1430 Commits

This Branch

This Branch

All Branches

• fix: consolidate bash hooks without fork storms
  Affaan Mustafa · 2026-04-14 21:23:57 -07:00
  1fabf4d2cf
• Merge pull request #1448 from affaan-m/fix/manual-release-dispatch

  fix: allow manual release workflow dispatch

  Affaan Mustafa · 2026-04-14 21:20:10 -07:00
  7eb7c598fb
• fix: allow manual release workflow dispatch
  Affaan Mustafa · 2026-04-14 21:02:23 -07:00
  8b5c0c1b07
• Merge pull request #1446 from affaan-m/fix/release-publish-and-migration-docs

  fix: publish npm releases and clarify install identifiers

  Affaan Mustafa · 2026-04-14 20:58:20 -07:00
  c1e7a272cc
• Merge pull request #1445 from affaan-m/fix/plugin-installed-hook-root-resolution

  fix: resolve plugin-installed hook root on marketplace installs

  Affaan Mustafa · 2026-04-14 20:43:40 -07:00
  5427c27930
• fix: wire npm auth into release publish
  Affaan Mustafa · 2026-04-14 20:43:22 -07:00
  b5c4d2beb9
• fix: publish npm releases and clarify install identifiers
  Affaan Mustafa · 2026-04-14 20:42:28 -07:00
  34380326c8
• docs: add ecc recovery guidance for wiped setups
  Affaan Mustafa · 2026-04-14 20:41:18 -07:00
  9227d3cc30
• Merge pull request #1439 from affaan-m/fix/urgent-install-and-name

  fix: unblock urgent install and gateguard regressions

  Affaan Mustafa · 2026-04-14 20:36:06 -07:00
  8da668f1ac
• fix: bootstrap plugin-installed hook commands safely
  Affaan Mustafa · 2026-04-14 20:24:21 -07:00
  1b7c5789fc
• Merge origin/main into fix/urgent-install-and-name
  Affaan Mustafa · 2026-04-14 20:23:54 -07:00
  cdeb837838
• Merge pull request #1440 from affaan-m/fix/dashboard-terminal-safety

  fix(dashboard): harden terminal launch and maximize behavior

  Affaan Mustafa · 2026-04-14 20:21:51 -07:00
  cca163c776
• test: fix harness audit env fallback
  Affaan Mustafa · 2026-04-14 20:03:57 -07:00
  c54b44edf3
• fix: restore dashboard branch ci baseline
  Affaan Mustafa · 2026-04-14 19:54:28 -07:00
  2691cfc0f1
• Merge remote-tracking branch 'origin/main' into fix/urgent-install-and-name
  Affaan Mustafa · 2026-04-14 19:50:35 -07:00
  b2c4b7f51c
• fix: restore dashboard branch CI baseline
  Affaan Mustafa · 2026-04-14 19:46:00 -07:00
  c924290b5b
• fix: harden dashboard terminal launch helpers
  Affaan Mustafa · 2026-04-14 19:44:32 -07:00
  e46deb93c8
• fix: harden urgent install and gateguard patch
  Affaan Mustafa · 2026-04-14 19:44:08 -07:00
  8776c4f8f3
• docs: sync catalog counts on urgent fix branch
  Affaan Mustafa · 2026-04-14 19:31:23 -07:00
  e5225db006
• Merge pull request #1402 from affaan-m/docs/community-skill-highlights

  docs: add community skill ecosystem notes

  Affaan Mustafa · 2026-04-14 19:28:57 -07:00
  48a30b53c8
• fix: restore urgent PR CI health
  Affaan Mustafa · 2026-04-14 19:26:24 -07:00
  3be24a5704
• fix: unblock urgent install and gateguard regressions
  Affaan Mustafa · 2026-04-14 19:23:07 -07:00
  76b6e22b4d
• Merge pull request #1432 from S1lverline/fix/harness-audit-marketplaces

  fix(harness-audit): detect ECC plugin under marketplaces/ subdirectory

  Affaan Mustafa · 2026-04-14 19:13:24 -07:00
  ecc5e0e2d6
• fix(harness-audit): detect ECC plugin under marketplaces/ subdirectory

  `findPluginInstall()` in `scripts/harness-audit.js` scans two candidate
  roots:
  
    {rootDir}/.claude/plugins/
    {HOME}/.claude/plugins/
  
  Current Claude Code marketplace installs live one directory deeper:
  
    {HOME}/.claude/plugins/marketplaces/{ecc,everything-claude-code}/...
  
  As a result, running `node scripts/harness-audit.js repo` on any
  consumer project reports `consumer-plugin-install: false` even when ECC
  is fully installed via marketplace, costing 4 points from Tool Coverage.
  
  Add the `marketplaces/` intermediate directory to `candidateRoots` so
  both legacy and current install layouts are recognized. The change is
  purely additive: existing candidate paths still resolve, and the new
  ones only match when the marketplace layout is present.
  
  Reproduction:
    1. Install ECC via Claude Code plugin marketplace
    2. cd into any consumer project
    3. node ~/.claude/plugins/marketplaces/everything-claude-code/scripts/harness-audit.js repo
    4. Observe consumer-plugin-install=false despite a working install

  S1lverline · 2026-04-14 23:37:10 +09:00
  aa96279ecc
• Merge pull request #1367 from ozoz5/feat/gateguard

  feat(hooks,skills): add gateguard fact-forcing pre-action gate

  Affaan Mustafa · 2026-04-13 01:05:20 -07:00
  e0ddb331f6
• Merge pull request #1369 from affaan-m/dependabot/github_actions/pnpm/action-setup-6.0.0

  build(deps): bump pnpm/action-setup from 5.0.0 to 6.0.0

  Affaan Mustafa · 2026-04-13 01:05:16 -07:00
  85e331e49a
• Merge pull request #1377 from Anish29801/feat/dashboard-gui

  Feat/dashboard gui

  Affaan Mustafa · 2026-04-13 01:04:14 -07:00
  5eedc8adb4
• Merge pull request #1363 from gnpthbalaji/feat/accessibility

  feat(agent + skill): a11y-architect agent and accessibility skill

  Affaan Mustafa · 2026-04-13 00:59:57 -07:00
  c64cc69eb2
• fix: keep gateguard session state alive
  Affaan Mustafa · 2026-04-13 00:58:50 -07:00
  6c67566767
• fix: make dashboard GUI build surfaces opt-in safe
  Affaan Mustafa · 2026-04-13 00:56:56 -07:00
  deb3b1dc14
• test: isolate gateguard state dir cleanup
  Affaan Mustafa · 2026-04-13 00:53:57 -07:00
  2e44beabc1
• Merge pull request #1398 from affaan-m/fix/opencode-plugin-version-sync

  fix: sync OpenCode hook banner version

  Affaan Mustafa · 2026-04-13 00:52:40 -07:00
  e2b5353fec
• Merge pull request #1393 from affaan-m/fix/cursor-rule-mdc-install

  fix: install Cursor rules as .mdc files

  Affaan Mustafa · 2026-04-13 00:52:03 -07:00
  9ae51bc3c1
• fix: remove duplicate tools frontmatter key
  Affaan Mustafa · 2026-04-13 00:51:40 -07:00
  7f7e2c2c52
• Merge pull request #1395 from affaan-m/fix/npm-publish-surface

  fix: narrow npm publish surface to the module graph

  Affaan Mustafa · 2026-04-13 00:46:15 -07:00
  7a33b2b3c9
• docs: add community skill ecosystem notes
  Affaan Mustafa · 2026-04-13 00:45:51 -07:00
  68ee51f1e3
• fix: 5 bugs + 2 tests from 3-agent deep bughunt

  Bugs fixed:
  - B1: JS gate messages still said "cat one real record" -> redacted/synthetic
  - B2: Destructive bash key used 200-char truncation (collision bypass) -> SHA256 hash
  - B3: sanitizePath only stripped \n\r -> now strips null bytes, bidi overrides, all control chars
  - B4: Tool name matching was case-sensitive (latent bypass) -> lookup map normalization
  - B5: SKILL.md Gate Types missing MultiEdit -> added with explanation
  
  Tests added:
  - T1: MultiEdit gate denies first unchecked file (CRITICAL - was untested)
  - T2: MultiEdit allows after all files gated
  
  11/11 tests pass.
  
  Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

  seto · 2026-04-13 16:32:46 +09:00
  dd2962ee92
• Merge pull request #1370 from affaan-m/dependabot/github_actions/softprops/action-gh-release-3.0.0

  build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0

  Affaan Mustafa · 2026-04-13 00:30:59 -07:00
  5c4570baa5
• fix: allow pnpm cache probe under node 18
  Affaan Mustafa · 2026-04-13 00:21:42 -07:00
  1a950e4f83
• fix: cubic-dev-ai round 3 — SKILL.md consistency

  P2: Description now says "Edit/Write/Bash (including MultiEdit)"
      instead of listing MultiEdit as a separate top-level gate
  
  P2: Write Gate and Anti-Patterns now use same "redacted or synthetic
      values" wording as Edit Gate (was still "cat one real record")
  
  All 3 gate doc sections now consistent. 9/9 tests pass.
  
  Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

  seto · 2026-04-13 16:19:01 +09:00
  8cd6378c81
• fix: use corepack pnpm on node 18
  Affaan Mustafa · 2026-04-13 00:17:17 -07:00
  ef7613c526
• fix: sync opencode hook banner version
  Affaan Mustafa · 2026-04-13 00:15:55 -07:00
  a0a1eda8fc
• fix: use pnpm 9 for node 18 workflow jobs
  Affaan Mustafa · 2026-04-13 00:13:54 -07:00
  bd207aabe1
• fix: cubic-dev-ai round 2 — 3 issues across SKILL.md + pruning

  P1: Gate message asked for raw production data records — changed to
      "redacted or synthetic values" to prevent sensitive data exfiltration
  
  P2: SKILL.md description now includes MultiEdit (was missing after
      MultiEdit gate was added in previous commit)
  
  P2: Session key pruning now caps __prefixed keys at 50 to prevent
      unbounded growth even in theoretical edge cases
  
  9/9 tests pass.
  
  Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

  seto · 2026-04-13 16:11:33 +09:00
  4dbed5ff5b
• fix: pin pnpm version for setup action v6
  Affaan Mustafa · 2026-04-13 00:10:39 -07:00
  6eadf786f5
• fix: prefer cursor native hooks during install
  Affaan Mustafa · 2026-04-13 00:07:15 -07:00
  9e607ebb30
• test: align cursor manifest expectations
  Affaan Mustafa · 2026-04-12 23:58:59 -07:00
  30f6ae4253
• fix: keep runtime schemas in npm package
  Affaan Mustafa · 2026-04-12 23:56:58 -07:00
  c826305060
• chore: update release action version comments
  Affaan Mustafa · 2026-04-12 23:54:26 -07:00
  db8247d701
• chore: update pnpm action version comments
  Affaan Mustafa · 2026-04-12 23:53:57 -07:00
  adb46a95a6