Harden subprocess output handling (LOW-1, INFO-1, LOW-2) - #11

Merged

bsg62 merged 9 commits into

mainfrom

worktree-output-sanitization-hardening

Jun 21, 2026

Commits on Jun 21, 2026

docs: add output sanitization hardening plan
bsg62
committed
995f098
feat(output): add bounded UTF-8-correct LineAccumulator
bsg62
committed
9b14305
fix(output): silence unused_imports; tighten line-cap test
bsg62
committed
e1ab7b3
feat(output): add AnsiTeeFilter that keeps colour, strips control sequences

bsg62
and
claude
committed
e327582
fix(output): strip DCS/APC/PM/SOS payloads; document C1 passthrough
bsg62
committed
d81626e
feat(output): add shared spawn_reader and sanitized tee writer
bsg62
committed
85a28ce
refactor(server): use shared core::output reader

bsg62
and
claude
committed
d025e03
refactor(command): use shared core::output reader

bsg62
and
claude
committed
9660250
docs: document output sanitization; drop dead-code allow

bsg62
and
claude
committed
2960b57