Eastern and GitHub
95448ad81d
fix: isolate Claude project hooks from ESM hosts ( #3184 )
...
* fix: isolate Claude project hooks from ESM hosts
* fix: handle user-owned Claude scripts package
2026-09-20 14:26:49 -04:00
111387afe4
docs: fix dead MCP overview link in shortform guide ( #3190 )
...
The Claude Code docs page at code.claude.com/docs/en/mcp-overview no
longer exists (404). The current MCP page is
https://code.claude.com/docs/en/mcp ("Connect Claude Code to tools via
MCP"). Update the link in the English, zh-CN, and tr versions of the
shortform guide.
Co-authored-by: kuishou68 <kuishou68@users.noreply.github.com >
2026-09-20 14:26:46 -04:00
Affaan Mustafa and GitHub
934195f955
Merge pull request #3123 from VarunGore36/fix/security-critical-hardening
...
Fix/security critical hardening
2026-09-19 20:01:13 -04:00
Affaan Mustafa and GitHub
b0e2f26b63
Merge pull request #3124 from kapelame/audit/ecc-python-sdk-floor
...
fix(llm): require an OpenAI SDK that supports provider initialization
2026-09-19 20:01:11 -04:00
Affaan Mustafa and GitHub
fc9273e5e0
Merge pull request #3126 from VarunGore36/fix/reviewer-followups
...
fix(security): security follow-ups for worker, installer, claw, hooks
2026-09-19 19:58:43 -04:00
Affaan Mustafa and GitHub
a0600a00fb
Merge pull request #3125 from kapelame/audit/ecc-opencode-output-contract
...
fix(opencode): write hook results through the output contract
2026-09-19 19:58:40 -04:00
Affaan Mustafa and GitHub
b2279eb1d7
Merge pull request #3130 from shoyann/fix/preserve-codex-user-config
...
fix: preserve edited Codex user configuration during reinstall and repair
2026-09-19 17:09:20 -04:00
Affaan Mustafa and GitHub
1ec2263b3f
Merge pull request #3137 from iyertalks/fix/pi-doctor-scoped-companion
...
fix(pi): recognize @scope/pi-subagents in /ecc-doctor companion check
2026-09-19 17:09:18 -04:00
Affaan Mustafa and GitHub
f06d4a02d9
Merge pull request #3064 from wellkilo/feat/dashboard-output-cursor
...
perf(ecc2): stream dashboard output with a DB cursor
2026-09-19 17:03:57 -04:00
Affaan Mustafa and GitHub
0a5207b6f2
Merge pull request #3102 from wellkilo/perf/metrics-tail-read
...
perf(metrics): cache cumulative session costs
2026-09-19 17:00:05 -04:00
Affaan Mustafa and GitHub
4ec7229146
Merge pull request #3104 from cedrickcantero/fix/security-review-sql-placeholder
...
fix(skills): avoid a literal $1 placeholder in the security-review sql example
2026-09-19 16:53:47 -04:00
Affaan Mustafa and GitHub
ada4db1157
Merge pull request #3111 from Fibilisim-Tekno/fix/memory-initialized-metadata
...
fix(memory-mcp): accept metadata on initialized notifications
2026-09-19 16:51:53 -04:00
Affaan Mustafa and GitHub
e030cb492a
Merge pull request #3117 from affaan-m/dependabot/github_actions/actions-minor-and-patch-f97e9e776c
...
chore(deps): bump the actions-minor-and-patch group with 2 updates
2026-09-19 16:47:29 -04:00
Affaan Mustafa and GitHub
56f6807274
Merge pull request #3118 from affaan-m/dependabot/cargo/ecc2/cargo-minor-and-patch-d4c8c185e0
...
chore(deps): bump the cargo-minor-and-patch group across 1 directory with 3 updates
2026-09-19 16:44:55 -04:00
Affaan Mustafa and GitHub
91ba9b4cf6
Merge pull request #3133 from affaan-m/release/ecc-universal-2.2.2
...
release: ecc-universal 2.2.2
2026-09-19 16:41:20 -04:00
Affaan Mustafa and GitHub
1e8e3ad0ac
Merge pull request #3172 from Frank-zhu0404/fix/issue-3171-observe-sdk-cli
...
fix(continuous-learning-v2): allow sdk-cli entrypoint in observe.sh (#3171 )
2026-09-19 16:34:38 -04:00
Frank_zhu
08813f49ff
test(security): Layer-1 observe.sh entrypoint allowlist evidence ( #3171 )
...
Add focused security regression for sdk-cli allowlisting and document
IOC scan + allowlist probe output under .pr/security-evidence-3171.md.
Signed-off-by: Frank_zhu <58329837+Frank-zhu0404@users.noreply.github.com >
2026-09-19 20:56:34 +08:00
Frank_zhu
b14004f12f
fix(continuous-learning-v2): allow sdk-cli entrypoint in observe.sh ( #3171 )
2026-09-19 20:33:41 +08:00
Affaan Mustafa and GitHub
07756cee15
fix(gateguard): gate ref- and history-destroying git commands ( #3154 , #3151 ) ( #3170 )
...
branch -D, stash drop/clear, reflog expire/delete, update-ref -d, restore (except --staged alone), and force-with-lease pushes to shared branches now hit the destructive gate. 238 hook tests pass; 49 CI checks green.
2026-09-19 02:58:33 -04:00
Affaan Mustafa and GitHub
f6eb800474
fix(session-start): scope summary lookup to repository identity ( #3160 ) ( #3168 )
...
Windows: compare repo identity via normalizeRepoPath/sameRepoIdentity (8.3 short names, case, separators; inode fallback). All nine windows-latest jobs green on 52587005 .
2026-09-19 02:08:50 -04:00
Affaan Mustafa and GitHub
9e06a2792b
Merge pull request #3162 from affaan-m/fix/readme-badges-star-history-20260918
...
docs: repair README badges and live star history
2026-09-18 22:34:23 -04:00
Affaan Mustafa and GitHub
522b49a3c5
Merge branch 'main' into fix/readme-badges-star-history-20260918
2026-09-18 22:13:36 -04:00
Affaan Mustafa and GitHub
10013e8b63
Merge pull request #3149 from affaan-m/docs/lane-rules-20260916
...
Docs: lane rules and Ito desk relationship (2026-09-16)
2026-09-18 22:13:33 -04:00
Affaan Mustafa and GitHub
2bcba5b66f
Merge branch 'main' into docs/lane-rules-20260916
2026-09-18 22:06:49 -04:00
Affaan Mustafa and GitHub
dde604e75f
Merge pull request #3146 from yashraj4/fix/agent-location-and-namespacing
...
fix: correct agent location and add ecc: prefix to agent names in rules
2026-09-18 22:06:46 -04:00
Affaan Mustafa
07e6b42e5c
docs: use fenced code blocks in agent rules to satisfy MD046
2026-09-18 21:53:44 -04:00
Affaan Mustafa
c7e60cc6a6
Merge remote-tracking branch 'origin/main' into pr-3146
...
# Conflicts:
# docs/es/rules/common/agents.md
# docs/ja-JP/rules/common/agents.md
# docs/tr/rules/common/agents.md
# docs/zh-CN/rules/common/agents.md
# rules/common/agents.md
2026-09-18 21:47:13 -04:00
Affaan Mustafa
75970dda72
docs: fix LANE-RULES heading level and drop personal path
2026-09-18 21:41:50 -04:00
Affaan Mustafa and GitHub
ce7a4847ca
Merge pull request #3147 from AniruddhaAdak/fix/ollama-generation-token-limit
...
fix(llm): forward max_tokens to Ollama num_predict
2026-09-18 21:10:31 -04:00
Affaan Mustafa and GitHub
6715384bb5
Merge pull request #3153 from kenima-arc/docs/ja-readme-refresh
...
docs(ja-JP): refresh Japanese README to match the English README
2026-09-18 21:10:28 -04:00
Affaan Mustafa and GitHub
4007e25b58
Merge pull request #3157 from Frank-zhu0404/fix/issue-2886-heredoc-gateguard
...
fix(gateguard): ignore heredoc prose for tee and path-qualified sinks
2026-09-18 21:10:25 -04:00
Affaan Mustafa and GitHub
63d589903d
Merge pull request #3158 from sharadvc/fix/agent-location-docs
...
docs(rules): fix ECC plugin agent location and ecc: namespaces
2026-09-18 21:10:23 -04:00
Affaan Mustafa and GitHub
27dbe41b09
Merge pull request #3159 from jgaribay01/fix/prepush-venv-pytest
...
fix(hooks): pre-push skipped every Python project that uses a virtualenv
2026-09-18 21:10:20 -04:00
Affaan Mustafa and GitHub
4755a56bc0
Merge pull request #3164 from affaan-m/fix/3136-gateguard-batch-consistency
...
fix(gateguard): warn that parallel-batch siblings may already be applied
2026-09-18 21:10:02 -04:00
Affaan Mustafa and GitHub
58540b3036
Merge pull request #3165 from affaan-m/fix/3116-home-install-exclusions
...
fix: exclude .agents from Claude and Codex home installs
2026-09-18 21:10:00 -04:00
Affaan Mustafa and GitHub
1a2965f3b8
Merge branch 'main' into fix/agent-location-and-namespacing
2026-09-18 21:03:49 -04:00
Affaan Mustafa and GitHub
e7e491a94d
Merge branch 'main' into fix/ollama-generation-token-limit
2026-09-18 21:03:46 -04:00
Affaan Mustafa and GitHub
a10cee9951
Merge branch 'main' into docs/ja-readme-refresh
2026-09-18 21:03:43 -04:00
Affaan Mustafa and GitHub
09ae8be2bd
Merge branch 'main' into fix/issue-2886-heredoc-gateguard
2026-09-18 21:03:40 -04:00
Affaan Mustafa and GitHub
f778926fb6
Merge branch 'main' into fix/agent-location-docs
2026-09-18 21:03:37 -04:00
Affaan Mustafa and GitHub
1bb31dfeae
Merge branch 'main' into fix/prepush-venv-pytest
2026-09-18 21:03:34 -04:00
Affaan Mustafa and GitHub
66462a5bf1
Merge branch 'main' into fix/3136-gateguard-batch-consistency
2026-09-18 21:03:31 -04:00
Affaan Mustafa and GitHub
c023a8e5a7
Merge branch 'main' into fix/3116-home-install-exclusions
2026-09-18 21:03:28 -04:00
Affaan Mustafa and GitHub
d14cf18549
Merge pull request #3166 from affaan-m/fix/ci-node18-test-job
...
fix(tests): feed guided install PTY answers only after each prompt
2026-09-18 20:45:08 -04:00
Affaan Mustafa and GitHub
c2d4196d8f
Merge pull request #3167 from affaan-m/fix/opencode-plugin-entry
...
fix(opencode): add resolvable package entry and loadable in-place sources
2026-09-18 20:45:06 -04:00
Affaan Mustafa
8cfbc26797
fix: reconcile pre-exclusion .agents installs on claude and codex home upgrades
2026-09-18 20:13:11 -04:00
c752aac186
chore(skills): declare licenses on the Codex skill mirror ( #2997 )
...
skillforge validate reports SF1009 (no license declared) on every skill
in .agents/skills. This adds license: MIT to all 39, matching the
repository LICENSE.
license only. The Codex mirror's frontmatter is governed by an allowlist
in tests/ci/codex-skill-surface.test.js - allowed-tools, description,
license, metadata, name - and license is the one field on it that
skillforge asks for. compatibility is deliberately absent here; widening
that contract is a separate decision about what the Codex surface
supports.
node tests/ci/codex-skill-surface.test.js: 4 passed, 0 failed.
Split out of #2993 so both PRs land under the review-bot file limits.
Co-authored-by: Çağrı Solakoğlu <cagri.solakoglu@vtcenerji.com >
2026-09-18 18:51:01 -04:00
Affaan Mustafa
f0378ccdb6
fix(tests): feed guided install PTY answers only after each prompt
...
The real-PTY test piped answers on fixed sleeps, typing them ahead of
readline. Under CI load the first answer could land before the interface
listened, shifting every later answer onto the wrong question: the
ubuntu-latest Node 18.x npm job installed Claude only, exited 0, and never
printed the Kimi profile prompt while the sibling yarn, pnpm, and bun jobs
on the same Node version passed. Answer each prompt once it appears on
screen instead; spawned stdio goes through cat because the macOS script(1)
refuses a socket stdin.
2026-09-18 18:47:05 -04:00
He Dong and GitHub
8bf16ccfec
fix(hooks): keep silent hook paths silent ( #2987 )
...
* fix(hooks): keep silent hook paths silent
* fix(hooks): harden stream failure handling
* fix(hooks): settle interrupted input streams
* test(hooks): name stream input limits
* test(hooks): isolate PostToolUse dispatcher fixtures
2026-09-18 18:42:20 -04:00
Affaan Mustafa
1a8beb71c5
fix(opencode): add resolvable package entry and loadable in-place sources
...
Root package.json declared no main or exports, so OpenCode npm plugin
resolution (import.meta.resolve) failed and the plugin was silently
skipped (#3127 ). The .opencode TypeScript sources imported siblings
with .js specifiers that only exist after compilation, so the home
install, which loads the .ts files in place, crashed the tool registry
with ERR_MODULE_NOT_FOUND (#3112 ).
Declare main/types/exports on the root package pointing at the
compiled plugin entry, switch the sources to .ts specifiers, and
enable allowImportingTsExtensions with rewriteRelativeImportExtensions
so the emitted dist keeps working .js specifiers. Add smoke tests that
build the package, resolve and import the entry by name from a temp
install, and verify every in-place relative import resolves.
Fixes #3127
Fixes #3112
2026-09-18 18:39:57 -04:00