WRG 742395bca7 fix(scripts): confine plan-canvas artifact assets and escape 404 paths ...

Serve artifact pages with a sandbox-only CSP mirroring the viewer iframe, fail-closed realpath confinement for sibling assets, and escape the artifact path in the missing-artifact 404. TDD: 4 RED failures (CSP header, 404 escaping, symlink escape) before the fix, 31/31 GREEN after; markdown/sessions/hook suites and ESLint clean.

2026-09-26 02:14:24 +10:00

..

agent-proximity

feat(control-pane): live control-plane view with 2D projection and static-threshold advisories

2026-09-12 04:17:37 -04:00

control-pane

Fix/proximity a11y risk cues (#3193)

2026-09-20 15:37:57 -04:00

eval-harness

feat: group verified capsules into offline retrospective reports

2026-09-12 04:35:38 -04:00

github-coordination

fix: filter epic sync issues by label (#3089)

2026-09-12 01:46:04 +01:00

install

Merge pull request #3130 from shoyann/fix/preserve-codex-user-config

2026-09-19 17:09:20 -04:00

install-targets

fix: isolate Claude project hooks from ESM hosts (#3184)

2026-09-20 14:26:49 -04:00

mcp-inventory

fix(opencode): isolate explicit home contexts

2026-08-25 12:17:21 -04:00

plan-canvas

fix(scripts): confine plan-canvas artifact assets and escape 404 paths

2026-09-26 02:14:24 +10:00

session-adapters

feat: worktree-lifecycle service (deterministic conflict prediction + safe GC) (#2164)

2026-06-07 13:00:08 +08:00

skill-evolution

fix(skill-evolution): wire Skill PostToolUse tracker so skill-health shows real runs (#2490)

2026-08-12 18:12:49 -04:00

skill-improvement

fix: port safe ci cleanup from backlog

2026-04-01 16:09:54 -07:00

state-store

fix(opencode): isolate explicit home contexts

2026-08-25 12:17:21 -04:00

worktree-lifecycle

feat: worktree-lifecycle service (deterministic conflict prediction + safe GC) (#2164)

2026-06-07 13:00:08 +08:00

agent-compress.js

fix: use scalar Claude agent tools (#2583)

2026-07-26 03:20:15 -07:00

agent-data-home.js

fix: harden local dashboard and data boundaries (#2585)

2026-07-27 11:11:29 -07:00

agent-tools.js

fix: use scalar Claude agent tools (#2583)

2026-07-26 03:20:15 -07:00

atomic-write.js

fix(install): pin Claude settings parent during atomic replacement

2026-09-07 16:31:33 -04:00

claude-commit-attribution.js

fix: disable Claude co-author attribution by default (#2758)

2026-08-12 00:43:58 -04:00

claude-dry-run-sandbox.js

fix(install): harden universal setup release path (#2888)

2026-08-30 18:54:00 -04:00

claude-plugin-setup.js

fix: restore Claude plugin setup compatibility (#3205)

2026-09-21 14:32:26 -04:00

claude-scope-migration.js

fix(install): harden universal setup release path (#2888)

2026-08-30 18:54:00 -04:00

codex-legacy-sync.js

fix(security): provider error taxonomy, tool leak hardening, hook gate, atomic cleanup

2026-09-14 13:49:18 +05:30

codex-plugin-setup.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

compute-sponsor.js

feat: connect ECC to canonical Ito compute CLI (#2558)

2026-07-23 19:28:55 -07:00

coordination-inventory.js

Distinguish declared goals, open sessions and overlap risk in coordination inventory (#3028)

2026-09-10 14:11:51 +03:00

cursor-agent-names.js

fix: namespace cursor agent installs

2026-04-30 02:19:57 -04:00

ecc_dashboard_runtime.py

fix: port hook session and dashboard safety fixes

2026-05-11 02:53:28 -04:00

feedback-links.js

feat: add retention feedback loop and honest support matrix (#2681)

2026-08-04 21:42:25 -04:00

github-coordination.js

refactor: apply code-review findings to github-native coordination

2026-06-11 14:05:42 -04:00

github-discussions.js

fix: skip disabled discussion queries in platform audit

2026-05-17 20:32:09 -04:00

github-origin.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

harness-adapter-compliance.js

feat: thin Pi adapter mounting ECC's canonical skills and commands (#2759)

2026-08-12 18:41:33 -04:00

harness-capabilities.js

fix(install): register AdaL capability metadata

2026-08-29 13:40:56 -04:00

hook-flags.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

hooks-config.js

fix(hooks): keep hooks.json within Claude Code's schema

2026-09-12 02:59:02 -04:00

inspection.js

feat: agent compression, inspection logic, governance hooks (#491, #485, #482) (#688)

2026-03-20 01:38:13 -07:00

install-executor.js

feat(install): require an explicit hook decision at the apply layer

2026-08-30 15:09:34 -04:00

install-lifecycle.js

fix: preserve edited Codex user configuration

2026-09-15 14:47:27 +08:00

install-manifests.js

feat(install): add AdaL CLI install target

2026-08-29 13:40:56 -04:00

install-state-store-sync.js

fix(opencode): isolate explicit home contexts

2026-08-25 12:17:21 -04:00

install-state.js

fix(install): harden Claude settings lifecycle

2026-09-07 01:57:04 +08:00

instinct-relevance.js

feat(session-start): rank injected instincts by project/stack relevance (#2466)

2026-08-10 21:46:24 -04:00

invocation-environment.js

fix(opencode): snapshot invocation environments

2026-08-25 12:37:53 -04:00

ito-environment.js

fix(ito-compute): complete device auth lifecycle (#2706)

2026-08-07 14:53:13 -04:00

llm-summary.js

fix(hooks): preserve short sessions and quote evolved metadata

2026-08-28 16:08:19 -04:00

loopback-guard.js

fix: harden local dashboard and data boundaries (#2585)

2026-07-27 11:11:29 -07:00

mcp-config.js

feat: support disabling bundled mcp servers

2026-04-05 14:37:28 -07:00

memory-vault-format.js

feat: add cross-harness memory vault (#2581)

2026-07-26 02:46:59 -07:00

memory-vault.js

fix(memory): classify directory traversal failures

2026-09-12 07:45:40 -04:00

missing-dependency.js

fix(install): derive dependency versions from package.json, harden fixture isolation (#2822)

2026-09-07 16:26:10 -04:00

multi-harness-setup.js

fix: close release review gaps and expose failing CI suites

2026-09-07 17:57:26 -04:00

nasiko-release.js

fix(nasiko): use descriptor lock identity

2026-08-25 13:49:26 -04:00

observer-sessions.js

fix: port continuous-learning observer fixes

2026-05-11 03:35:42 -04:00

opencode-paths.js

fix(opencode): isolate explicit home contexts

2026-08-25 12:17:21 -04:00

orchestration-session.js

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

package-manager.d.ts

fix: Windows path support, error handling, and dedup in validators

2026-02-12 15:57:20 -08:00

package-manager.js

fix(scripts): detect modern bun.lock, ignore stray root lockfiles

2026-07-19 19:39:23 +02:00

path-safety.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

platform-launch.js

fix(scripts): extract cross-platform openBrowser helper with structured launch result (#3180)

2026-09-20 14:26:52 -04:00

powershell-destructive-command.js

fix: close release review gaps and expose failing CI suites

2026-09-07 17:57:26 -04:00

project-detect.js

fix(project-detect): parse Python deps pinned with ~ and @ (was losing framework detection on compatible-release pins) (#2498)

2026-07-17 17:11:09 -04:00

resolve-ecc-root.js

fix(hooks): keep silent hook paths silent (#2987)

2026-09-18 18:42:20 -04:00

resolve-formatter.js

fix(tests): resolve 10 failing tests on Windows (#2307)

2026-06-29 15:54:49 -07:00

session-aliases.d.ts

feat: Cursor-independent ECC memory via ECC_AGENT_DATA_HOME (#2066)

2026-06-07 13:27:00 +08:00

session-aliases.js

feat: Cursor-independent ECC memory via ECC_AGENT_DATA_HOME (#2066)

2026-06-07 13:27:00 +08:00

session-bridge.js

fix(lib): retry rename on Windows EPERM/EACCES/EBUSY in writeBridgeAtomic

2026-05-19 04:57:10 -04:00

session-cost-snapshot.js

test(metrics): derive oversized fixture from scan cap

2026-09-13 05:14:26 +08:00

session-manager.d.ts

fix: fold session manager blockers into one candidate

2026-03-24 23:08:27 -04:00

session-manager.js

fix: resolve open-issue cluster (#2295, #2298, #2303–#2306, #2340) + createdTime fallback bug (#2408)

2026-07-03 21:10:45 -07:00

shell-split.js

fix(hooks): allow tmux-wrapped dev server commands (#321)

2026-03-07 14:47:49 -08:00

shell-substitution.js

refactor: keep heredoc scanning linear

2026-08-29 14:55:14 -04:00

terminal-spinner.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

terminal-welcome.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

tmux-worktree-orchestrator.js

fix: resolve 8 test failures on main (install pipeline, orchestrator, repair) (#564)

2026-03-18 03:03:31 -07:00

transcript-context.js

fix: close truth and portability review gaps

2026-08-29 14:55:14 -04:00

utils.d.ts

feat: Cursor-independent ECC memory via ECC_AGENT_DATA_HOME (#2066)

2026-06-07 13:27:00 +08:00

utils.js

fix(session-start): scope summary lookup to repository identity (#3160) (#3168)

2026-09-19 02:08:50 -04:00