haelyra
f43195a255
fix: expand nested PowerShell command scalars
2026-09-05 16:57:10 -04:00
haelyra
8eeac94af3
fix: preserve PowerShell expansion semantics
2026-09-05 16:32:15 -04:00
haelyra
3ad828db47
fix: address PowerShell review bypasses
2026-09-05 16:12:58 -04:00
haelyra
d9f6091ee8
fix: close PowerShell destructive command gate bypass
2026-09-04 15:02:57 -04:00
haelyra and GitHub
e04ea0b9cc
Merge pull request #2949 from affaan-m/dependabot/github_actions/actions-minor-and-patch-6512b1d693
...
chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the actions-minor-and-patch group across 1 directory
2026-09-03 16:51:15 -04:00
haelyra and GitHub
d1955a66f6
Merge pull request #2948 from haelyra/maint/dependabot-2026-09-03
...
chore(deps): consolidate verified Dependabot updates
2026-09-03 16:03:10 -04:00
haelyra
8059798888
fix(deps): pin patched @humanfs/node
...
Keep npm and Yarn resolution policy aligned so both lockfile paths stay on the patched release.\n\nCo-authored-by: Svector-anu <svector-anu@users.noreply.github.com >
2026-09-03 15:08:04 -04:00
haelyra
b74e0add1d
test: synchronize dependency update coverage
2026-09-03 15:00:31 -04:00
haelyra
23fb7e0c79
ci: avoid redundant Python dependency floors
2026-09-03 14:59:01 -04:00
haelyra and GitHub
22e8cf01d0
test(ci): scale repair timeout on Windows ( #2942 )
2026-09-02 20:48:57 -04:00
haelyra and GitHub
d3652039ac
test(hooks): drain bootstrap children asynchronously ( #2941 )
...
* test(hooks): drain bootstrap children asynchronously
* test(hooks): harden async supervisor lifecycle
* test(hooks): accept Windows child stdin closure
2026-09-02 19:55:26 -04:00
haelyra and GitHub
11813f968c
test(hooks): avoid repeated giant wrapper payloads ( #2940 )
...
* test(hooks): avoid repeated giant wrapper payloads
* test(hooks): assert callback-governed wrapper exits
2026-09-02 17:47:04 -04:00
haelyra and GitHub
90430ab3a7
test(ci): tolerate loaded macOS hook runners ( #2939 )
2026-09-02 16:37:08 -04:00
haelyra and GitHub
348f80a89b
fix(security): update fast-uri to 3.1.7 ( #2936 )
2026-09-02 15:13:20 -04:00
haelyra and GitHub
ca185ef5f7
chore(release): prepare signed 2.2.1 patch ( #2920 )
2026-08-31 18:14:22 -04:00
haelyra and GitHub
005eff40fd
fix(install): harden universal setup release path ( #2888 )
...
* fix(install): harden universal setup release path
* docs(adal): use ecc-universal doctor command
2026-08-30 18:54:00 -04:00
haelyra and GitHub
ce64e417fd
Merge pull request #2913 from affaan-m/fix/opencode-hook-consent
...
fix(install): preserve opencode non-hook defaults
2026-08-30 15:52:28 -04:00
haelyra
64d0d9436f
fix(install): preserve opencode non-hook defaults
2026-08-30 15:35:47 -04:00
haelyra and GitHub
19e2f2b46d
Merge pull request #2912 from affaan-m/fix/packed-install-hook-consent
...
test(ci): confirm hooks in packed target smoke
2026-08-30 15:20:35 -04:00
haelyra
d26b9cccee
test(ci): confirm hooks in packed target smoke
2026-08-30 15:19:01 -04:00
haelyra and GitHub
8211578ee7
Merge pull request #2715 from affaan-m/feat/hook-runtime-consent
...
feat(install): require an explicit hook decision at the apply layer
2026-08-30 15:13:28 -04:00
haelyra
caee3ee455
test(ci): opt in to hooks in packed lifecycle smoke
2026-08-30 15:13:07 -04:00
haelyra and Claude Fable 5
bdbd90a47f
test(install): scale uninstall CLI timeout for Windows CI
...
The uninstall cases run two full CLI passes (install, then uninstall)
over several hundred files under a flat 30s timeout, which is tight
enough on Windows CI to fail intermittently with spawnSync ETIMEDOUT.
install-apply.test.js already scales its timeout by platform for the
same reason; match that precedent rather than re-running past the flake.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-08-30 15:09:34 -04:00
6aaa41e028
feat(install): require an explicit hook decision at the apply layer
...
The guided installer asks how ECC hooks should run, but that consent
lived only in the wizard path. Running install-apply directly with a
profile that includes hooks-runtime still materialized the hook runtime
with no disclosure and no decision.
Gate the apply layer instead, so every entry point is covered:
- disclose the six hook capability groups when a plan would materialize
the hook runtime, and refuse to apply until the caller decides
- --enable-hooks confirms the hook runtime; --no-hooks installs the rest
of the selection without it and records the reduced module closure in
install-state
- surface the pending decision as a dry-run warning
- show the same capability disclosure in the guided installer's plan
preview, so the wizard's hook question states what it is asking about
Plans that never materialize hooks (Kimi, --profile minimal,
--without baseline:hooks) are unaffected and need no flag. Repair and
uninstall operate on already-recorded state and stay unchanged.
The capability taxonomy and the held-materialization behavior come from
Samarjeet Singh Tomar's PR #2634 , reworked to fit the single-decision
consent model that shipped with the guided installer in #2649 .
Co-Authored-By: Samarjeet Singh Tomar <samar_tomar@hotmail.com >
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-08-30 15:09:34 -04:00
haelyra and GitHub
a89cec9658
Merge pull request #2854 from samartomar/codex/issue-744-pure-plan
...
refactor(install): expose pure manifest planner
2026-08-30 14:50:53 -04:00
haelyra and GitHub
d8e6a51755
Merge pull request #2902 from affaan-m/maint/pr-stewardship-portability-2026-08-29
...
fix: forward-port reviewed ECC 2.2 fixes (13 PRs)
2026-08-29 16:30:55 -04:00
haelyra
299544e680
fix: count observations for whitespace paths
2026-08-29 16:07:00 -04:00
haelyra
1bdda4bdac
fix: close validator and path edge cases
2026-08-29 15:36:59 -04:00
haelyra
703163275d
test: honor per-invocation Bash overrides
2026-08-29 15:11:38 -04:00
haelyra
224da03d01
fix(gateguard): match heredoc tab-strip order
2026-08-29 14:55:14 -04:00
haelyra
fab534f924
test(hooks): keep matcher mirrors in sync
2026-08-29 14:55:14 -04:00
haelyra
30c41a9bde
fix: close truth and portability review gaps
2026-08-29 14:55:14 -04:00
haelyra
d08331f14e
fix(skill-comply): harden home path redaction
2026-08-29 14:55:13 -04:00
haelyra and LKL-ZREO
9542c33454
test(skill-stocktake): cover canonical symlink discovery
...
Co-authored-by: LKL-ZREO <891878708@qq.com >
2026-08-29 14:55:13 -04:00
haelyra
2f8a5a271d
test: cover inferred-window hook output
2026-08-29 14:55:13 -04:00
haelyra
e82e477034
test(pack): tolerate slow Windows extraction
2026-08-29 14:53:54 -04:00
haelyra
4c7e965209
fix(gan): distinguish scores from verdict thresholds
2026-08-29 14:24:16 -04:00
haelyra
cce8f60206
test(gan): use portable Bash lookup on Windows
2026-08-29 13:40:56 -04:00
haelyra
73c29bbd08
fix(install): register AdaL capability metadata
2026-08-29 13:40:56 -04:00
haelyra and GitHub
656d4b5746
Merge pull request #2869 from actus7/consolidate/mcp-health-v3
...
fix(hooks): consolidate MCP health-check fixes (3 PRs)
2026-08-29 00:22:27 -04:00
haelyra and GitHub
3e5f889342
Merge pull request #2693 from andrest/fix/stale-model-rates-cost-estimate-and-skill
...
fix(lib): correct stale model rates in the shared cost estimator and skill
2026-08-28 23:59:59 -04:00
haelyra and GitHub
6d04e74e80
Merge pull request #2633 from Juanpacol/fix/harness-optimizer-eval-harness-reference
...
fix(agents): point harness-optimizer at eval-harness instead of missing skill
2026-08-28 23:37:13 -04:00
haelyra and GitHub
c6ffd3e2d3
Merge pull request #2899 from haelyra/fix/plugin-bootstrap-prefix-classification
...
fix(hooks): classify platform-dependent raw prefixes
2026-08-28 23:14:10 -04:00
haelyra
303f50c57e
test(hooks): construct mismatch prefix immutably
2026-08-28 22:43:28 -04:00
haelyra
b2ab65d0fb
fix(hooks): classify platform-dependent raw prefixes
2026-08-28 22:35:23 -04:00
haelyra and GitHub
d5ebac49b1
Merge pull request #2380 from chs0813/fix/plugin-hook-bootstrap-no-echo
...
fix(hooks): do not echo raw input from plugin-hook-bootstrap.js
2026-08-28 22:24:24 -04:00
haelyra and GitHub
9ff6949798
Merge pull request #2351 from vladyslavTezyk/main
...
Add ukranian translation of the main Readme.
2026-08-28 21:59:45 -04:00
haelyra
6544b2f7f8
fix(agents): require repeated harness eval trials
2026-08-28 21:26:42 -04:00
haelyra and GitHub
69874a5041
Merge pull request #2602 from ertug/security-guide-container-limits
...
docs: note container isolation limits, add Jailbox reference
2026-08-28 21:24:11 -04:00
haelyra
1c42fe785b
docs(skills): retain distinct legacy model rates
2026-08-28 21:22:54 -04:00
haelyra
08024bbf50
docs(skills): refresh live Claude pricing rows
...
Keep the contributor's corrected Haiku and Fable/Mythos tiers, update the live Sonnet and Opus rows against the current official pricing contract, and mirror the same numeric changes in the Japanese and Chinese tables.
2026-08-28 21:13:16 -04:00
haelyra
558aecb9c9
Merge current main into PR #2693
...
Keep the duplicate estimator and its tests deleted as landed through #2866 , while carrying the contributor's pricing-table correction forward and refreshing the documented live model rows against the current official pricing contract.
2026-08-28 21:13:01 -04:00
haelyra
3b5105816c
docs: constrain sandbox egress guidance
...
Clarify the editor boundary, require deliberately bounded egress, qualify Jailbox as one verified reference pattern, and remove the duplicate AWS bulletin citation.
2026-08-28 21:11:06 -04:00
haelyra
13c476965f
fix(hooks): keep MCP reachability probes bounded
...
Remove the redundant JSON-RPC initialize fallback from the consolidated MCP health-check batch. A routed 404 already proves the endpoint is reachable, and the real authenticated MCP call remains authoritative. Avoiding the fallback also prevents a stalled GET plus stalled POST from consuming twice the configured hook timeout.
2026-08-28 21:09:35 -04:00
haelyra and GitHub
48f952ea3b
Merge pull request #2866 from actus7/consolidate/cost-tracker-v3
...
fix(hooks): consolidate cost-tracker and pricing fixes (2 PRs)
2026-08-28 21:00:49 -04:00
haelyra
3702a617db
Merge remote-tracking branch 'origin/main' into maint/pr-2866-current
2026-08-28 18:29:35 -04:00
haelyra and GitHub
2aebdd3408
Merge pull request #2870 from actus7/consolidate/hooks-observer-v3
...
fix(hooks): consolidate hooks and observer fixes (5 PRs)
2026-08-28 18:29:03 -04:00
haelyra and GitHub
96c4dc4a74
Merge pull request #2871 from actus7/consolidate/docs-v3
...
docs: consolidate documentation improvements (3 PRs)
2026-08-28 17:50:16 -04:00
haelyra and GitHub
a3f0cc80d5
Merge pull request #2873 from actus7/consolidate/remaining-fixes-v3
...
fix: consolidate miscellaneous bug fixes (5 PRs)
2026-08-28 16:55:50 -04:00
haelyra
e51224697d
docs(costs): cite the pricing contract
2026-08-28 16:38:56 -04:00
haelyra
1d19789c75
fix(hooks): preserve metadata-marked human prompts
2026-08-28 16:28:12 -04:00
haelyra
77c358dd3f
fix(costs): retain dated Opus 4 legacy pricing
2026-08-28 16:26:13 -04:00
haelyra
70f42102fc
test(evolve): support Windows line endings
2026-08-28 16:25:30 -04:00
haelyra
950caaaae1
fix(hooks): preserve short sessions and quote evolved metadata
2026-08-28 16:08:19 -04:00
haelyra
dba785184c
docs(exa): preserve objective-driven follow-up research
2026-08-28 16:05:23 -04:00
haelyra
b7d6c61b1e
Merge remote-tracking branch 'origin/main' into maint/pr-2870-current
2026-08-28 16:03:10 -04:00
haelyra
00b9aacce4
Merge remote-tracking branch 'origin/main' into maint/pr-2871-current
2026-08-28 16:02:33 -04:00
haelyra
1953a749a2
Merge remote-tracking branch 'origin/main' into maint/pr-2873-current
2026-08-28 15:59:31 -04:00
haelyra
2a83f10644
Revert "docs(skills): refresh TweetClaw ClawHub source"
...
This reverts commit d909dbb348 .
2026-08-28 15:59:31 -04:00
haelyra
51982fdab1
test(opencode): verify recovery through descriptors
2026-08-25 17:27:26 -04:00
haelyra
aaaff77ef9
test(opencode): avoid path race in recovery fixture
2026-08-25 17:23:24 -04:00
haelyra
204cc2d2a3
fix(release): stage ECC 2.2 launch safely
2026-08-25 17:19:45 -04:00
haelyra
d6d0c4e696
test(nasiko): isolate malformed lock fixture
2026-08-25 13:52:19 -04:00
haelyra
e10c4bb5bf
fix(nasiko): use descriptor lock identity
2026-08-25 13:49:26 -04:00
haelyra
307bbd53a6
fix(nasiko): harden lifecycle recovery
2026-08-25 13:34:58 -04:00
haelyra
d66eaf116f
test(opencode): canonicalize Windows path expectations
2026-08-25 12:55:02 -04:00
haelyra
0b9573682f
docs(release): record final environment evidence
2026-08-25 12:44:26 -04:00
haelyra
f67387e836
fix(opencode): snapshot invocation environments
2026-08-25 12:37:53 -04:00
haelyra
5aa660219e
test(opencode): isolate environment regression processes
2026-08-25 12:37:39 -04:00
haelyra
f25e2137b9
docs(release): record legacy upgrade audit
2026-08-25 12:36:16 -04:00
haelyra
624de7fcfc
fix(opencode): complete legacy root migration
2026-08-25 12:29:35 -04:00
haelyra
856733263c
test(opencode): cover legacy upgrade edge cases
2026-08-25 12:28:23 -04:00
haelyra
ba280120f1
docs(release): record hosted isolation repair
2026-08-25 12:24:43 -04:00
haelyra
6ceab105bc
fix(opencode): isolate explicit home contexts
2026-08-25 12:17:21 -04:00
haelyra
2331afbfd3
test(opencode): reproduce ambient config leakage
2026-08-25 12:14:58 -04:00
haelyra
c6cee0f3e2
docs(release): record final review evidence
2026-08-24 21:37:59 -04:00
haelyra
15815eca6a
fix(install): advance guided state checkpoints safely
2026-08-24 21:30:19 -04:00
haelyra
3c005169b5
fix(opencode): route lifecycle through config overrides
2026-08-24 21:20:17 -04:00
haelyra
dac154eff6
test(opencode): cover override lifecycle routing
2026-08-24 21:18:54 -04:00
haelyra
bbf5493279
fix(release): clear final review blockers
2026-08-24 21:16:39 -04:00
haelyra
01779a4a2b
test(release): cover final review blockers
2026-08-24 21:14:29 -04:00
haelyra
75b632c42d
docs(release): record filename convention regression
2026-08-24 21:11:15 -04:00
haelyra
c83200bbbe
fix(release): follow release-note filename convention
2026-08-24 21:09:46 -04:00
haelyra
7d9f70c501
test(release): enforce release-note filename convention
2026-08-24 21:08:51 -04:00
haelyra
5873b5204a
docs(release): record upgraded lifecycle evidence
2026-08-24 21:08:08 -04:00
haelyra
e3f2a537f9
test(opencode): cover legacy migration boundaries
2026-08-24 21:01:06 -04:00
haelyra
e3a1ac6f3f
fix(opencode): migrate legacy managed home installs
2026-08-24 20:59:57 -04:00
haelyra
47d629633b
test(release): require packed uninstall skill cleanup
2026-08-24 20:56:27 -04:00
haelyra
55a2d4823b
test(opencode): cover legacy managed root migration
2026-08-24 20:53:53 -04:00
haelyra
ba63755cdd
docs(release): record final regression count
2026-08-24 20:46:46 -04:00