Commit Graph

5 Commits

  • chore: wire react track into manifests and stack mappings
    - agent.yaml: add react-patterns, react-performance, react-testing
      to the skills array; add react-build, react-review, react-test to
      the commands array (alphabetically inserted to satisfy the
      ci/agent-yaml-surface sync test).
    - config/project-stack-mappings.json: extend the `react` stack
      entry — add "react" to rules array (was ["common","typescript",
      "web"]); add react-patterns, react-performance, react-testing,
      accessibility to the skills array.
    - docs/COMMAND-REGISTRY.json: bump totalCommands 75 -> 78; add
      three new entries (react-build, react-review, react-test) with
      primaryAgents / allAgents / skills wiring. react-review's
      allAgents includes typescript-reviewer to reflect the dual-agent
      routing convention.
    - CLAUDE.md: add Skills-table row mapping *.tsx / *.jsx /
      components/** to react-patterns + react-testing skills and
      the /react-review, /react-build, /react-test commands.
  • docs: add prompt defense baselines
    Add compact prompt-defense baselines to active ECC prompt surfaces and copied CLAUDE examples. AgentShield prompt-defense findings are now zero; local tests passed 2366/2366.
  • chore: pin actions to commit SHAs and add Skills section to CLAUDE.md
    Pin all GitHub Actions to commit SHAs instead of mutable version tags
    across ci.yml, release.yml, maintenance.yml, and all reusable workflows.
    This prevents supply-chain attacks via tag hijacking.
    
    Add the required Skills section to CLAUDE.md mapping project files
    (README.md, .github/workflows/*.yml) to their respective review skills.
  • docs: add CLAUDE.md for Claude Code guidance
    Add project-level CLAUDE.md with test commands, architecture
    overview, key commands, and contribution guidelines.