Commit Graph

  • b14ca24446 fix(hooks): decode ANSI-C byte escapes in a here-document delimiter as UTF-8 L4XB 2026-10-23 04:42:16 +02:00
  • 10e43003ce fix(docs-governance): keep a comment after '2.' on a paragraph line inline L4XB 2026-10-23 04:35:26 +02:00
  • e8759b62e0 fix(hooks): decode the escapes of an ANSI-C quoted here-document delimiter L4XB 2026-10-23 04:20:03 +02:00
  • 69cdff28e0 fix(hooks): treat only backslash-LF as a line continuation in a commit message L4XB 2026-10-23 04:13:06 +02:00
  • 4e1dc5b0f9 fix(docs-governance): read a comment that starts a list item or a block quote line as an HTML block L4XB 2026-10-23 04:07:23 +02:00
  • 71cf7045e8 fix(hooks): decode the escapes that Bash removes in a double-quoted commit message L4XB 2026-10-23 03:59:10 +02:00
  • 92b1b2a786 fix(hooks): read an ANSI-C quoted here-document delimiter without its $ L4XB 2026-10-23 03:49:21 +02:00
  • b85445735e fix(skill-comply): harden sandbox setup after review Alfredo Revilla 2026-10-22 20:43:20 -05:00
  • c6c346056b fix(hooks): drop line continuations from a double-quoted commit message L4XB 2026-10-23 03:43:02 +02:00
  • 95b301d649 fix(skill-comply): create the resources a scenario needs in its sandbox Alfredo Revilla 2026-10-22 20:40:47 -05:00
  • 46e3480c93 fix(docs-governance): bound a comment inside a line by its paragraph, and a comment block by its closing line L4XB 2026-10-23 03:35:48 +02:00
  • 1410071d3c fix(hooks): let a double-quoted commit message hold a backslash before a newline L4XB 2026-10-23 03:20:18 +02:00
  • cde56f3412 fix: patch vulnerable development parsers djpjronline-netizen 2026-10-22 21:16:21 -04:00
  • ce2b27664f fix(hooks): check the commands that an expanded here-document body runs L4XB 2026-10-23 03:13:14 +02:00
  • 8dd2e45dd1 fix: classify contribution review in Pi curation djpjronline-netizen 2026-10-22 21:10:21 -04:00
  • 51fa8c3088 fix(hooks): end a here-document commit message only at its exact delimiter line L4XB 2026-10-23 03:04:13 +02:00
  • 51fec836db fix(docs-governance): look for a blanked comment in the link destination, not its title L4XB 2026-10-23 02:56:22 +02:00
  • ce37e4d16d test(hooks): pin hook flags in the held-open stdin helper Gaurav DubeyandClaude Opus 5.5 2026-10-23 00:52:59 +00:00
  • de87e6ec74 fix(hooks): leave here-document bodies out of the shell segments L4XB 2026-10-23 02:47:32 +02:00
  • 7695b357c7 fix(hooks): check the subject line of multi-line and here-document commit messages L4XB 2026-10-23 02:39:07 +02:00
  • 707e0e1956 test(hooks): cover a complete Bash request on held-open stdin Gaurav DubeyandClaude Opus 5.5 2026-10-23 00:33:46 +00:00
  • d583576552 fix(hooks): read a here-document delimiter as a shell word and keep bodies with their command L4XB 2026-10-23 02:18:33 +02:00
  • f6d7f5c37e fix(docs-governance): keep fence lines inside comment blocks and blanked comments out of targets L4XB 2026-10-23 02:08:24 +02:00
  • 8dedd4ceb3 fix(hooks): read << as a here-document only outside comments and arithmetic L4XB 2026-10-23 02:01:04 +02:00
  • bf38bfcae2 fix(docs-governance): read HTML comments and code spans in one pass, as CommonMark does L4XB 2026-10-23 01:54:04 +02:00
  • 2eee66a6c1 fix(hooks): split shell segments at newlines, keeping here-document bodies whole L4XB 2026-10-23 01:45:20 +02:00
  • 72229119a3 fix(docs-governance): ignore link-shaped text inside HTML comments L4XB 2026-10-23 01:24:15 +02:00
  • 2600c70298 fix(hooks): fail closed on incomplete input in bash-hook-dispatcher Gaurav DubeyandClaude Opus 5.5 2026-10-22 23:18:47 +00:00
  • 943eb826b5 fix(hooks): clamp the stdin idle deadline to the timer maximum Gaurav DubeyandClaude Opus 5.5 2026-10-22 22:54:14 +00:00
  • 0ca9eeb3ce fix(hooks): stop hook stdin reads when the caller never sends EOF Gaurav DubeyandClaude Opus 5.5 2026-10-22 22:39:06 +00:00
  • 688cefe95e docs(ci): clarify open PR grandfathering haelyra 2026-10-22 18:11:04 -04:00
  • bac1e475ee fix(ci): apply open PR cap to every author haelyra 2026-10-22 18:05:18 -04:00
  • 08f605eed0 fix(hooks): check whole credential names and redact shell values to the next space L4XB 2026-10-23 00:01:03 +02:00
  • 10e7c5800f fix(hooks): recognize Prettier's TypeScript and JSON5 config files L4XB 2026-10-22 23:51:32 +02:00
  • cd1f5b74e2 fix(hooks): match tsc diagnostics by the file they name L4XB 2026-10-22 23:42:21 +02:00
  • abff545aa8 fix(hooks): redact Docker's auth values in activity summaries L4XB 2026-10-22 23:13:01 +02:00
  • bc5a38a1a0 fix(hooks): keep credential redaction linear, field-bound and escape-aware L4XB 2026-10-22 23:06:47 +02:00
  • b02e02dcd2 fix(hooks): list modified files from the repository root even with diff.relative L4XB 2026-10-22 23:01:26 +02:00
  • f5a3ab3745 fix(hooks): redact a credential's JSON value that holds spaces L4XB 2026-10-22 22:46:36 +02:00
  • 5311485e94 fix(hooks): keep a backslash in double quotes as bash does in the dev-server block L4XB 2026-10-22 22:45:28 +02:00
  • adf435d36f fix(hooks): find console.log in modified files from a subdirectory session L4XB 2026-10-22 22:42:08 +02:00
  • 3494e114bb fix(hooks): redact credential variable names that carry the word inside L4XB 2026-10-22 22:34:03 +02:00
  • eee00776be fix(hooks): end a tmux command at a semicolon that ends an argument L4XB 2026-10-22 22:32:33 +02:00
  • 7adb98b7e9 fix(hooks): redact the secrets governance-capture detects in activity summaries L4XB 2026-10-22 22:06:08 +02:00
  • 87945aac1f fix(hooks): read tmux option clusters and command sequences in the dev-server block L4XB 2026-10-22 21:59:23 +02:00
  • 2aee3e4588 fix(hooks): read the tool result Claude Code sends as tool_response L4XB 2026-10-22 21:35:25 +02:00
  • 99aa85dde9 fix(hooks): let the dev-server block see a tmux launch past tmux options L4XB 2026-10-22 21:15:25 +02:00
  • db29f112ff fix(hooks): preserve usage records at transcript tail boundaries yyx 2026-10-21 14:58:50 +08:00
  • 3e322f7e91 docs: record remote Grok marketplace verification MistyStar 2026-10-21 11:32:56 +08:00
  • 1ad6fbc88e docs: add clean Grok native lifecycle receipt MistyStar 2026-10-21 10:35:52 +08:00
  • dd2107ff65 test: record native Grok lifecycle evidence MistyStar 2026-10-21 10:02:39 +08:00
  • 7f366e793f docs(security): add security evidence for #3582 with recorded npmscan runs Shyngys Shynbolatov 2026-10-21 06:50:27 +06:00
  • e191cf8b36 ci: narrow npmscan to dependency-file changes, least privilege, comment only on findings Shyngys Shynbolatov 2026-10-21 06:34:06 +06:00
  • a1e84ca67a fix(opensource): permit only untracked reports at publish gate haelyra 2026-10-20 18:53:51 -04:00
  • 3ffb0d90af Merge branch 'stewardship/verified-pr-batch-3602-3621-owned' into stewardship/verified-pr-batch-3569-3578-owned haelyra 2026-10-20 18:42:12 -04:00
  • dd640d14ff ci: refresh registry digest after skill-comply repair stewardship/verified-pr-batch-3602-3621-owned haelyra 2026-10-20 18:41:45 -04:00
  • 6e11d21dd1 Merge branch 'stewardship/verified-pr-batch-3538-3566' into stewardship/verified-pr-batch-3602-3621-owned haelyra 2026-10-20 18:41:32 -04:00
  • a6db53f835 fix(inspection): normalize diagnostic-looking Windows filenames stewardship/verified-pr-batch-3538-3566 haelyra 2026-10-20 18:41:19 -04:00
  • 071e1fea6d fix(integration): address reviewer portability and guidance haelyra 2026-10-20 18:40:59 -04:00
  • 63daf0e89d fix(skill-comply): send Unicode Claude prompts through stdin haelyra 2026-10-20 18:40:59 -04:00
  • fcff074e6f Merge branch 'stewardship/verified-pr-batch-3538-3566' into stewardship/verified-pr-batch-3602-3621-owned haelyra 2026-10-20 18:28:33 -04:00
  • c04d00c15e fix(integration): address review findings in docs and diagnostics haelyra 2026-10-20 18:17:37 -04:00
  • 90b9fba1a4 fix(opencode): pin Node 18 compatible runtime plugin haelyra 2026-10-20 18:17:37 -04:00
  • d9ad010b19 ci: refresh digest for ten combined skill fixes haelyra 2026-10-20 18:01:48 -04:00
  • 79d22134e6 fix(opensource-pipeline): drop copied reports from the index even when .gitignore re-includes them Wen 2026-10-19 07:23:00 -03:00
  • feff29fd80 fix(opensource-pipeline): keep pre-existing reports out of the first fork commit Wen 2026-10-17 09:42:28 -03:00
  • 1acdd02fb4 fix(opensource-pipeline): publish only the commit the sanitizer scanned Wen 2026-10-14 16:44:53 -03:00
  • 3906ba98f3 fix(opensource-pipeline): commit packaging and sanitizer fixes before publishing Wen 2026-10-14 14:31:49 -03:00
  • f933bad11b fix(frontend-slides): ignore CDPATH when resolving input and output paths Wen 2026-10-14 16:43:14 -03:00
  • ea8b48860e fix(frontend-slides): make relative PDF output paths absolute before export Wen 2026-10-14 14:04:26 -03:00
  • 59868a9404 fix(ck): escape the skill dir for bash when SessionStart fills it in Wen 2026-10-14 16:42:17 -03:00
  • cf3408097c fix(ck): run commands from the skill directory and pass JSON through a heredoc Wen 2026-10-14 14:01:07 -03:00
  • 2eed06b585 docs(delivery-gate): document that a missing memory directory only warns Wen 2026-10-14 18:12:58 -03:00
  • 6839f58cd3 test(delivery-gate): select an interpreter only if it runs Python 3 Wen 2026-10-14 16:40:36 -03:00
  • 936cf3d040 fix(delivery-gate): honor stop_hook_active and match Claude Code project dir encoding Wen 2026-10-14 13:54:57 -03:00
  • daa22ec2ea docs(social-publisher): require user approval before socialclaw apply Wen 2026-10-14 14:37:06 -03:00
  • 73e92ae994 docs(safety-guard): state that the skill is advisory and ships no hook Wen 2026-10-14 14:37:06 -03:00
  • 95e6e4e735 docs(django-security): keep the CSRF cookie readable for the AJAX example Wen 2026-10-14 14:37:06 -03:00
  • a492b08126 docs(perl-security): drop nonexistent perlcritic policies Wen 2026-10-14 14:37:06 -03:00
  • 580acac926 docs(laravel-security): drop the undefined sanitize_html validation rule Wen 2026-10-14 14:37:06 -03:00
  • c5378bf456 docs(fastapi-patterns): import Depends in the router example Wen 2026-10-14 14:37:06 -03:00
  • a4bf054f5d chore: refresh skill-triggers registry digest for skill doc changes Geronimo 2026-10-21 03:29:34 +05:30
  • 25465060a3 fix: resolve the ECC script root in skill commands across install modes Geronimo 2026-10-21 03:25:57 +05:30
  • e887967d6d test: cover skill plugin-root resolution with installed-invocation fixture Geronimo 2026-10-21 03:24:28 +05:30
  • 45a021ea11 test: remove extra trailing blank line from installer coverage haelyra 2026-10-20 17:41:33 -04:00
  • accdc30c07 ci: refresh registry digest for combined skill changes haelyra 2026-10-20 17:41:21 -04:00
  • 1d20bed37f fix: treat optional-only specs as compliant Eneko Ruiz 2026-10-17 14:18:01 +02:00
  • e9176a14e3 test: annotate the legacy locale I/O wrapper Eneko Ruiz 2026-10-18 13:21:59 +02:00
  • f78fe3287b test: enforce legacy locales for UTF-8 regressions Eneko Ruiz 2026-10-18 13:11:08 +02:00
  • 429737572a fix: use UTF-8 throughout skill compliance workflows Eneko Ruiz 2026-10-16 15:14:27 +02:00
  • 99b6a9bb8f fix: reject lossy classifier tool-call indices Eneko Ruiz 2026-10-13 12:05:24 +02:00
  • 7b7ec11b2a fix: preserve escaped instinct strings through serialization Eneko Ruiz 2026-10-13 12:00:44 +02:00
  • 21e0ab5271 fix(session-aliases): reject array-shaped alias maps Eneko Ruiz 2026-10-17 14:13:48 +02:00
  • 0bdb6a52ab fix: validate session alias titles before saving Eneko Ruiz 2026-10-13 12:05:43 +02:00
  • 67034687f3 Fix CLAUDE_CONFIG_DIR tilde expansion, blank path fallback, and inline WSL resolver parity Alan Vo 2026-10-18 04:27:27 +00:00
  • 5701a4f2e1 fix: respect CLAUDE_CONFIG_DIR with WSL Windows-path conversion Alan Vo 2026-10-16 10:14:19 +00:00
  • f1c6692f99 fix: include the oldest dashboard window boundary Eneko Ruiz 2026-10-17 14:15:12 +02:00
  • 65f7dfb735 fix: reject missing session database and limit values Eneko Ruiz 2026-10-16 15:28:33 +02:00
  • 8f72869987 fix: reject negative execution counters Eneko Ruiz 2026-10-13 12:01:56 +02:00
  • 3ac640f6cc fix: sort missing inspection dates after pre-epoch timestamps Eneko Ruiz 2026-10-16 15:33:09 +02:00