fix(agent): expand shell variables before the workspace fence scans - #527

Merged

0xKT merged 14 commits into

mainfrom

fix/shell_fence_variable_expansion

Sep 21, 2026

Commits on Sep 21, 2026

fix(agent): expand shell variables before the workspace fence scans

LivXue
and
claude
committed
886e40d
fix(agent): consume the cd option terminator before choosing a destination

LivXue
and
claude
committed
c27c933
fix(agent): scan a nested shell's payload in the shell that runs it

LivXue
and
claude
committed
50b7b6d
fix(agent): resolve a brace trim, and refuse the expansions the fence cannot

LivXue
and
claude
committed
3635130
fix(agent): expand cmd.exe percent names before the Windows path scan

LivXue
and
claude
committed
641324e
test(agent): cover the fence branches, and drop a normalizer that cannot run

LivXue
and
claude
committed
91d02b3
refactor(agent): give the fence's internal exception the Error suffix ruff wants

LivXue
and
claude
committed
6d72a61
fix(agent): unwrap command wrappers before looking for a nested payload

LivXue
and
claude
committed
6b116f1
fix(agent): read percent names only where cmd.exe is the shell, and ignore case

LivXue
and
claude
committed
2f200cb
fix(agent): read a brace body's own parameters, and refuse a brace it cannot parse

LivXue
and
claude
committed
90831f7
fix(agent): start each cd from where the last one landed

LivXue
and
claude
committed
f57c1b6
fix(*): read the separator that says whether a cd ran

LivXue
and
claude
committed
0ce2632
fix(agent): let pushd and popd move the walk the way they move the shell

LivXue
and
claude
committed
bb456fc
fix(agent): make the and-chain the unit the walk carries, not the step

LivXue
and
claude
committed
741716b

Navigation Menu

fix(agent): expand shell variables before the workspace fence scans - #527

fix(agent): expand shell variables before the workspace fence scans#527
0xKT merged 14 commits into
mainfrom
fix/shell_fence_variable_expansion

Commits on Sep 21, 2026

fix(agent): expand shell variables before the workspace fence scans

fix(agent): consume the cd option terminator before choosing a destination

fix(agent): scan a nested shell's payload in the shell that runs it

fix(agent): resolve a brace trim, and refuse the expansions the fence cannot

fix(agent): expand cmd.exe percent names before the Windows path scan

test(agent): cover the fence branches, and drop a normalizer that cannot run

refactor(agent): give the fence's internal exception the Error suffix ruff wants

fix(agent): unwrap command wrappers before looking for a nested payload

fix(agent): read percent names only where cmd.exe is the shell, and ignore case

fix(agent): read a brace body's own parameters, and refuse a brace it cannot parse

fix(agent): start each cd from where the last one landed

fix(*): read the separator that says whether a cd ran

fix(agent): let pushd and popd move the walk the way they move the shell

fix(agent): make the and-chain the unit the walk carries, not the step