4 Commits

Include renames

Author	SHA1	Message	Date
Geronimo	27667bc746	fix(security): harden worker approval, hook traversal, MCP exec, install scripts, git hooks ... - orchestrate-codex-worker: drop yolo, default never approval, worktree containment - run-with-flags-shell: add path traversal containment mirroring JS guard - mcp-health-check: gate workspace probe, denylist dangerous env, shell-free reconnect with opt-in - install.sh/ps1: add --ignore-scripts to block postinstall RCE - git hooks: refuse global hooksPath clobber, remove file disable bypass, gate pre-push repo script execution - claw.js: remove Windows shell:true, validate model token - tests: opt into new secure defaults, quote-aware reconnect parsing	2026-09-14 13:24:58 +05:30
3 people	5596159a83	fix(hooks): pass phase argument from hook ID to observe.sh (#1042) ... The shell wrapper run-with-flags-shell.sh was not extracting the phase prefix from the hook ID (e.g., "pre:observe" -> "pre") and passing it as $1 to the invoked script. This caused observe.sh to always default to "post", recording all observations as tool_complete events with no tool_start events captured. Fixes #1018 Co-authored-by: Millectable <noreply@github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-31 14:05:16 -07:00
Affaan MustafaandAffaan Mustafa	440178d697	fix: harden hook portability and plugin docs	2026-03-09 22:49:43 -07:00
Affaan Mustafa	48b883d741	feat: deliver v1.8.0 harness reliability and parity updates	2026-03-04 14:48:06 -08:00