safe-chains v0.239.3

Released 2026-10-19 · View on GitHub

feat (wrappers) Classify heavy-slot.sh run -- <cmd> by its inner command
feat (explain) Route --unknown-folder anchors through the plain-words dictionary
fix (jq,perl,cst) Gate jq file and module inputs, heredocs, and perl patterns
fix (resolve) Skip frozen-reach disk walks outside the sandbox
fix (glob,pathctx) Match globs in linear time and bound walk entries
fix (resolve) Walk a glob match as a literal directory
fix (resolve) Walk a glob operand's literal path and refuse unreadable directories
fix (resolve) Fail closed when a listing gap hides a frozen name
fix (resolve) Refuse globs and symlink operands the walk cannot judge
fix (resolve) Judge every expansion of a destructive operand
fix (eval) Expand brace sequences before judging an operand
fix (eval) Expand braces over the whole word, as bash does