Prevents CLAUDE.md walk-up through parent directories by passing --bare to every Claude CLI invocation, and explicitly injects the workspace CLAUDE.md via --append-system-prompt-file so agent identity is isolated. Adds fake-claude fixture and integration test to verify flags are present. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
8 lines
274 B
JavaScript
8 lines
274 B
JavaScript
#!/usr/bin/env node
|
|
const args = process.argv.slice(2);
|
|
const systemFileIdx = args.indexOf('--append-system-prompt-file');
|
|
console.log(JSON.stringify({
|
|
args,
|
|
hasBare: args.includes('--bare'),
|
|
systemPromptFile: systemFileIdx >= 0 ? args[systemFileIdx + 1] : null,
|
|
}));
|