fix: block plan mode bash write bypasses#286

Open

C1-BA-B1-F3 wants to merge 1 commit into

OpenBMB:mainfrom

C1-BA-B1-F3:fix/issue-258

C1-BA-B1-F3 commented Jun 25, 2026

Summary

Explicitly reject shell control/redirection operators and write-capable Node eval patterns in the bash read-only classifier.
Add plan-mode regression coverage for redirection, pipes, separators, and Node filesystem writes.

Closes #258

Tests

npx tsc -p tsconfig.json --noEmit
node --import tsx --test tests/tool/execution/PlanModeRuntimeConstraints.test.ts


          fix: block plan mode bash write bypasses (closes OpenBMB#258)

c8802da

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet