Jarrod Watts 17475d3f61 fix(extra-cmd): improve robustness and add tests (#94) ...

- Add debug logging for failures (uses DEBUG=claude-hud pattern)
- Support --extra-cmd=value syntax (in addition to --extra-cmd value)
- Reject empty values with debug warning
- Add security comment explaining shell injection is intentional (user CLI input)
- Export sanitize() for testability
- Add 30 unit tests for sanitize, arg parsing, timeout, malformed JSON

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-19 16:11:23 +11:00

5.9 KiB

Raw Blame History

View Raw