Repository navigation
Prompts: run multi-step shell from a script file, never inline - #224
Merged
Merged
Conversation
Workers keep stopping on the agent CLI's permission prompt for an inline sh -c with rm (four times across three projects on 2026-11-12 to 11-14). worker.md §3 says it, but deep in a long list; the opening prompt now says it in one line. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Member
Author
|
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
scripts/devteam.mjs(PROMPTS): the worker's and the planner's opening prompts gain one sentence. It says to run any multi-step shell (rm, redirects, quotes inside quotes) as a script file you write and then run, never inline, because an inline one stops on a permission prompt nobody answers. It points to worker.md §3, which already says this.test/fixtures/g1/prompt-worker.txt: the golden is updated to match.Why
Workers on the cloud box stopped on the agent CLI's "this shell -c script runs rm and could not be checked" prompt four times across three projects between 2026-11-12 and 11-14 (mothership app-41, website repo-04, inference-68 and inference-69). Each stop cost minutes until the prompt auto-denied, or until its supervisor noticed. The rule was in worker.md §3, deep in a long list. The opening prompt is what every agent reads first. The sentence is harness-agnostic: Claude Code, Codex and OpenCode all gate inline shell.
Tested
test/components.test.mjs(the g1 goldens, includingprompt-worker): 7/7 on Node 24.14.1.test/kit.test.mjson Node 24: see the PR comment.🤖 Generated with Claude Code