Dylan Hurd af089fb21d fix(exec_policy) heredoc parsing file_redirect (#20113) ...

## Summary
Fixes a regression introduced in #10941 so that heredocs do not permit
file redirects to be approved by rules, and adds scenario tests to cover
this behavior.


Previously, heredoc command parsing would allow redirects and
environment variables:
```bash
# commands_for_exec_policy() would parse this via parse_shell_lc_single_command_prefix
PATH=/tmp/bad:$PATH cat <<'EOF' > /tmp/bad/hello.txt
hello
EOF
```
This conflicts with the Codex Rules documentation; heredoc parsing logic
should abide by the same strictness of parsing.


## Tests
- [x] Updated unit tests accordingly
- [x] Added scenario tests for these cases

---------

Co-authored-by: Codex <noreply@openai.com>

2026-05-01 01:05:02 +00:00

..

src

fix(exec_policy) heredoc parsing file_redirect (#20113)

2026-05-01 01:05:02 +00:00

BUILD.bazel

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

Cargo.toml

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00