6 Commits

• fix: harden claude plugin manifest surfaces
  Affaan Mustafa · 2026-04-08 16:27:30 -07:00
  2e5e94cb7f
• feat: define skill placement and provenance policy (#748)
  Neha Prasad · 2026-03-22 15:39:48 -07:00
  4df960c9d5
• fix: greedy regex in validate-commands captures all refs per line, add 18 tests

  The command cross-reference regex /^.*`\/(...)`.*$/gm only captured the
  LAST command ref per line due to greedy .* consuming earlier refs.
  Replaced with line-by-line processing using non-anchored regex to
  capture ALL command references.
  
  New tests:
  - 4 validate-commands multi-ref-per-line tests (regression)
  - 8 evaluate-session threshold boundary tests (new file)
  - 6 session-aliases edge case tests (cleanup, rename, path matching)

  Affaan Mustafa · 2026-02-13 01:52:30 -08:00
  c1919bb879
• fix: skip code blocks in command cross-reference validation

  The validator was matching example/template content inside fenced code
  blocks as real cross-references, causing false positives for evolve.md
  (example /new-table command and debugger agent).
  
  - Strip ``` blocks before running cross-reference checks
  - Change evolve.md examples to use bold instead of backtick formatting
    for hypothetical outputs
  
  All 261 tests pass.

  Affaan Mustafa · 2026-02-12 16:18:50 -08:00
  8ff54d8b06
• fix: harden CI validators, shell scripts, and expand test suite

  - Add try-catch around readFileSync in validate-agents, validate-commands,
    validate-skills to handle TOCTOU races and file read errors
  - Add validate-hooks.js and all test suites to package.json test script
    (was only running 4/5 validators and 0/4 test files)
  - Fix shell variable injection in observe.sh: use os.environ instead of
    interpolating $timestamp/$OBSERVATIONS_FILE into Python string literals
  - Fix $? always being 0 in start-observer.sh: capture exit code before
    conditional since `if !` inverts the status
  - Add OLD_VERSION validation in release.sh and use pipe delimiter in sed
    to avoid issues with slash-containing values
  - Add jq dependency check in evaluate-session.sh before parsing config
  - Sync .cursor/ copies of all modified shell scripts

  Affaan Mustafa · 2026-02-12 14:11:33 -08:00
  f3a4b33d41
• feat: add comprehensive CI/CD pipeline

  Adds GitHub Actions workflows for CI, maintenance, and releases with multi-platform testing matrix.

  Roei Bar Aviv · 2026-01-28 23:05:43 -08:00
  7c0bc25982