Commit Graph

27 Commits

Author SHA1 Message Date
github-actions[bot]
456dc0cbb2 chore: sync repo state [ci skip] 2026-04-03 14:53:09 +00:00
sickn33
6a07b837c4 chore: release v9.4.0 2026-03-31 18:30:43 +02:00
sickn33
9bb2ff6a3a chore(release): sync 9.3.0 metadata
Record the versioned plugin metadata and onboarding docs refreshed by the release preflight so the release workflow can continue from a clean main branch.
2026-03-30 21:34:32 +02:00
sickn33
91e305798c docs(maintenance): refresh issue metadata for release
Improve github-issue-creator discovery metadata, record the 9.3.0 notes, and sync generated artifacts so the maintenance batch is ready for the release workflow. Preserve the current main state for issue closure and release publication.

Refs #419

Refs #421
2026-03-30 21:34:31 +02:00
sickn33
6f6764046b chore: release v9.2.0 2026-03-29 18:41:07 +02:00
sickn33
5a9bd5f037 fix(hugging-face-cli): Remove pipe-to-shell examples
Replace direct pipe-to-shell install snippets with download, review,\nand local execution examples so the docs security suite passes.\n\nRefs #417
2026-03-29 18:33:12 +02:00
sickn33
bdcfbb9625 feat(hugging-face): Add official ecosystem skills
Import the official Hugging Face ecosystem skills and sync the\nexisting local coverage with upstream metadata and assets.\n\nRegenerate the canonical catalog, plugin mirrors, docs, and release\nnotes after the maintainer merge batch so main stays in sync.\n\nFixes #417
2026-03-29 18:31:46 +02:00
github-actions[bot]
abd0762cf9 chore: sync repo state [ci skip] 2026-03-29 16:26:36 +00:00
github-actions[bot]
28ca21885a chore: sync repo state [ci skip] 2026-03-29 16:25:33 +00:00
sickn33
4c2238dc45 meta(risk): Expand legacy label sync
Expand the conservative risk sync with explicit critical, offensive, and none patterns.\n\nAuto-apply high-confidence legacy label fixes, add the authorized-use notice when promoting offensive skills, and regenerate canonical and plugin artifacts so the unknown backlog keeps shrinking without loosening contributor input rules.
2026-03-29 10:55:44 +02:00
sickn33
0db870eb11 meta(risk): Sync conservative legacy labels
Add a maintainers script to safely promote high-confidence legacy risk labels from unknown to concrete values, cover it with tests, and regenerate the canonical skill artifacts and plugin copies. This reduces the legacy unknown backlog without forcing noisy classifications that still need manual review.
2026-03-29 10:45:21 +02:00
sickn33
9e1e9c97a1 fix(ci): Track canonical plugin drift
Treat generated plugin mirrors and marketplace outputs as managed
canonical artifacts so the main-branch sync bot can stage and commit
them instead of failing on unmanaged drift.

Ignore web-app coverage output during maintainer runs and update the
mirrored Office unpack scripts so plugin copies stay aligned with the
hardened source implementations.
2026-03-29 09:50:20 +02:00
sickn33
e874770c0d fix(whatsapp): Stop logging sensitive config data
Sanitize WhatsApp Cloud API validator output across the root skill and plugin copies so code scanning no longer flags clear-text exposure.

Add a regression test that verifies successful and failed validation runs do not print sensitive response fields or API error details.
2026-03-28 23:16:30 +01:00
sickn33
ef6214cc16 fix(security): Resolve remaining code scanning alerts 2026-03-28 17:54:07 +01:00
sickn33
b681e0e03b fix(security): Harden skill security checks 2026-03-28 17:37:29 +01:00
sickn33
fa237d97ae chore: release v9.1.0 2026-03-28 16:48:38 +01:00
sickn33
ed9b28efa5 chore: sync release state after merge batch 2026-03-28 16:46:44 +01:00
Saim Shafique
c75b067279 feat(skills): add saas-multi-tenant (#411)
* feat(skills): add saas-multi-tenant — multi-tenant SaaS architecture with RLS, tenant-scoped queries, and isolation patterns

* chore: sync generated registry files

* fix: address code review — set_config, cleanup, args guard, findUnique

* chore(pr411): Remove derived artifacts

* chore(pr411): Drop derived files from diff

* chore(pr411): Revert count drift

---------

Co-authored-by: sickn33 <sickn33@users.noreply.github.com>
2026-03-28 16:42:17 +01:00
sickn33
8ad1ef9d83 fix(installer): make updates idempotent and harden CI staging 2026-03-27 15:26:41 +01:00
sickn33
8cdb1ef658 fix(deps): Patch picomatch vulnerability 2026-03-27 14:44:50 +01:00
sickn33
32db281465 fix(scripts): Harden code scanning findings 2026-03-27 14:42:55 +01:00
sickn33
1ac95d926f fix(release): sync plugin manifests for v9.0.0
Capture the plugin manifest version bumps that release:prepare generated for 9.0.0 and update the release staging step so Claude and Codex plugin manifests are included automatically in future release commits.
2026-03-27 10:54:23 +01:00
sickn33
169077e9fb fix(skills): add trust metadata usage guidance
Add a When to Use section for akf-trust-metadata so release validation stays within the current warning budget.\n\nRefresh the generated plugin-safe and catalog artifacts produced by the maintainer sync after the PR batch landed.
2026-03-27 10:48:21 +01:00
sickn33
5af8360409 docs(plugins): add Claude and Codex plugin guides
Document the new Claude Code and Codex plugin distributions and explain how root plugins, bundle plugins, and plugin-safe filtering relate to the full library install.\n\nSync the catalog, plugin compatibility artifacts, and generated plugin-safe subsets so main stays consistent before the v9.0.0 release flow.
2026-03-27 10:45:56 +01:00
sickn33
4c0cc5fadb feat(plugins): add plugin-safe compatibility filtering 2026-03-27 10:18:16 +01:00
sickn33
dffac91d3b feat(bundles): add editorial bundle plugins 2026-03-27 08:51:59 +01:00
sickn33
57e90d0f83 feat(codex): Add repo-local plugin marketplace support
Add Codex marketplace metadata and a repo-local plugin scaffold so the repository can be installed as a Codex plugin without duplicating the skills catalog.

Document the new integration path and cover it with a regression test to keep the marketplace entry and plugin manifest in sync.
2026-03-27 04:10:36 +01:00