Skip to content

refactor(interp): remove AllowAllCommands from public API#134

Merged
matt-dz merged 1 commit intomainfrom
matt-dz/rshell-allow-all-commands-exposure
Mar 19, 2026
Merged

refactor(interp): remove AllowAllCommands from public API#134
matt-dz merged 1 commit intomainfrom
matt-dz/rshell-allow-all-commands-exposure

Conversation

@matt-dz
Copy link
Copy Markdown
Collaborator

@matt-dz matt-dz commented Mar 19, 2026

Summary

  • Remove the exported AllowAllCommands() function from the interp package's public API surface
  • Introduce internal/interpoption package with a registration pattern so the CLI (--allow-all-commands) and internal tests retain access
  • External consumers of the Go library cannot bypass command restrictions via the AllowAllCommands option

Test plan

  • go build ./... compiles cleanly
  • go test ./... — all tests pass
  • CI passes
  • Verify --allow-all-commands CLI flag works end-to-end

🤖 Generated with Claude Code

Move AllowAllCommands behind internal/interpoption so external
consumers of the interp package can no longer bypass command
restrictions. The CLI --allow-all-commands flag and internal tests
continue to work via the module-internal registration pattern.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@matt-dz
Copy link
Copy Markdown
Collaborator Author

matt-dz commented Mar 19, 2026

@codex conduct a comprehensive security and code review

@chatgpt-codex-connector
Copy link
Copy Markdown

Codex Review: Didn't find any major issues. What shall we delve into next?

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@matt-dz matt-dz marked this pull request as ready for review March 19, 2026 18:11
@matt-dz matt-dz added this pull request to the merge queue Mar 19, 2026
Merged via the queue into main with commit 2454253 Mar 19, 2026
30 of 31 checks passed
@matt-dz matt-dz deleted the matt-dz/rshell-allow-all-commands-exposure branch March 19, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants