Keep completion words out of shell evaluation

2026-11-03 13:09:00 +00:00
parent c205903900
commit 8b48115328
4 changed files with 131 additions and 11 deletions
--- a/docs/roadmap/remediation.md
+++ b/docs/roadmap/remediation.md
@@ -19,7 +19,9 @@ implementation changes were made in this review.

 ### 1. Keep shell completion data out of Zsh evaluation

-Priority: P1. Status: open.
+Priority: P1. Status: complete.
+
+- [x] Completed: Bash and Zsh pass literal query argv without evaluation; Zsh uses direct argument-safe completion calls. Quoted and escaped Tab-only regressions and the existing Bash/Zsh adapter matrices pass.

 [Zsh script adjustment](../../internal/cobra/completion.go#L146) leaves the
 generator's `eval _describe ... $flagPrefix` in place. The generator builds