Fix/hunt2 language

[queil]

No description provided.

[strix-security]

Strix Security Review

Warning

This pull request has 67 commits after the last Strix review (80d8e8d). Strix has not reviewed these changes.
Automatic review on push is off for this repository. To review the latest changes, tag @strix-security in a comment, or turn on re-review on push.

No security issues found.

Review summary

PR #372 is a security-hardening change set driven by the second bug hunt. It deletes the undocumented into builtin (which ran sh -c invisible to effect checks), adds a configurable maxBody request-size bound to serve (default 16 MiB, answering 413 past it), introduces a runtime backstop that refuses command spawning while a module body is evaluated, confines restore so it can never overwrite lock.json or the .weir/ root, validates lockfile entries against malformed-input crashes, enforces strict UTF-8 source decoding instead of silent U+FFFD substitution, translates glob bracket classes instead of injecting raw regex text, and fixes the HTTP/serve surfaces (hop-by-hop header stripping, bodyless-response framing, per-line SSE events, cross-origin redirect credential dropping). I traced every new code path — symlink-resolved module identity, Secret splicing into env/argv, the bounded body read, and the spawn-gate teardown kill — and found no newly introduced injection, authorization, SSRF, IDOR, or other exploitable weakness. No security findings were confirmed.

_{Updated for 80d8e8d.}

---

Reviewed by Strix
_{Re-run review · Configure security review settings}