fix(auto-approval): handle heredocs safely

[hannesrudolph]

Summary

Fixes command auto-approval false positives / hangs caused by parsing heredoc bodies as shell commands and by overly broad zsh process-substitution detection.

Changes

• Treat heredoc blocks as a single command when parsing for allow/deny decisions.
• Tighten zsh process-substitution detection so Python-style x=(...) does not trigger it.
• Add regression tests.

Repro / test case

import json, pathlib
p=pathlib.Path('.roo/tmp/release-notes/temp_pr_inclusion_v3.40.0.json')
data=json.loads(p.read_text(encoding='utf-8'))
data['policy']='linked-only'
data['notes']=(data.get('notes','')+'; policy set to linked-only by user').lstrip('; ')
p.write_text(json.dumps(data, indent=2)+"\n", encoding='utf-8')
print('policy written')
PY

Test

• cd src && npx vitest run core/auto-approval/__tests__/commands.spec.ts

---

Important

Fixes command parsing issues by treating heredocs as single commands and refining zsh process substitution detection, with tests added.

• Behavior:
  • Treat heredoc blocks as single commands in parseCommand() in parse-command.ts.
  • Refine zsh process substitution detection in containsDangerousSubstitution() in commands.ts to avoid false positives with Python-style assignments.
• Tests:
  • Add tests in commands.spec.ts to verify heredoc handling and zsh process substitution detection.
• Functions:
  • Add parseHeredocStart() in parse-command.ts to identify heredoc starts and delimiters.

^{This description was created by for 9ad3492. You can customize this summary. It will automatically update as commits are pushed.}

[roomote]

Oroocle   Follow along on Roo Cloud

Reviewing your PR now. Feedback coming soon!