Renn F ba986d548f feat(grok): close the secret-scrub bash-guard parity gaps ...

secret-scrub.js (the opencode bash guard) was missing three rules the Claude
bash-guard hook has, leaving a Grok dev able to read secrets the Claude path
blocks:

- source / dot-source of a credential-bearing file (source .env, . ./.env,
  .bashrc / .git-credentials / .netrc / /proc/*/environ).
- interpreter one-liner reading a credential file
  (python -c "open('.env')", node -e "readFileSync('.git-credentials')").
- git-ops check now runs on a SKELETONIZED command (heredoc bodies + echo/printf
  args stripped) so a README/heredoc that merely documents `git push` is no
  longer mistaken for invoking it — a false-positive parity fix from the Claude
  guard.

Functionally smoke-tested with node against the real plugin (git push denied;
echo/heredoc "git push" allowed; source/interpreter cred reads denied; normal
commands allowed). Live opencode firing stays flagged in the file header.

2026-06-18 20:12:46 +02:00

..

budget-feed.js

feat(grok): start the in-container SDK server + budget feed (Claude parity)

2026-06-18 19:53:22 +02:00

intake-tools.js

feat(grok): give the Grok Intake its propose_draft tool (draft card)

2026-06-18 19:59:38 +02:00

secret-scrub.js

feat(grok): close the secret-scrub bash-guard parity gaps

2026-06-18 20:12:46 +02:00

secretary-tools.js

feat(grok): give the Grok Secretary its CEO-authority tools (blocker)

2026-06-18 19:58:05 +02:00