Paul Bakaus 6523fc56ec Keep fixture tool paths contained through symlinks ...

Validate canonical existing ancestors for new targets and preserve staged-skill write protection through aliases. Regression reproduced the external read escape before the fix; all 20 harness tests and the full non-billed suite pass.

AI assistance: Codex, under maintainer direction.

2026-09-07 19:08:29 -07:00

..

fixtures

Verify signed skill bundles before extraction (#734)

2026-09-04 18:21:01 -07:00

framework-fixtures

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

lib

Add DeepSeek Harness as a supported skills provider (#746)

2026-09-06 14:46:05 -07:00

live-e2e

Test durable acceptance and redesigned system documentation

2026-09-07 18:43:18 -07:00

new-work-e2e

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

oracle

Fix truncated surface-brief slug collisions (#774)

2026-09-07 11:40:05 -07:00

skill-behavior

Keep fixture tool paths contained through symlinks

2026-09-07 19:08:29 -07:00

skill-workflow

Require complete design artifacts at the finish handoff

2026-09-07 19:01:34 -07:00

build.test.js

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

bundle-signing.test.mjs

Verify signed skill bundles before extraction (#734)

2026-09-04 18:21:01 -07:00

ci-test-plan.test.mjs

Fix workflow trace directory context scope

2026-09-07 16:40:39 -07:00

cli-shim.test.mjs

CLI: --version reports the npm package version (#731)

2026-09-04 13:52:32 -07:00

cursor-plugin.test.mjs

Add native Cursor marketplace plugin packaging (#776)

2026-09-07 11:50:15 -07:00

extension-build.test.mjs

extension: kinpaku UI for the popup, DevTools panel, sidebar and overlays (#729)

2026-09-04 13:00:13 -07:00

framework-fixtures.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

github-sheriff.test.mjs

Normalize sheriff exemption labels

2026-08-31 16:43:21 -07:00

hook-build.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

launcher-download.test.mjs

Fix: report removed launcher downloads accurately (#741)

2026-09-05 11:30:19 -07:00

live-browser-ignores.test.mjs

Fix: harden live overlay detector waivers (#639 follow-up)

2026-08-28 18:38:36 +05:00

live-browser-source.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

live-e2e-accept-cleanup-regression.test.mjs

Test durable acceptance and redesigned system documentation

2026-09-07 18:43:18 -07:00

live-e2e-agent-output.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-e2e-cli-options.test.mjs

Add DeepSeek live E2E adapter (#163)

2026-05-22 09:28:36 -07:00

live-e2e-llm-agent.test.mjs

Test durable acceptance and redesigned system documentation

2026-09-07 18:43:18 -07:00

live-e2e-steer-agent.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

live-e2e.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

live-reference.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

live-server-leak.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

live-svelte-adapter-deepseek.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

new-work-e2e.test.mjs

Fix: use system fonts and the light theme in the picker (#751)

2026-09-06 12:44:15 -07:00

openai-plugin.test.mjs

Split service layer into private impeccable-site repo

2026-07-20 22:41:53 -07:00

oracle.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

plugin-e2e.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

plugin-paths.test.js

Fix: Setup survives a refused launcher (#750)

2026-09-06 13:07:29 -07:00

process-group.test.mjs

Tests: stop the harness leaking live-server processes (#718)

2026-09-03 19:21:30 -07:00

publish-platform-packages.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

readme-gitignore.test.mjs

Fix: ignore review and questions dirs in README gitignore (#677)

2026-08-31 18:20:58 -04:00

release-engine-workflow.test.js

Sign Windows engine releases with Azure Artifact Signing (#742)

2026-09-05 15:38:55 -07:00

release.test.mjs

Verify signed skill bundles before extraction (#734)

2026-09-04 18:21:01 -07:00

root-commands-sync.test.js

Fix OpenCode slash command bridge (#483)

2026-09-01 19:05:37 -04:00

skill-behavior-harness.test.mjs

Keep fixture tool paths contained through symlinks

2026-09-07 19:08:29 -07:00

skill-reference.test.mjs

Fix: critique snapshot close path (#660)

2026-08-31 22:42:44 -04:00

skill-workflow-browser.test.mjs

Separate protocol checkpoints from provisioned workflow tests

2026-09-07 16:38:58 -07:00

test-suites.test.mjs

Separate protocol checkpoints from provisioned workflow tests

2026-09-07 16:38:58 -07:00

validate-plugin-manifest.test.js

Guard the plugin loader contract that PR #494 exposed (#499)

2026-08-03 13:13:37 -07:00

validate-plugin-versions.test.js

Fix Codex skill version metadata (#703)

2026-09-01 20:21:01 -04:00

vscode-extension.test.mjs

Set registered VS Code publisher identity (#777)

2026-09-07 12:25:27 -07:00

workflow-security.test.js

Pin workflow actions and document live-edit script trust (#755)

2026-09-06 18:04:55 -07:00