#command-execution

Any shell command in the request would run in the coding assistant

The apply endpoint on my self-hosted coding assistant had no login, took any folder, used a prefix check for paths and handed a request-supplied command list to the shell. Now the server owns all four decisions, and reading it again turned up a few doors that are still open.