WEBDIENSTE/ECC
1
0
Fork 0
mirror of https://github.com/affaan-m/ECC.git synced 2026-09-22 17:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,807 Commits 53 Branches 18 Tags
c056ae7df2f110e77134526fe88d9bb4b7dacadd
Commit Graph
2807 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sedat DağandGitHub c056ae7df2 fix(hooks): support python style comments in pre-commit quality checks (#3194) 
* fix(hooks): support python style comments in pre-commit quality checks

fix(hooks): support python style comments in pre-commit quality checks

* fix: reject whitespace-only TODO messages

* fix: reject whitespace-only TODO messages

* test: add cases for hash-prefixed comments and string limitations
 2026-09-21 14:33:19 -04:00
aspandGitHub d7cf4584cf fix: restore Claude plugin setup compatibility (#3205) 
* fix: stop passing removed Claude plugin config flags

* test: cover current Claude plugin install arguments

* docs: add beginner Windows install walkthrough
 2026-09-21 14:32:26 -04:00
pablolozano0216-artandGitHub 8d59727633 fix(skills): confine frontend-slides export server to the deck directory and bind loopback (#3206) 
The temporary HTTP server that export-pdf.sh spins up to render a deck
joined the decoded request path onto SERVE_DIR without checking the
resolved path, and listened on all interfaces. A request such as
`/..%2f..%2f..%2fetc%2fpasswd` (raw, or issued by a malicious deck via
fetch() while it renders) returned files outside the deck directory, and
any host on the network could hit the port while an export was running.

- resolve the decoded path against SERVE_ROOT and answer 403 when the
  result is not inside it (handles ../, %2e%2e, %2f and query strings)
- answer 400 on malformed percent-encoding instead of throwing
- listen on 127.0.0.1 only; the only client is the local headless browser

Verified with raw HTTP requests against the handler: `/` and
`/index.html` -> 200, `/../x`, `/..%2f..%2fx`, `/%2e%2e/x`,
`/deck/../../x` -> 403, unknown file -> 404, `/%zz` -> 400, and
server.address() reports 127.0.0.1.

Fixes #3101
 2026-09-21 14:32:21 -04:00
TamerandGitHub 2b6e839771 Fix/proximity a11y risk cues (#3193) 
* fix(control-plane): add non-color airspace risk cues

* test(control-plane): cover airspace accessibility cues
 2026-09-20 15:37:57 -04:00
TamerandGitHub 651118bd50 Fix/control plane canvas size (#3192) 
* fix(control-plane): constrain visualization canvas layout

* fix(control-plane): constrain visualization canvas layout

* test(control-plane): guard bounded canvas layout
 2026-09-20 15:37:51 -04:00
TamerandGitHub 9606a741af fix(control-pane): handle proximity HTTP errors (#3191) 2026-09-20 15:37:47 -04:00
auyua9GitHubauyua9
 		9ac593b55c fix(scripts): extract cross-platform openBrowser helper with structured launch result (#3180) 
scripts/plan-canvas.js and scripts/control-pane.js both define their own
openBrowser helpers for launching the user's default browser. The two
implementations have diverged:

- plan-canvas.js dispatches across darwin/win32/linux but its
  try/spawn try/catch does not catch async child errors (ENOENT/EACCES
  on hosts without the launcher command). Returns a bare true/false.
- control-pane.js is darwin-only and silently returns early on
  Windows/Linux, so the two scripts behave inconsistently across
  platforms.

When the launcher command is missing (e.g. headless CI without xdg-open)
the JSON output still says 'browser: opened', lying to the agent.

Changes:
- scripts/lib/platform-launch.js: shared openBrowser helper that
  dispatches per platform, wires child 'error' so ENOENT/EACCES
  propagate, and returns {opened, reason} instead of a bare boolean.
- scripts/plan-canvas.js: drops its local helper, imports the shared
  one, and adds browserReason to its JSON output.
- scripts/control-pane.js: replaces its darwin-only branch with the
  shared helper and logs the structured reason on failure.
- tests/lib/platform-launch.test.js: 7 node:test cases covering
  opener-command selection, invalid-URL guard, structured-result
  shape, and a smoke run for the actual spawn.

Verification: node --test tests/lib/platform-launch.test.js → 7/7 pass.

Co-authored-by: auyua9 <auyua9@users.noreply.github.com>
 2026-09-20 14:26:52 -04:00
EasternandGitHub 95448ad81d fix: isolate Claude project hooks from ESM hosts (#3184) 
* fix: isolate Claude project hooks from ESM hosts

* fix: handle user-owned Claude scripts package
 2026-09-20 14:26:49 -04:00
Cocoon-BreakGitHubkuishou68
 		111387afe4 docs: fix dead MCP overview link in shortform guide (#3190) 
The Claude Code docs page at code.claude.com/docs/en/mcp-overview no
longer exists (404). The current MCP page is
https://code.claude.com/docs/en/mcp ("Connect Claude Code to tools via
MCP"). Update the link in the English, zh-CN, and tr versions of the
shortform guide.

Co-authored-by: kuishou68 <kuishou68@users.noreply.github.com>
 2026-09-20 14:26:46 -04:00
Affaan MustafaandGitHub 934195f955 Merge pull request #3123 from VarunGore36/fix/security-critical-hardening 
Fix/security critical hardening
 2026-09-19 20:01:13 -04:00
Affaan MustafaandGitHub b0e2f26b63 Merge pull request #3124 from kapelame/audit/ecc-python-sdk-floor 
fix(llm): require an OpenAI SDK that supports provider initialization
 2026-09-19 20:01:11 -04:00
Affaan MustafaandGitHub fc9273e5e0 Merge pull request #3126 from VarunGore36/fix/reviewer-followups 
fix(security): security follow-ups for worker, installer, claw, hooks
 2026-09-19 19:58:43 -04:00
Affaan MustafaandGitHub a0600a00fb Merge pull request #3125 from kapelame/audit/ecc-opencode-output-contract 
fix(opencode): write hook results through the output contract
 2026-09-19 19:58:40 -04:00
Affaan MustafaandGitHub b2279eb1d7 Merge pull request #3130 from shoyann/fix/preserve-codex-user-config 
fix: preserve edited Codex user configuration during reinstall and repair
 2026-09-19 17:09:20 -04:00
Affaan MustafaandGitHub 1ec2263b3f Merge pull request #3137 from iyertalks/fix/pi-doctor-scoped-companion 
fix(pi): recognize @scope/pi-subagents in /ecc-doctor companion check
 2026-09-19 17:09:18 -04:00
Affaan MustafaandGitHub f06d4a02d9 Merge pull request #3064 from wellkilo/feat/dashboard-output-cursor 
perf(ecc2): stream dashboard output with a DB cursor
 2026-09-19 17:03:57 -04:00
Affaan MustafaandGitHub 0a5207b6f2 Merge pull request #3102 from wellkilo/perf/metrics-tail-read 
perf(metrics): cache cumulative session costs
 2026-09-19 17:00:05 -04:00
Affaan MustafaandGitHub 4ec7229146 Merge pull request #3104 from cedrickcantero/fix/security-review-sql-placeholder 
fix(skills): avoid a literal $1 placeholder in the security-review sql example
 2026-09-19 16:53:47 -04:00
Affaan MustafaandGitHub ada4db1157 Merge pull request #3111 from Fibilisim-Tekno/fix/memory-initialized-metadata 
fix(memory-mcp): accept metadata on initialized notifications
 2026-09-19 16:51:53 -04:00
Affaan MustafaandGitHub e030cb492a Merge pull request #3117 from affaan-m/dependabot/github_actions/actions-minor-and-patch-f97e9e776c 
chore(deps): bump the actions-minor-and-patch group with 2 updates
 2026-09-19 16:47:29 -04:00
Affaan MustafaandGitHub 56f6807274 Merge pull request #3118 from affaan-m/dependabot/cargo/ecc2/cargo-minor-and-patch-d4c8c185e0 
chore(deps): bump the cargo-minor-and-patch group across 1 directory with 3 updates
 2026-09-19 16:44:55 -04:00
Affaan MustafaandGitHub 91ba9b4cf6 Merge pull request #3133 from affaan-m/release/ecc-universal-2.2.2 
release: ecc-universal 2.2.2
 2026-09-19 16:41:20 -04:00
Affaan MustafaandGitHub 1e8e3ad0ac Merge pull request #3172 from Frank-zhu0404/fix/issue-3171-observe-sdk-cli 
fix(continuous-learning-v2): allow sdk-cli entrypoint in observe.sh (#3171)
 2026-09-19 16:34:38 -04:00
Frank_zhu 08813f49ff test(security): Layer-1 observe.sh entrypoint allowlist evidence (#3171) 
Add focused security regression for sdk-cli allowlisting and document
IOC scan + allowlist probe output under .pr/security-evidence-3171.md.

Signed-off-by: Frank_zhu <58329837+Frank-zhu0404@users.noreply.github.com>
 2026-09-19 20:56:34 +08:00
Frank_zhu b14004f12f fix(continuous-learning-v2): allow sdk-cli entrypoint in observe.sh (#3171) 2026-09-19 20:33:41 +08:00
Affaan MustafaandGitHub 07756cee15 fix(gateguard): gate ref- and history-destroying git commands (#3154, #3151) (#3170) 
branch -D, stash drop/clear, reflog expire/delete, update-ref -d, restore (except --staged alone), and force-with-lease pushes to shared branches now hit the destructive gate. 238 hook tests pass; 49 CI checks green.
 2026-09-19 02:58:33 -04:00
Affaan MustafaandGitHub f6eb800474 fix(session-start): scope summary lookup to repository identity (#3160) (#3168) 
Windows: compare repo identity via normalizeRepoPath/sameRepoIdentity (8.3 short names, case, separators; inode fallback). All nine windows-latest jobs green on 52587005.
 2026-09-19 02:08:50 -04:00
Affaan MustafaandGitHub 9e06a2792b Merge pull request #3162 from affaan-m/fix/readme-badges-star-history-20260918 
docs: repair README badges and live star history
 2026-09-18 22:34:23 -04:00
Affaan MustafaandGitHub 522b49a3c5 Merge branch 'main' into fix/readme-badges-star-history-20260918 2026-09-18 22:13:36 -04:00
Affaan MustafaandGitHub 10013e8b63 Merge pull request #3149 from affaan-m/docs/lane-rules-20260916 
Docs: lane rules and Ito desk relationship (2026-09-16)
 2026-09-18 22:13:33 -04:00
Affaan MustafaandGitHub 2bcba5b66f Merge branch 'main' into docs/lane-rules-20260916 2026-09-18 22:06:49 -04:00
Affaan MustafaandGitHub dde604e75f Merge pull request #3146 from yashraj4/fix/agent-location-and-namespacing 
fix: correct agent location and add ecc: prefix to agent names in rules
 2026-09-18 22:06:46 -04:00
Affaan Mustafa 07e6b42e5c docs: use fenced code blocks in agent rules to satisfy MD046 2026-09-18 21:53:44 -04:00
Affaan Mustafa c7e60cc6a6 Merge remote-tracking branch 'origin/main' into pr-3146 
# Conflicts:
#	docs/es/rules/common/agents.md
#	docs/ja-JP/rules/common/agents.md
#	docs/tr/rules/common/agents.md
#	docs/zh-CN/rules/common/agents.md
#	rules/common/agents.md
 2026-09-18 21:47:13 -04:00
Affaan Mustafa 75970dda72 docs: fix LANE-RULES heading level and drop personal path 2026-09-18 21:41:50 -04:00
Affaan MustafaandGitHub ce7a4847ca Merge pull request #3147 from AniruddhaAdak/fix/ollama-generation-token-limit 
fix(llm): forward max_tokens to Ollama num_predict
 2026-09-18 21:10:31 -04:00
Affaan MustafaandGitHub 6715384bb5 Merge pull request #3153 from kenima-arc/docs/ja-readme-refresh 
docs(ja-JP): refresh Japanese README to match the English README
 2026-09-18 21:10:28 -04:00
Affaan MustafaandGitHub 4007e25b58 Merge pull request #3157 from Frank-zhu0404/fix/issue-2886-heredoc-gateguard 
fix(gateguard): ignore heredoc prose for tee and path-qualified sinks
 2026-09-18 21:10:25 -04:00
Affaan MustafaandGitHub 63d589903d Merge pull request #3158 from sharadvc/fix/agent-location-docs 
docs(rules): fix ECC plugin agent location and ecc: namespaces
 2026-09-18 21:10:23 -04:00
Affaan MustafaandGitHub 27dbe41b09 Merge pull request #3159 from jgaribay01/fix/prepush-venv-pytest 
fix(hooks): pre-push skipped every Python project that uses a virtualenv
 2026-09-18 21:10:20 -04:00
Affaan MustafaandGitHub 4755a56bc0 Merge pull request #3164 from affaan-m/fix/3136-gateguard-batch-consistency 
fix(gateguard): warn that parallel-batch siblings may already be applied
 2026-09-18 21:10:02 -04:00
Affaan MustafaandGitHub 58540b3036 Merge pull request #3165 from affaan-m/fix/3116-home-install-exclusions 
fix: exclude .agents from Claude and Codex home installs
 2026-09-18 21:10:00 -04:00
Affaan MustafaandGitHub 1a2965f3b8 Merge branch 'main' into fix/agent-location-and-namespacing 2026-09-18 21:03:49 -04:00
Affaan MustafaandGitHub e7e491a94d Merge branch 'main' into fix/ollama-generation-token-limit 2026-09-18 21:03:46 -04:00
Affaan MustafaandGitHub a10cee9951 Merge branch 'main' into docs/ja-readme-refresh 2026-09-18 21:03:43 -04:00
Affaan MustafaandGitHub 09ae8be2bd Merge branch 'main' into fix/issue-2886-heredoc-gateguard 2026-09-18 21:03:40 -04:00
Affaan MustafaandGitHub f778926fb6 Merge branch 'main' into fix/agent-location-docs 2026-09-18 21:03:37 -04:00
Affaan MustafaandGitHub 1bb31dfeae Merge branch 'main' into fix/prepush-venv-pytest 2026-09-18 21:03:34 -04:00
Affaan MustafaandGitHub 66462a5bf1 Merge branch 'main' into fix/3136-gateguard-batch-consistency 2026-09-18 21:03:31 -04:00
Affaan MustafaandGitHub c023a8e5a7 Merge branch 'main' into fix/3116-home-install-exclusions 2026-09-18 21:03:28 -04:00