Confirm reply deletes and check reply IDs before any request

main

Commit

Stefan Haubold3d ago
  • delete-reply asks for confirmation on a terminal and refuses without one unless --force is passed, through the same gate trail comment delete now uses.
  • Message IDs, and the reply thread ID a finding names, must be one URL path segment: empty, ".", "..", and IDs with a slash are refused, since resolving the URL would otherwise address the thread or the message list.
  • Printed reply and finding IDs are sanitized like authors and bodies.
  • edit-reply and delete-reply have long help naming where message IDs come from.
  • The reply commands are classified task-driven, like the finding they answer, and the trail finding guidance says to edit or delete only replies the agent wrote.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com Entire-Checkpoint: 01M6GXFJC0TS4WVG7FCBMSHVC4