Addy Osmani dd142f1da3 fix(evals): pipe grader prompt via stdin; grant executor tool permissions ...

Two latent Tier-3 bugs caught in review before the path was ever exercised:

- The grader prompt embeds the full stream-json trace (up to megabytes) and
  was passed as an argv entry, which would fail with E2BIG on any real run.
  It now goes to `claude -p` over stdin; the executor prompt moves to stdin
  for the same reason.
- The executor ran headless with no permission mode, so file edits and
  command runs could be denied, forcing the narrate-instead-of-perform
  failure mode that trace grading exists to catch. It now runs with
  --permission-mode acceptEdits and a pre-approved tool list
  (Read,Glob,Grep,Edit,Write,Bash), documented in the README.

2026-07-06 12:38:26 -07:00

..

run-evals.js

fix(evals): pipe grader prompt via stdin; grant executor tool permissions

2026-07-06 12:38:26 -07:00

validate-commands.js

fix(ci): harden validate-commands script

2026-06-13 11:24:56 +02:00

validate-skills.js

feat(scripts): enforce naming + description-trigger rules in skill validator

2026-06-25 10:53:21 +08:00