Paul BakausandClaude Fable 5 da2982ab95 Fix /source guard escaping the project root via sibling directories ...

The /source route confined paths with `absPath.startsWith(process.cwd())`,
a string-prefix check with no separator. An absolute request path to a
sibling directory whose name extends the project dir name (projeto ->
projeto-backup) shared the prefix and was served. Switch to the relative-path
check already used by sessionFileMetadataFromPollReply: reject when the
relative path is empty (the root dir itself, never a file this route serves),
starts with `..`, or is absolute.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-22 21:59:28 -07:00

..

fixtures

Add undersized-ui-text rule for functional text below an 11px floor

2026-07-22 12:23:06 -07:00

framework-fixtures

Bump astro test fixture to ^7.1.0 to clear dependabot XSS alerts

2026-07-22 12:23:06 -07:00

lib

Merge main into oneshot-v4, keeping the service layer split out

2026-07-21 01:45:42 -07:00

live-e2e

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

new-work-e2e

Add deterministic new-work interactive smoke suite

2026-07-22 12:23:07 -07:00

skill-behavior

Restore dice assignment, fusion, and the commitment counterweights

2026-07-21 10:43:44 -07:00

build.test.js

fix(skill): bundle detector config dependency so critique runs (#254)

2026-06-16 22:49:31 +09:00

ci-test-plan.test.mjs

[codex] Improve CI test coverage (#212)

2026-06-08 10:39:12 -07:00

cli-args.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

cli-ignores.test.js

Fix: file-scoped wildcard ignores suppress non-value-bearing rules (#296) (#309)

2026-07-07 17:23:39 -07:00

concept-seed.test.mjs

Gate the concept roll on PRODUCT.md existing

2026-07-21 22:08:02 -07:00

context-signals.test.mjs

Refresh the Impeccable product experience

2026-07-15 23:29:47 -07:00

context.test.mjs

Flag and repair drift in Impeccable's own project artifacts

2026-07-21 21:50:40 -07:00

critique-storage.test.mjs

Improve critique skill reliability

2026-05-18 15:15:14 -07:00

design-parser.test.mjs

[codex] Add design-aware detector rules (#252)

2026-06-15 21:06:17 -07:00

design-system.test.mjs

Give DESIGN.md a real type ramp so the design hook stops crying wolf (#390)

2026-07-19 20:39:55 -07:00

detect-antipatterns-browser.test.mjs

detector: text-occlusion + first-viewport-column-overflow (57 -> 59)

2026-07-15 14:53:03 -07:00

detect-antipatterns-fixtures.test.mjs

Add undersized-ui-text rule for functional text below an 11px floor

2026-07-22 12:23:06 -07:00

detect-antipatterns.test.js

Fix detector coverage for generated UI tells

2026-07-18 14:21:06 -07:00

detect-cli-design-contamination.test.mjs

Resolve detect DESIGN.md from each target's project, not cwd

2026-07-22 12:23:06 -07:00

doctor.test.mjs

Fix false hook-script-missing in doctor when ${CLAUDE_PROJECT_DIR} is unexpanded

2026-07-22 21:50:10 -07:00

extension-build.test.mjs

Fix Firefox DevTools extension paths (#231)

2026-06-08 15:23:37 -07:00

framework-fixtures.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

github-sheriff.test.mjs

Base sheriff stale clock on blocker age (#364)

2026-07-10 12:02:52 -07:00

hook-build.test.mjs

Release prep: skill v4.0.1

2026-07-22 12:23:07 -07:00

hook.test.mjs

Fix Stop-hook loop: honor stop_hook_active per Claude Code contract

2026-07-22 17:34:20 -07:00

impeccable-paths.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

inline-ignores.test.mjs

Fix detector coverage for generated UI tells

2026-07-18 14:21:06 -07:00

live-accept-scrub.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-accept.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

live-browser-dom.test.mjs

Extract live browser DOM helpers (#239)

2026-06-09 23:10:10 +02:00

live-browser-regression.test.mjs

Merge main into oneshot-v4, keeping the service layer split out

2026-07-21 01:45:42 -07:00

live-browser-script-parts.test.mjs

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

live-browser-session.test.mjs

Refactor: cleaner top-level directory structure (#138)

2026-05-04 16:38:03 -07:00

live-browser-source.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-commit-manual-edits.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-completion.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-copy-edit-agent.test.mjs

Live mode: staged AI copy edits (#158)

2026-05-28 19:02:12 -07:00

live-discard-manual-edits.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-e2e-accept-cleanup-regression.test.mjs

Fix live accept cleanup for mapped lists (#229)

2026-06-08 11:30:15 -07:00

live-e2e-agent-output.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-e2e-cli-options.test.mjs

Add DeepSeek live E2E adapter (#163)

2026-05-22 09:28:36 -07:00

live-e2e-llm-agent.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-e2e-steer-agent.test.mjs

[codex] Improve CI test coverage (#212)

2026-06-08 10:39:12 -07:00

live-e2e.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-event-validation.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-generation-preflight.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-inject.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-insert-ui.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-insert.test.mjs

Neo Kinpaku design system + Live Mode v3 (#169)

2026-05-28 14:22:22 -07:00

live-manual-edits-buffer.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-poll-lanes.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-poll-stream.test.mjs

Refresh the Impeccable product experience

2026-07-15 23:29:47 -07:00

live-poll.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-recovery-commands.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-reference.test.mjs

Merge main into oneshot-v4, keeping the service layer split out

2026-07-21 01:45:42 -07:00

live-server.test.mjs

Fix /source guard escaping the project root via sibling directories

2026-07-22 21:59:28 -07:00

live-session-store.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-source-lock.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-source-search.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

live-svelte-adapter-deepseek.test.mjs

Fix DeepSeek Svelte live submit assertion (#342)

2026-07-07 17:11:04 -07:00

live-target-context.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

live-wrap-buffer-aware.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-wrap.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

new-work-e2e.test.mjs

Add deterministic new-work interactive smoke suite

2026-07-22 12:23:07 -07:00

openai-plugin.test.mjs

Split service layer into private impeccable-site repo

2026-07-20 22:41:53 -07:00

pin.test.mjs

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

serve-question.test.mjs

Scope headless detection to the path that opens a browser

2026-07-21 22:06:55 -07:00

skills-cli.test.js

Fix user-level hook path crash and clarify skills update scope (#399)

2026-07-22 12:23:07 -07:00

staleness.test.mjs

Flag and repair drift in Impeccable's own project artifacts

2026-07-21 21:50:40 -07:00

surface-brief.test.mjs

Refine product and visual work lifecycle

2026-07-17 16:10:13 -07:00

target-args.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

template-extensions.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

test-suites.test.mjs

[codex] Improve CI test coverage (#212)

2026-06-08 10:39:12 -07:00

validate-plugin-versions.test.js

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

windows-path-fix.test.js

Detector architecture v2: static engine, benchmarks, lab, and visual contrast (#156)

2026-05-17 19:49:38 -07:00

zip.test.mjs

fix(cli): replace extract-zip with fflate to fix silent install on Node v24.16.0+ (#253)

2026-06-15 20:33:43 -07:00