[luv-17] Replace multi-slash-command injection with CLI flags and bump to 0.0.8 - #14
Conversation
…p to 0.0.8 The launch prefix joined /color, /remote-control, and /plan with newlines, but claude treats the positional prompt as one message — when it starts with '/', the rest (including newlines) becomes the first command's argument, so only /color ran and the color name was "cyan\n/remote-control". Swap to native CLI flags: --remote-control replaces the slash command, --permission-mode plan + positional prompt replaces /plan <prompt>. /color stays only in the no-prompt branch since it has no flag equivalent. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 41 minutes and 31 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (2)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
1 participant
Summary
/remote-controlwith the--remote-controlCLI flag and/plan <prompt>with--permission-mode plan+ positional prompt, fixing the broken newline-joined injection that producedInvalid color "cyan\n/remote-control"./color <random>only when no user prompt is supplied (no CLI equivalent exists for prompt-bar color, and the single positional slot can't carry both a/colorslash command and a user prompt).Test plan
luv <repo> <existing-number>(no prompt): Claude opens inbypassPermissionswith a random prompt-bar color and Remote Control active.luv <repo> "fix the auth bug"(with prompt): Claude opens in plan mode, first message is the prompt, Remote Control active, default color (expected trade-off)..luv/settings.json+compose_file; confirmdocker compose execpasses the same flags./remote-controlor/plantext appears as a literal first user message.🤖 Generated with Claude Code