3 people eaaecbd1fe Fix: require session key and origin/host checks on serve-question POSTs (#555) ...

Unauthenticated POST /answer copied steer into the agent ANSWER line. The handler now requires the detached session key and rejects foreign Origin and Host.

Written with AI assistance under maintainer direction.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-08-28 05:53:25 +05:00

..

fixtures

Merge pull request #630 from pbakaus/fix/592-oklch-parseanycolor

2026-08-24 04:26:19 +05:00

framework-fixtures

fix: stop cross-project live session leakage and stale-adapter 401s

2026-07-28 17:38:46 -07:00

lib

Keep critique's report out of the question's message

2026-08-13 01:06:33 -04:00

live-e2e

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

new-work-e2e

Add deterministic new-work interactive smoke suite

2026-07-22 12:23:07 -07:00

skill-behavior

Bump skill-behavior test lineup: gemini-3.7-flash (#598)

2026-08-15 19:03:18 -07:00

build.test.js

Held for review: agent placeholder substitution, reviewer recapture contract, base-directory script form (#544)

2026-08-08 19:26:43 -07:00

ci-test-plan.test.mjs

fix: address PR review bot findings

2026-07-27 15:19:58 -07:00

cli-args.test.mjs

Simplify provider hook smoke orchestration

2026-08-17 08:45:12 -07:00

cli-ignores.test.js

Fix: refuse inert exact ignore-value entries (#662)

2026-08-28 05:43:36 +05:00

concept-seed.test.mjs

Fix Windows libuv abort in concept-seed after a successful roll (#526)

2026-08-08 18:41:19 -07:00

context-signals.test.mjs

Reject empty critique metrics

2026-08-11 13:00:31 -04:00

context.test.mjs

Fix: drain context stdout before process.exit (#573)

2026-08-25 07:51:47 +05:00

critique-storage.test.mjs

Centralize critique snapshot reading (#511)

2026-08-05 15:27:02 -07:00

design-parser.test.mjs

🐛 Fix DESIGN.md Layout and Shapes parsing (#481)

2026-08-03 14:59:00 -07:00

design-system.test.mjs

Admit one brace level inside shadow interpolations

2026-08-10 13:28:11 +05:00

detect-antipatterns-browser.test.mjs

Test: give the oklch neon fixture flag and pass columns (#592)

2026-08-22 05:33:17 +05:00

detect-antipatterns-fixtures.test.mjs

Merge pull request #635 from pbakaus/fix/615-grid-1d-rails

2026-08-24 04:17:50 +05:00

detect-antipatterns.test.js

Fix: reject root-relative .. segments and warn per scan

2026-08-25 19:47:54 +05:00

detect-cli-design-contamination.test.mjs

Resolve detect DESIGN.md from each target's project, not cwd

2026-07-22 12:23:06 -07:00

detect-cli-design-monorepo.test.mjs

Fix: own nested workspace packages and honor projectRoots first (#570)

2026-08-25 08:03:16 +05:00

detect-cli-stdin-dispatch.test.mjs

Simplify local detector dispatch (#577)

2026-08-14 05:45:42 -07:00

detect-url-launch.test.mjs

Fix: keep URL basic-auth credentials on the scan origin (#657)

2026-08-28 05:53:01 +05:00

doctor.test.mjs

Share doctor boot finding policy

2026-08-22 11:58:26 -07:00

extension-build.test.mjs

Fix Firefox DevTools extension paths (#231)

2026-06-08 15:23:37 -07:00

framework-fixtures.test.mjs

Live v2: root manifest, mount-ack protocol, AST scaffolder, mechanical accept

2026-07-27 15:09:40 -07:00

github-sheriff.test.mjs

Base sheriff stale clock on blocker age (#364)

2026-07-10 12:02:52 -07:00

hook-build.test.mjs

Sync marketplace Claude hook repair

2026-08-19 10:04:14 -07:00

hook.test.mjs

Fix: refuse inert exact ignore-value entries (#662)

2026-08-28 05:43:36 +05:00

impeccable-paths.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

inline-ignores.test.mjs

Fix detector coverage for generated UI tells

2026-07-18 14:21:06 -07:00

live-accept-css.test.mjs

fix: stop treating the child combinator as a prelude boundary when pruning

2026-07-28 18:05:41 -07:00

live-accept-scrub.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-accept.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

live-browser-dom.test.mjs

Extract live browser DOM helpers (#239)

2026-06-09 23:10:10 +02:00

live-browser-regression.test.mjs

Fix stalled Tune state without params

2026-08-20 09:18:33 -07:00

live-browser-script-parts.test.mjs

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

live-browser-session.test.mjs

Refactor: cleaner top-level directory structure (#138)

2026-05-04 16:38:03 -07:00

live-browser-source.test.mjs

Pin the token expression in the manual-edit-stash source assertion

2026-07-31 18:13:27 -07:00

live-commit-manual-edits.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-completion.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-copy-edit-agent.test.mjs

Bound copy-edit prompt context (#528)

2026-08-09 16:56:49 -07:00

live-discard-manual-edits.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-e2e-accept-cleanup-regression.test.mjs

Fix live accept cleanup for mapped lists (#229)

2026-06-08 11:30:15 -07:00

live-e2e-agent-output.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-e2e-cli-options.test.mjs

Add DeepSeek live E2E adapter (#163)

2026-05-22 09:28:36 -07:00

live-e2e-llm-agent.test.mjs

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

live-e2e-steer-agent.test.mjs

[codex] Improve CI test coverage (#212)

2026-06-08 10:39:12 -07:00

live-e2e.test.mjs

fix: stop cross-project live session leakage and stale-adapter 401s

2026-07-28 17:38:46 -07:00

live-event-validation.test.mjs

Live v2: root manifest, mount-ack protocol, AST scaffolder, mechanical accept

2026-07-27 15:09:40 -07:00

live-frameworks.test.mjs

fix: stop cross-project live session leakage and stale-adapter 401s

2026-07-28 17:38:46 -07:00

live-generation-preflight.test.mjs

Live: stop the preflight writing source, cache the resolution

2026-07-22 22:49:44 -07:00

live-inject.test.mjs

Live v2: root manifest, mount-ack protocol, AST scaffolder, mechanical accept

2026-07-27 15:09:40 -07:00

live-insert-ui.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-insert.test.mjs

Neo Kinpaku design system + Live Mode v3 (#169)

2026-05-28 14:22:22 -07:00

live-manual-edits-buffer.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-poll-lanes.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-poll-stream.test.mjs

Refresh the Impeccable product experience

2026-07-15 23:29:47 -07:00

live-poll.test.mjs

Fix: strip page-controlled poller fields before they reach the agent (#488)

2026-08-22 05:31:05 +05:00

live-recovery-commands.test.mjs

fix: fifth review round (durable mount failures, {#key} hydration slots)

2026-07-27 16:33:34 -07:00

live-reference.test.mjs

Fix the applier contract regex: .mjs filenames contain periods

2026-07-29 17:45:45 -07:00

live-roots.test.mjs

fix: reject a valueless --target instead of falling back to implicit selection

2026-07-28 15:57:33 -07:00

live-server.test.mjs

Merge pull request #631 from pbakaus/fix/488-strip-reserved-poll-fields

2026-08-24 04:32:49 +05:00

live-session-store.test.mjs

fix: fifth review round (durable mount failures, {#key} hydration slots)

2026-07-27 16:33:34 -07:00

live-source-lock.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-source-search.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

live-svelte-adapter-deepseek.test.mjs

Fix DeepSeek Svelte live submit assertion (#342)

2026-07-07 17:11:04 -07:00

live-svelte-ast.test.mjs

fix: scope each keys during restore and fail loudly on an unenterable app root

2026-07-28 18:18:05 -07:00

live-svelte-component-accept.test.mjs

Simplify Svelte accept orchestration

2026-08-12 14:15:14 -04:00

live-svelte-props-script.test.mjs

Keep the scaffolder test inside its own workspace

2026-08-13 23:38:35 -04:00

live-tanstack-adapter.test.mjs

Add TanStack Router + Start support to live mode

2026-07-22 22:49:44 -07:00

live-target-context.test.mjs

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

live-ui-surfaces.test.mjs

Give the Live UI surface inventory one definition again

2026-08-06 14:53:20 -07:00

live-wrap-buffer-aware.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-wrap.test.mjs

Live: stop the preflight writing source, cache the resolution

2026-07-22 22:49:44 -07:00

new-work-e2e.test.mjs

Fix: stop the direction page hanging forever after a re-roll (#469) (#530)

2026-08-16 14:26:02 -07:00

openai-plugin.test.mjs

Split service layer into private impeccable-site repo

2026-07-20 22:41:53 -07:00

pin.test.mjs

Fix Codex pinned skill frontmatter (#519)

2026-08-05 15:25:42 -07:00

plugin-e2e.test.mjs

Guard the plugin loader contract that PR #494 exposed (#499)

2026-08-03 13:13:37 -07:00

release.test.mjs

Harden the test strategy: self-verifying triggers, 40% faster runner, release guards (#501)

2026-08-03 17:33:10 -07:00

serve-question.test.mjs

Fix: require session key and origin/host checks on serve-question POSTs (#555)

2026-08-28 05:53:25 +05:00

skill-reference.test.mjs

Restore reduced-motion animation guidance (#540)

2026-08-08 15:49:43 -07:00

skills-cli.test.js

Fix: safe temp staging and downloadFile error handling (#479)

2026-08-28 05:43:04 +05:00

staleness.test.mjs

Build path becomes a config key existing projects can actually reach

2026-08-13 21:52:17 -04:00

surface-brief.test.mjs

Centralize surface route normalization (#600)

2026-08-16 14:24:31 -07:00

target-args.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

template-extensions.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

test-suites.test.mjs

Harden the test strategy: self-verifying triggers, 40% faster runner, release guards (#501)

2026-08-03 17:33:10 -07:00

validate-plugin-manifest.test.js

Guard the plugin loader contract that PR #494 exposed (#499)

2026-08-03 13:13:37 -07:00

validate-plugin-versions.test.js

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

windows-path-fix.test.js

Detector architecture v2: static engine, benchmarks, lab, and visual contrast (#156)

2026-05-17 19:49:38 -07:00

zip.test.mjs

fix(cli): replace extract-zip with fflate to fix silent install on Node v24.16.0+ (#253)

2026-06-15 20:33:43 -07:00