fix(cli): deny shell operators

packages/opencode/src/kilocode/agent/index.ts

@@ -110,6 +110,12 @@ export const readOnlyBash: Record<string, "allow" | "ask" | "deny"> = {
   "git branch -r *": "allow",
   "git remote -v *": "allow",
   "gh *": "ask",
+  "*|*": "deny",
+  "*;*": "deny",
+  "*&&*": "deny",
+  "*&*": "deny",
+  "*$(*": "deny",
+  "*`*": "deny",
   "*>*": "deny",
   "* > *": "deny",
   "*>>*": "deny",

packages/opencode/test/kilocode/ask-agent-permissions.test.ts

@@ -111,6 +111,11 @@ describe("Ask agent bash permissions", () => {
     const denied = [
       "echo hi > file",
       "echo hi >> file",
+      "echo hi | tee file",
+      "echo hi; touch file",
+      "echo hi && touch file",
+      "echo $(touch file)",
+      "echo `touch file`",
       "cat a > b",
       "jq . a.json > b.json",
       "sort names.txt -o names.txt",