mirror of
https://github.com/ultraworkers/claw-code-parity.git
synced 2026-04-23 05:06:12 +02:00
0a03f12432
- bashPermissions: CommandPermissionRule + BashPermissionPolicy with allow/deny list matching (exact and prefix patterns) - bashSecurity: check_security() detects embedded credentials, dangerous env vars (LD_PRELOAD, DYLD_INSERT_LIBRARIES), and shell injection in data-passing commands - shouldUseSandbox: command-aware sandbox decision based on CommandIntent classification and SandboxConfig - Pipeline extended: validate_command() now runs security checks as step 5 - 19 new tests (51 total), all passing - fmt/clippy clean