2026-07-18 20:12:47 +02:00

tui-runtime-internals.md

fix(tui): restored alt-screen borrow for resize drag frames

2026-07-17 05:49:22 +02:00

tui.md

chore: update docs

2026-06-17 04:37:39 +02:00

user-facing-packages.md

docs(coding-agent): completed full omp docs sync

2026-07-01 00:00:52 +00:00

vibe-mode.md

docs: document /vibe mode and /fresh command

2026-07-23 21:12:08 +00:00