fix(action): handle prompts with special characters

.github/workflows/test-hello-world.yml

@@ -18,3 +18,29 @@ jobs:
           prompt: "Reply with exactly: Hello World"
           atlassian_email: ${{ secrets.ATLASSIAN_EMAIL }}
           atlassian_token: ${{ secrets.ATLASSIAN_TOKEN }}
+
+      - name: Run Rovo Dev with special characters in prompt
+        uses: ./
+        with:
+          # Includes shell-sensitive sequences that used to break when the action used `eval`
+          # to run the command, e.g. ``` fences, backticks, $(...) and quotes.
+          prompt: |
+            Reply with exactly: OK
+
+            Include these sequences verbatim in your response (do not execute them):
+
+            1) Triple backticks:
+            ```
+            echo "hello"
+            ```
+
+            2) Command substitution:
+            $(echo hi)
+
+            3) Backticks:
+            `echo hi`
+
+            4) Quotes:
+            "double" and 'single'
+          atlassian_email: ${{ secrets.ATLASSIAN_EMAIL }}
+          atlassian_token: ${{ secrets.ATLASSIAN_TOKEN }}

action.yml

@@ -165,19 +165,19 @@ runs:
         echo "Running Rovo Dev CLI..."
         cd "$WORKING_DIR"
 
-        # Build command with optional config file
-        CMD="acli rovodev run --yolo"
+        # Build command with optional config file (use an array to avoid eval/quoting issues)
+        cmd=(acli rovodev run --yolo)
         if [ -n "$CONFIG_FILE" ]; then
           if [ ! -f "$CONFIG_FILE" ]; then
             echo "::error::Config file not found: $CONFIG_FILE"
             exit 1
           fi
-          CMD="$CMD --config-file \"$CONFIG_FILE\""
+          cmd+=(--config-file "$CONFIG_FILE")
         fi
 
         # Run Rovo Dev with the provided prompt
         set +e
-        eval "$CMD \"$PROMPT\""
+        "${cmd[@]}" "$PROMPT"
         EXIT_CODE=$?
         set -e