fix: filter type None crash and blocklist Bash bypass

  - _safety_filter: set self._type = FilterType.TOOL to avoid
    AttributeError on self._type.name when scan throws.
  - _check_blocklist_override: skip Python string stripping for
    UNKNOWN scripts to avoid missing Bash eval/bash -c patterns.

Author: lll-peanut

trpc_agent_sdk/tools/safety/_safety_filter.py

@@ -83,7 +83,8 @@ def __init__(
         self._block_on_deny = block_on_deny
 
         # Identify ourselves within the filter chain
-        self._type = None  # will be set by registry
+        from trpc_agent_sdk.abc import FilterType
+        self._type = FilterType.TOOL
         self._name = "tool_safety"
 
     # ------------------------------------------------------------------

trpc_agent_sdk/tools/safety/_scanner.py

@@ -776,10 +776,11 @@ def _check_blocklist_override(self,
                 stripped = line.lstrip()
                 if stripped.startswith("#"):
                     continue
-                # Strip Python string-literal content only for Python
-                # scripts so that Bash single-quoted paths like
-                # cat '/etc/shadow' are not masked.
-                if script_type in (ScriptType.PYTHON, ScriptType.UNKNOWN):
+                # Strip Python string-literal content ONLY for Python
+                # scripts.  For Bash (or UNKNOWN, which may be Bash),
+                # keep the raw line so that patterns inside eval "...",
+                # bash -c '...', and similar quoting are still matched.
+                if script_type == ScriptType.PYTHON:
                     search_line = _strip_python_comment_line(line)
                 else:
                     search_line = line