6 Commits

• docs: salvage focused stale PR contributions

  - add Vite and Redis pattern skills from closed stale PRs
  
  - add frontend-slides support assets
  
  - port skill-comply runner fixes and LLM prompt/provider regressions
  
  - harden agent frontmatter validation and sync catalog counts

  Affaan Mustafa · 2026-05-11 05:31:12 -04:00
  b39d2244cf
• fix: reject whitespace-only command/field values in CI validators, add 10 tests

  validate-hooks.js: whitespace-only command strings now fail validation
  validate-agents.js: whitespace-only model/tools values now fail validation

  Affaan Mustafa · 2026-02-13 02:09:22 -08:00
  2dbba8877b
• fix: add input validation, date range checks, and security hardening

  - validate-agents.js: reject invalid model names in agent frontmatter
  - package-manager.js: validate script/binary names against shell injection
  - session-manager.js: reject impossible month/day values in filenames
  - utils.js: support options.all for replaceInFile string patterns
  - strategic-compact/SKILL.md: fix hook matcher syntax and script reference
  - install.sh: warn when overwriting existing rule customizations
  - Add 24 new tests covering all validation and edge cases

  Affaan Mustafa · 2026-02-12 17:32:04 -08:00
  926eba97c5
• fix: 6 bugs fixed, 67 tests added for session-manager and session-aliases

  Bug fixes:
  - utils.js: prevent duplicate 'g' flag in countInFile regex construction
  - validate-agents.js: handle CRLF line endings in frontmatter parsing
  - validate-hooks.js: handle \t and \\ escape sequences in inline JS validation
  - session-aliases.js: prevent NaN in date sort when timestamps are missing
  - session-aliases.js: persist rollback on rename failure instead of silent loss
  - session-manager.js: require absolute paths in getSessionStats to prevent
    content strings ending with .tmp from being treated as file paths
  
  New tests (164 total, up from 97):
  - session-manager.test.js: 27 tests covering parseSessionFilename,
    parseSessionMetadata, getSessionStats, CRUD operations, getSessionSize,
    getSessionTitle, edge cases (null input, non-existent files, directories)
  - session-aliases.test.js: 40 tests covering loadAliases (corrupted JSON,
    invalid structure), setAlias (validation, reserved names), resolveAlias,
    listAliases (sort, search, limit), deleteAlias, renameAlias, updateAliasTitle,
    resolveSessionAlias, getAliasesForSession, cleanupAliases, atomic write
  
  Also includes hook-generated improvements:
  - utils.d.ts: document that readStdinJson never rejects
  - session-aliases.d.ts: fix updateAliasTitle type to accept null
  - package-manager.js: add try-catch to setProjectPackageManager writeFile

  Affaan Mustafa · 2026-02-12 15:50:04 -08:00
  76b271ab6b
• fix: harden CI validators, shell scripts, and expand test suite

  - Add try-catch around readFileSync in validate-agents, validate-commands,
    validate-skills to handle TOCTOU races and file read errors
  - Add validate-hooks.js and all test suites to package.json test script
    (was only running 4/5 validators and 0/4 test files)
  - Fix shell variable injection in observe.sh: use os.environ instead of
    interpolating $timestamp/$OBSERVATIONS_FILE into Python string literals
  - Fix $? always being 0 in start-observer.sh: capture exit code before
    conditional since `if !` inverts the status
  - Add OLD_VERSION validation in release.sh and use pipe delimiter in sed
    to avoid issues with slash-containing values
  - Add jq dependency check in evaluate-session.sh before parsing config
  - Sync .cursor/ copies of all modified shell scripts

  Affaan Mustafa · 2026-02-12 14:11:33 -08:00
  f3a4b33d41
• feat: add comprehensive CI/CD pipeline

  Adds GitHub Actions workflows for CI, maintenance, and releases with multi-platform testing matrix.

  Roei Bar Aviv · 2026-01-28 23:05:43 -08:00
  7c0bc25982