·
5 commits
to main
since this release
Allow safe read-only Bash commands in dontAsk/scoped_patch so workers can locate context efficiently without paging huge files through Read. Allows rg/grep/wc/sed -n/ls/find/git status/git diff/git show; continues to deny writes, shell chaining/redirection, dangerous commands, and out-of-scope writes. Verified with permission smoke and real worker smoke.