Address the latest PR 305 review comment by passing typed text after an explicit option separator and add a regression test that captures the forwarded argv.
Co-authored-by: Codex <noreply@openai.com>
- reject unsafe snapshot ids in the TypeScript wrapper before spawning the helper
- reject unsafe snapshot ids in agent-computer before loading snapshot files
- add regression coverage for wrapper and helper traversal attempts
Co-authored-by: Codex <noreply@openai.com>
- remove the unimplemented accessibility observe mode from the public contract
- refuse unmatched app_open requests instead of shelling out
- add direct helper tests for both review findings
Co-authored-by: Codex <noreply@openai.com>
