What
The helper that pulls values like command, file_path, prompt and args out of tool input no longer trusts the shape of the object it is given.
Details
- Rejects Proxy objects outright.
- Reads own property descriptors rather than invoking getters, so extraction cannot run attacker code.
- Bails on array-like values whose length is not a safe integer or exceeds the cap.
Evidence
OYa.types.isProxy(e)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.