7 Commits

• test: add timeout enforcement, async hook schema, and command format validation tests

  Round 51: Adds 3 integration tests for hook infrastructure —
  validates hanging hook timeout/kill mechanism, hooks.json async
  hook configuration schema, and all hook command format consistency.

  Affaan Mustafa · 2026-02-13 05:23:16 -08:00
  4e520c6873
• fix: calendar-accurate date validation in parseSessionFilename, add 22 tests

  - Fix parseSessionFilename to reject impossible dates (Feb 31, Apr 31,
    Feb 29 non-leap) using Date constructor month/day roundtrip check
  - Add 6 session-manager tests for calendar date validation edge cases
  - Add 3 session-manager tests for code blocks/special chars in getSessionStats
  - Add 10 package-manager tests for PM-specific command formats (getRunCommand
    and getExecCommand for pnpm, yarn, bun, npm)
  - Add 3 integration tests for session-end transcript parsing (mixed JSONL
    formats, malformed lines, nested user messages)

  Affaan Mustafa · 2026-02-13 01:42:56 -08:00
  e96b522af0
• fix: add input validation, date range checks, and security hardening

  - validate-agents.js: reject invalid model names in agent frontmatter
  - package-manager.js: validate script/binary names against shell injection
  - session-manager.js: reject impossible month/day values in filenames
  - utils.js: support options.all for replaceInFile string patterns
  - strategic-compact/SKILL.md: fix hook matcher syntax and script reference
  - install.sh: warn when overwriting existing rule customizations
  - Add 24 new tests covering all validation and edge cases

  Affaan Mustafa · 2026-02-12 17:32:04 -08:00
  926eba97c5
• fix: handle Windows EOF error in large-input hook test

  Windows pipes raise EOF instead of EPIPE when the child process
  exits before stdin finishes flushing. Added EOF to the ignored
  error codes in runHookWithInput.

  Affaan Mustafa · 2026-02-12 15:43:47 -08:00
  328cbbdbb9
• fix: pass transcript_path via stdin JSON in integration tests (#209)

  Integration tests were still passing CLAUDE_TRANSCRIPT_PATH as an env
  var, but evaluate-session.js now reads transcript_path from stdin JSON.
  Also improves strategic-compact skill with decision guide and survival table.

  Affaan Mustafa · 2026-02-12 15:35:53 -08:00
  e4f4c2c36d
• fix: harden error handling, fix TOCTOU races, and improve test accuracy

  Core library fixes:
  - session-manager.js: wrap all statSync calls in try-catch to prevent
    TOCTOU crashes when files are deleted between readdir and stat
  - session-manager.js: use birthtime||ctime fallback for Linux compat
  - session-manager.js: remove redundant existsSync before readFile
  - utils.js: fix findFiles TOCTOU race on statSync inside readdir loop
  
  Hook improvements:
  - Add 1MB stdin buffer limits to all PostToolUse hooks to prevent
    unbounded memory growth from large payloads
  - suggest-compact.js: use fd-based atomic read+write for counter file
    to reduce race window between concurrent invocations
  - session-end.js: log when transcript file is missing, check
    replaceInFile return value for failed timestamp updates
  - start-observer.sh: log claude CLI failures instead of silently
    swallowing them, check observations file exists before analysis
  
  Test fixes:
  - Fix blocking hook tests to send matching input (dev server command)
    and expect correct exit code 2 instead of 1

  Affaan Mustafa · 2026-02-12 13:40:14 -08:00
  36864ea11a
• feat: add comprehensive CI/CD pipeline

  Adds GitHub Actions workflows for CI, maintenance, and releases with multi-platform testing matrix.

  Roei Bar Aviv · 2026-01-28 23:05:43 -08:00
  7c0bc25982