openhands c8b09d1c72 fix: address review — whitelist /tmp, block bare force-push, improve checkout guard ... - Guard 2: add /tmp/* to allowlist so normal temp file cleanup is not blocked - Guard 1: block bare `git push --force` (no branch arg) since upstream may point to primary branch - Guard 4: allow flags between verb and branch (`git switch --detach main`), escape branch name for regex safety, exclude -b/-B/-c/-C (branch creation) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-20 00:16:57 +00:00
..
on-idle-stop.sh	fix: replace fragile pane grep with Stop hook for idle detection (#272)	2026-03-19 14:57:54 +01:00
on-phase-change.sh	fix: distinguish phase file writes from reads in PostToolUse hook	2026-03-19 18:14:49 +00:00
on-pretooluse-guard.sh	fix: address review — whitelist /tmp, block bare force-push, improve checkout guard	2026-03-20 00:16:57 +00:00
on-stop-matrix.sh	fix: feat: stream action-agent Claude output to Matrix thread (#293)	2026-03-19 23:43:29 +00:00