fix: recognize a safe file read whose path the CLI wrapped across lines

Claude Code hard-wraps a long path inside its permission dialog, so the
line-based Read(...) match missed it entirely and the dialog fell through to
the whole-screen critical scan — parking a lane over its own runner-armed kit
again (live c44, 2026-08-19, three lanes). approval_is_safe_read now flattens
the capture before matching and un-wraps the injected spaces; a wrapped secret
path (…/.ssh/id_r sa) is still refused after un-wrapping.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: GHGuide

bin/polylane-run.sh

@@ -3208,10 +3208,17 @@ startup_check() {
 # and parked for an hour (live 2026-08-18). Secrets are judged on the Read(...)
 # target line only — surrounding prompt text must not decide.
 approval_is_safe_read() {
-  local txt="$1" target
+  local txt="$1" target flat
   printf '%s' "$txt" | grep -qE 'Read file|Read\(' || return 1
-  target=$(printf '%s' "$txt" | grep -oE 'Read\([^)]*\)' | tail -1)
+  # The CLI hard-wraps a long path across pane lines, so a line-based match
+  # misses `Read(` … `)` entirely and the dialog falls through to the
+  # whole-screen critical scan (live 2026-08-19: a lane's own kit path wrapped
+  # and the lane parked). Flatten first, then match.
+  flat=$(printf '%s' "$txt" | tr '\n' ' ' | tr -s ' ')
+  target=$(printf '%s' "$flat" | grep -oE 'Read\([^)]*\)' | tail -1)
   [ -n "$target" ] || return 1
+  # Un-wrap: the CLI breaks a path anywhere, so remove the spaces it injected.
+  target=$(printf '%s' "$target" | tr -d ' ')
   printf '%s' "$target" | grep -qiE '\.ssh|\.env|\.aws|credential|keychain|secret|password|api[_-]?key|token|\.pem|id_rsa' && return 1
   return 0
 }

tests/test-auth-park.sh

@@ -118,6 +118,24 @@ NOISE_TXT=' … prompt tail mentions api_key and token handling …
  ❯ 1. Yes'
 assert_ok "screen-noise-does-not-block-read" approval_is_safe_read "$NOISE_TXT"
 
+# a wrapped path (the CLI breaks long paths across pane lines) is still a read
+WRAP_TXT=' Read file
+  Read(/Users/x/.codex/plugins/cache/claude-plugins-official/superpowers/6.3.0/skills/test-driven-development/SKILL
+  .md)
+ Do you want to proceed?
+ ❯ 1. Yes
+   2. Yes, allow reading from test-driven-development/ during this session
+   3. No'
+assert_ok "wrapped-kit-read-is-safe" approval_is_safe_read "$WRAP_TXT"
+
+# …and a wrapped SECRET path must still be refused after un-wrapping
+WRAP_SECRET=' Read file
+  Read(/Users/x/.ssh/id_r
+  sa)
+ Do you want to proceed?
+ ❯ 1. Yes'
+assert_fail "wrapped-secret-read-not-safe" approval_is_safe_read "$WRAP_SECRET"
+
 # --- an answered dialog unparks the lane in health_check -----------------------
 NEEDS_DECISION_LANES="a"
 pane_awaiting_approval() { return 1; }   # dialog gone