seto dd2962ee92 fix: 5 bugs + 2 tests from 3-agent deep bughunt ...

Bugs fixed:
- B1: JS gate messages still said "cat one real record" -> redacted/synthetic
- B2: Destructive bash key used 200-char truncation (collision bypass) -> SHA256 hash
- B3: sanitizePath only stripped \n\r -> now strips null bytes, bidi overrides, all control chars
- B4: Tool name matching was case-sensitive (latent bypass) -> lookup map normalization
- B5: SKILL.md Gate Types missing MultiEdit -> added with explanation

Tests added:
- T1: MultiEdit gate denies first unchecked file (CRITICAL - was untested)
- T2: MultiEdit allows after all files gated

11/11 tests pass.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 16:32:46 +09:00

..

auto-tmux-dev.js

fix: auto-start dev servers in tmux instead of blocking (#344)

2026-03-07 14:47:46 -08:00

check-console-log.js

Fix stdin overflow bug in hook scripts - truncate chunks to stay within MAX_STDIN limit

2026-02-18 07:40:12 +00:00

check-hook-enabled.js

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

config-protection.js

fix: fold session manager blockers into one candidate

2026-03-24 23:08:27 -04:00

cost-tracker.js

feat: sync ecc2 cost tracker metrics

2026-04-09 06:22:20 -07:00

design-quality-check.js

feat: add web frontend rules and design quality hook

2026-04-02 17:33:17 -07:00

desktop-notify.js

feat(hooks): add WSL desktop notification support via PowerShell + BurntToast (#1019)

2026-03-30 03:14:49 -04:00

doc-file-warning.js

fix(lint): prefix unused options parameter with underscore

2026-03-29 10:14:53 +08:00

evaluate-session.js

Fix stdin overflow bug in hook scripts - truncate chunks to stay within MAX_STDIN limit

2026-02-18 07:40:12 +00:00

gateguard-fact-force.js

fix: 5 bugs + 2 tests from 3-agent deep bughunt

2026-04-13 16:32:46 +09:00

governance-capture.js

fix: fold session manager blockers into one candidate

2026-03-24 23:08:27 -04:00

mcp-health-check.js

fix: treat oauth mcp 401 probes as reachable

2026-04-08 15:34:34 -07:00

post-bash-build-complete.js

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

post-bash-command-log.js

fix: restore ci lockfile and hook validation

2026-03-31 18:00:07 -07:00

post-bash-pr-created.js

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

post-edit-accumulator.js

perf(hooks): batch format+typecheck at Stop instead of per Edit (#746)

2026-03-31 14:12:12 -07:00

post-edit-console-warn.js

Merge branch 'affaan-m:main' into main

2026-02-18 18:33:04 +05:30

post-edit-format.js

fix(hooks): add Windows .cmd support with shell injection guard

2026-03-11 10:45:28 +09:00

post-edit-typecheck.js

Fix stdin overflow bug in hook scripts - truncate chunks to stay within MAX_STDIN limit

2026-02-18 07:40:12 +00:00

pre-bash-commit-quality.js

fix: port safe ci cleanup from backlog

2026-04-01 16:09:54 -07:00

pre-bash-dev-server-block.js

fix: resolve PR 371 portability regressions

2026-03-09 22:49:43 -07:00

pre-bash-git-push-reminder.js

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

pre-bash-tmux-reminder.js

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

pre-compact.js

fix: nullish coalescing in evaluate-session config, narrow pre-compact glob, add 11 tests

2026-02-13 02:42:01 -08:00

pre-write-doc-warn.js

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

quality-gate.js

refactor: deduplicate config lists and unify resolveFormatterBin branches

2026-03-11 10:45:28 +09:00

run-with-flags-shell.sh

fix(hooks): pass phase argument from hook ID to observe.sh (#1042)

2026-03-31 14:05:16 -07:00

run-with-flags.js

fix: finish blocker lane hook and install regressions

2026-03-25 04:00:50 -04:00

session-activity-tracker.js

feat(ecc2): persist tool log params and trigger context

2026-04-09 08:04:18 -07:00

session-end-marker.js

fix: clean up observer sessions on lifecycle end

2026-04-02 18:02:29 -07:00

session-end.js

fix: strip ANSI escape codes from session persistence hooks (#642) (#684)

2026-03-20 01:38:11 -07:00

session-start-bootstrap.js

fix: shorten plugin slug to ecc

2026-04-05 14:31:30 -07:00

session-start.js

fix: prune expired session files on session start

2026-04-05 14:58:10 -07:00

stop-format-typecheck.js

perf(hooks): batch format+typecheck at Stop instead of per Edit (#746)

2026-03-31 14:12:12 -07:00

suggest-compact.js

fix(hooks): scrub secrets and harden hook security (#348)

2026-03-07 14:47:31 -08:00