mirror of
https://github.com/safishamsi/graphify.git
synced 2026-10-14 16:09:26 +00:00
safishamsiandClaude Opus 4.8
8595749021
Completes #3742: the Step 1 fix closed the .graphify_root shell line, but the progressive-disclosure add-watch reference still passed the raw, agent-substituted INPUT_PATH placeholder unquoted into a bash command ($(cat .graphify_python) -m graphify.watch INPUT_PATH), the same injection class - a scan root like $(...) / ; rm ... would execute. The watcher targets the folder graphify already extracted, so read the trusted graphify-out/.graphify_root that Step 1 resolves (the same sidecar pattern this reference already uses for .graphify_python) instead of re-substituting the untrusted placeholder. Regenerated all 14 host add-watch artifacts + expected/ snapshots; monolith-roundtrip and always-on-roundtrip stay green (cores untouched). The identical sink in the aider/devin monolith cores is tracked separately (editing a core requires a gen.py sanctioned-diff). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>