paperclip/packages
Michel Tomas e03a30dfac
fix(adapter-utils): close two leaks the scanner's reading set missed
A single quote and an ANSI-C `$'` are what JSON serialization leaves alone,
so unlike a double quote they name no layer. The reading set gave them
depth 0 alone, so a serialized double-quoted segment adjacent to the closing
quote was read as an escaped quote followed by a word-ending space, and its
bytes stayed in the clear at every depth from 1 up. Bash joins them to the
header word. Seed the tail after such an argument at every layer the unquoted
reading set already carries and take the longest, which is what the union
policy asks for.

The body stays at depth 0 on purpose: these quotes delimit the same bytes at
every layer, and reading the body deeper would take an ANSI-C escape for a
plain backslash and close the value early.

A backslash-newline is a line continuation. The token reader already named
it, but the word scan returned at it as though it were a boundary, so the
bytes on the next physical line stayed in the clear after an unquoted value
and after a closed quoted argument. The shell removes the pair and joins the
lines into one word, so the scan follows it now. Inside a quoted part the
handling is unchanged.

Claude-Session: https://claude.ai/code/session_01RYigf3eMFJjey9iKRApPGE
2026-09-06 02:45:31 +02:00
..
adapter-utils fix(adapter-utils): close two leaks the scanner's reading set missed 2026-09-06 02:45:31 +02:00
adapters feat(codex-local): give each Codex account its own home and path secret (#12709) 2026-09-02 14:46:53 -07:00
db feat(runner): add managed provider backends (#12699) 2026-09-02 00:48:30 -05:00
google-sheets-mcp-server build(deps-dev): bump typescript from 5.9.3 to 7.0.2 (#11880) 2026-08-25 14:49:05 -07:00
kv-demo-mcp-server build(deps-dev): bump typescript from 5.9.3 to 7.0.2 (#11880) 2026-08-25 14:49:05 -07:00
mcp-server feat(connections): add self-serve intent runtime (#12345) 2026-08-29 12:08:34 -05:00
paperclip-eval-kernel feat(runner): add offline evaluation tooling (#12653) 2026-09-01 05:19:47 -05:00
paperclip-runner chore(deps-dev): bump @vitejs/plugin-react from 4.7.0 to 6.1.1 (#12566) 2026-09-03 09:14:00 -07:00
plugins chore(deps-dev): bump rollup from 4.62.4 to 4.63.1 (#12570) 2026-09-03 07:30:14 -07:00
shared feat(ui): add streamlined navigation foundation (#12746) 2026-09-02 23:55:43 -07:00
skills-catalog feat(apps): add secure remote MCP and PostHog setup (#12339) 2026-08-29 12:08:32 -05:00
tailscale-https-broker build(deps-dev): bump typescript from 5.9.3 to 7.0.2 (#11880) 2026-08-25 14:49:05 -07:00
teams-catalog fix(build): enforce Node 24 across Paperclip (#11792) 2026-08-21 10:17:52 -07:00