Switch Bash(bash setup/install-telegram.sh) to a prefix match so trailing flags or redirections don't fall through to approval prompts. Add the common read-only coreutils (tail, head, grep) the model reaches for to cap noisy build output. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>