mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-01 21:30:21 +00:00
The stdin piping approach was broken: _hetzner_exec runs remote commands via "printf '%s' 'ENCODED_CMD' | base64 -d | bash", which connects bash's stdin to the base64 pipe rather than SSH's outer stdin. So `cat > /tmp/.e2e-prompt` read from EOF — the encoded prompt was never written to the remote file. Fix: embed the validated base64 prompt directly in the command string using printf. This is safe because _validate_base64 ensures the prompt contains only [A-Za-z0-9+/=] — no characters that can break out of single quotes or inject shell metacharacters. Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: L <6723574+louisgv@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| lib | ||
| e2e.sh | ||
| interactive-harness.ts | ||