CC 2.1.113 Adoption

PR #13888 commits429 +/164 -

Adopt Claude Code 2.1.113 — /private/* rm denies, find -delete rejection, sandbox.network.deniedDomains, CC floor 2.1.111→2.1.113.

At a glance

12New version-matrix entries (2.1.112–114)

6New deny patterns (rm + find family)

10deniedDomains baseline entries

7723Tests, all pass

rm /private/{etc,var,home} — macOS symlink targets added to DENY_REGEX_PATTERNShook

find -delete / -fprint — non-compound destructive flags rejected in auto-approvehook

sandbox.network.deniedDomains baseline — paste/exfil domains blocklistedsettings

− Only caught rm -rf / and rm -rf ~

+ Also catches rm -rf /private/etc, /private/var, /private/home (macOS symlink targets)

− find . -delete would auto-approve (no ; separator, not compound)

+ find . -delete falls through to manual approval via REJECT_PATTERNS

feat(hooks): block rm on macOS /private/{etc,var,home}4e0ae64e

fix(hooks): reject find -delete/-fprint in auto-approve-safe-bash8e0efa81

chore: bump CC minimum to >=2.1.113ba964ba8

feat(settings): harden ork deny list + seed deniedDomainsf61ed6a9

test(hooks): native-binary compat regression4b106a91

docs(skills): CC 2.1.113 notes across 4 skills78e36b37

test(hooks): sync cc-version-matrix test counts6a79848b

refactor(tests): cc-2178-hooks-wiring → hooks-json-wiring + timeout fix98ce165d

src/hooks/src/pretool/bash/dangerous-command-blocker.tsmodified

src/hooks/src/lib/bash-patterns.tsmodified

src/hooks/src/lib/cc-version-matrix.ts+12 entries

src/settings/ork.settings.jsondeny+domains

tests/hooks/test-native-binary-compat.shnew

src/hooks/src/__tests__/e2e/hooks-json-wiring.test.tsrenamed

src/skills/{security-patterns,bare-eval,mcp-visual-output,commit}/SKILL.mddocs

Analytics parser for /loop wakeup marker — warrants its own PR with test coveragedeferred

expected_runtime frontmatter on 36 agents — field with no code consumer is cruftdeferred