3 people 34a97fa898 fix: reject unsupported env split-string escapes ...

Validate env -S and --split-string escape syntax before shell scanning or
opaque fallback. Preserve literal single-quoted data and charge each
validation character against the shared input-proportional work budget.

Verified 787 focused cases and 290 real Git/config, harmless native env
and registered-routing controls. Keeps the prior paid-copy protection.

Co-authored-by: Nguyen Thanh Dat <ntdat812.dev@gmail.com>
Co-authored-by: Davemaina1 <dmain7015@gmail.com>

2026-10-09 21:04:20 -04:00

..

ci

fix: complete reviewed integration workflows and safety checks

2026-10-09 18:54:39 -04:00

codemaps

chore: retire the Everything Claude Code name, ECC only (#3330)

2026-10-01 17:50:41 -05:00

codex

merge: preserve project and user Codex configuration source 3253

2026-10-09 17:02:47 -04:00

codex-git-hooks

Merge pull request #3126 from VarunGore36/fix/reviewer-followups

2026-09-19 19:58:43 -04:00

dev

fix(profiles): bind routing receipts and harden review paths

2026-09-27 18:01:40 -04:00

discord

chore: retire the Everything Claude Code name, ECC only (#3330)

2026-10-01 17:50:41 -05:00

hooks

fix: reject unsupported env split-string escapes

2026-10-09 21:04:20 -04:00

lib

fix: preserve activity errors, asset bytes and runner summaries

2026-10-09 19:33:37 -04:00

auto-update.js

chore: retire the Everything Claude Code name, ECC only (#3330)

2026-10-01 17:50:41 -05:00

build-opencode.js

…

build-pi-core.js

fix: reconcile reviewed sources and generated integration surfaces

2026-10-09 17:27:37 -04:00

catalog.js

…

claw.js

chore: retire the Everything Claude Code name, ECC only (#3330)

2026-10-01 17:50:41 -05:00

consult.js

…

control-pane.js

feat(profiles): add opt-in Lean/Full and hybrid Auto selection

2026-09-27 16:46:07 -04:00

coordination-inventory.js

Distinguish declared goals, open sessions and overlap risk in coordination inventory (#3028)

2026-09-10 14:11:51 +03:00

dashboard-web.js

fix: preserve activity errors, asset bytes and runner summaries

2026-10-09 19:33:37 -04:00

discussion-audit.js

…

doctor.js

…

ecc.js

feat(profiles): add opt-in Lean/Full and hybrid Auto selection

2026-09-27 16:46:07 -04:00

eval-harness.js

feat: group verified capsules into offline retrospective reports

2026-09-12 04:35:38 -04:00

feedback.js

…

gan-harness.sh

fix: deny Playwright tools in non-browser evaluator modes

2026-09-28 00:38:00 -04:00

gemini-adapt-agents.js

…

github-coordination.js

…

harness-adapter-compliance.js

…

harness-audit.js

merge: preserve tested Python audit source 3007

2026-10-09 16:11:22 -04:00

install-apply.js

feat: integrate native Copilot skill and agent distribution

2026-10-09 15:53:38 -04:00

install-guided.js

feat(install): require an explicit hook decision at the apply layer

2026-08-30 15:09:34 -04:00

install-plan.js

fix(install): ship ajv/sql.js with the plugin install bundle (#2822)

2026-09-07 16:26:10 -04:00

ito.js

…

list-installed.js

…

loop-status.js

…

mcp-inventory.js

…

memory-mcp.mjs

Merge pull request #3111 from Fibilisim-Tekno/fix/memory-initialized-metadata

2026-09-19 16:51:53 -04:00

memory.js

…

nasiko.js

fix(release): stage ECC 2.2 launch safely

2026-08-25 17:19:45 -04:00

observability-readiness.js

…

operator-readiness-dashboard.js

…

orchestrate-codex-worker.sh

fix(worker,installer,claw): correct approval flag, installer order, percent path hardening

2026-09-14 23:52:01 +05:30

orchestrate-worktrees.js

…

orchestration-status.js

…

plan-canvas.js

fix(plan-canvas): describe browser dispatch accurately

2026-09-28 01:38:53 -04:00

platform-audit.js

…

preview-pack-smoke.js

…

profile.js

feat(profiles): add opt-in Lean/Full and hybrid Auto selection

2026-09-27 16:46:07 -04:00

proximity-tick.js

…

release-approval-gate.js

…

release-video-suite.js

…

release.sh

fix(release): bind trusted checks and signed tag identity on current main

2026-09-27 22:48:51 -04:00

repair.js

…

session-inspect.js

…

sessions-cli.js

…

setup-package-manager.js

…

setup.js

…

skill-create-output.js

chore: retire the Everything Claude Code name, ECC only (#3330)

2026-10-01 17:50:41 -05:00

skills-health.js

…

status.js

…

sync-ecc-to-codex.sh

chore: retire the Everything Claude Code name, ECC only (#3330)

2026-10-01 17:50:41 -05:00

uninstall.js

fix(install): preserve user files and honor uninstall previews

2026-09-07 16:40:47 -04:00

welcome.js

…

work-items.js

…

worktree-lifecycle.js

…