Commit Graph

  • fd26aa76dc fix(safety): scope private table file byte transports main Alex Dunmow 2026-09-06 18:56:53 +08:00
  • ce81cce76c chore: checkpoint all working changes Alex Dunmow 2026-09-05 21:14:15 +08:00
  • 68e9fa6f6c fix: ignore proto output permission drift Alex Dunmow 2026-08-25 22:56:49 +08:00
  • 5aca8722c8 fix: isolate proto freshness generation Alex Dunmow 2026-08-25 21:26:57 +08:00
  • d970b6da3d fix(frontend): scope non-proto fetch allowances Alex Dunmow 2026-08-19 18:10:27 +08:00
  • a159bddf0b fix(frontend): allow certificate renewal stream client Alex Dunmow 2026-08-19 16:16:48 +08:00
  • 30be5aaca8 fix: discover active BlockNinja workspace Alex Dunmow 2026-08-09 10:16:13 +08:00
  • 08da6a4723 chore(theme): re-vendor cms theme copies for font size steps Alex Dunmow 2026-08-04 00:54:07 +08:00
  • 6fb2519cfd chore(theme): re-vendor cms theme copies after nav-link and rem-first fixes Alex Dunmow 2026-08-03 23:26:53 +08:00
  • dd82b88e26 chore(colors): allowlist multicolor palette icon in cms Alex Dunmow 2026-08-03 21:50:55 +08:00
  • 6979a87d92 chore(theme): refresh vendored cms theme copies for font size overrides Alex Dunmow 2026-08-03 21:03:12 +08:00
  • f69e824f78 feat: allow judgefestblock web REST fetches (HTTPHandler plugin, calcomblock precedent) Alex Dunmow 2026-07-12 14:21:54 +08:00
  • 9a0099a95a feat: gate schema.sql against tables not created by core migrations Alex Dunmow 2026-07-11 21:13:51 +08:00
  • 43113fc865 chore: allowlist pages.system.tsx for COMING_SOON enum wiring Alex Dunmow 2026-07-08 20:37:17 +08:00
  • d0adca8583 feat(2c): end the core/captcha carve-out — zero block/core in standalone plugins Alex Dunmow 2026-07-07 23:09:20 +08:00
  • 0749c22d30 feat(2c): forbid all first-party imports in standalone plugins; fix --plugin-dir-only scans Alex Dunmow 2026-07-07 21:48:01 +08:00
  • 338c41c3c8 test: derive pluginsdk anchor version dynamically in plugin scaffolds Alex Dunmow 2026-07-07 17:49:23 +08:00
  • 4f3636d66d docs: correct check count (33) Alex Dunmow 2026-07-07 15:42:50 +08:00
  • 56cca5b4b8 chore: retire check 31 (bn chrome sync) — chrome is host-only since P3 Alex Dunmow 2026-07-07 14:30:38 +08:00
  • ff4de855cc refactor: complete check 2c retarget from block/core to block/pluginsdk Alex Dunmow 2026-07-07 11:13:42 +08:00
  • de43bca80f refactor: retarget check 31 bn-chrome sync from core to pluginsdk Alex Dunmow 2026-07-07 10:51:27 +08:00
  • cc19b7eabb feat: check 31 — bn chrome template sync between cms and core Alex Dunmow 2026-07-07 03:03:34 +08:00
  • 8d844f2d61 feat: check 30 — render benchmark regression gate (WO-RP-013) Alex Dunmow 2026-07-07 01:11:00 +08:00
  • 422674ded0 chore: drop allowlist entries for deleted restart-operation files Alex Dunmow 2026-07-06 00:24:43 +08:00
  • 1693ced112 feat(frontend-check): allowlist /api/push/upload multipart fetch (restore wizard) Alex Dunmow 2026-07-05 23:00:33 +08:00
  • 8418d2535b allowlist CMS registry browse/detail fetch() to orchestrator endpoints Alex Dunmow 2026-07-05 10:42:08 +08:00
  • 3476316e9c fix(frontend): match calcomblock REST allowlist by location-independent suffix Alex Dunmow 2026-07-05 03:06:20 +08:00
  • 2c7fe9aa62 fix: model orchestrator + cli as first-class scan targets (WO-WZ-023) Alex Dunmow 2026-07-04 22:39:47 +08:00
  • 44d60b5f7b feat(frontend): allowlist /.well-known/skills/ fetches Alex Dunmow 2026-07-04 15:21:21 +08:00
  • 542324fe5c feat(colors): exempt templates/email/*.ninjatpl from the hardcoded-color check Alex Dunmow 2026-07-04 14:42:41 +08:00
  • e03144e12d feat: codeless plugin repos (plugin.mod, no Go) exempt from go.mod checks (WO-WZ-020) Alex Dunmow 2026-07-04 12:43:54 +08:00
  • 482e4f9d43 fix(check2): skip RBAC check for the definitions-only core SDK Alex Dunmow 2026-07-04 09:28:19 +08:00
  • 05a0354c85 style: normalize any check finding lines to canonical file:line format Alex Dunmow 2026-07-04 01:30:52 +08:00
  • c4d01de82c feat: concise output + diff-scoped any check Alex Dunmow 2026-07-04 01:16:56 +08:00
  • 3b5a6d26d6 docs: design for concise output + diff-scoped any check Alex Dunmow 2026-07-04 00:45:26 +08:00
  • b423f90e29 feat: no -buildmode=plugin check (disabled until WO-WZ-017) Alex Dunmow 2026-07-03 18:34:28 +08:00
  • 40d33d0587 rawsql: allow FROM pg_roles admin catalog lookup Alex Dunmow 2026-07-03 16:36:58 +08:00
  • bba5946bb1 allow site-agent streaming hook createClient (WO-SA-006) Alex Dunmow 2026-07-03 03:05:25 +08:00
  • 3c88b19ff6 docs: make README all-inclusive (full 31-check table, all CLI flags) Alex Dunmow 2026-07-02 15:12:19 +08:00
  • 936a7e7ef9 feat: enforce proto generation freshness Alex Dunmow 2026-06-20 12:40:06 +08:00
  • f968cb31d9 fix: skip gitignored .worktrees/ dirs in repo scans Alex Dunmow 2026-06-18 16:53:18 +08:00
  • 7b96ceac4d Link CLAUDE.md to AGENTS.md Alex Dunmow 2026-06-18 16:46:53 +08:00
  • 73259c6b30 fix(check-safety): recognize methodRolesSeed RBAC table; resolve backend scan-root Alex Dunmow 2026-06-18 11:04:40 +08:00
  • c048766075 feat(checks): add check 28 — public page handlers inject admin toolbar Alex Dunmow 2026-06-17 22:37:59 +08:00
  • 7599fff971 feat: sanction /api/helpdesk/ as a known non-proto fetch prefix (WO-028) Alex Dunmow 2026-06-10 21:40:25 +08:00
  • c3bb958f23 feat(frontend-check): flag raw <button> in JSX — use the shared <Button> component Alex Dunmow 2026-06-10 15:15:46 +08:00
  • fbe14f6c57 chore(frontend-check): document use-entity-search exception; allow helpdesk multipart fetches Alex Dunmow 2026-06-10 14:52:35 +08:00
  • 0e8d0e6d1c fix(scan-roots): detect consolidated CMS layout (backend/go.mod + web/src) Alex Dunmow 2026-06-10 14:52:35 +08:00
  • 57bca429cc chore: follow CMS module rename in rule strings + test fixtures Alex Dunmow 2026-06-06 13:55:47 +08:00
  • cd88c808b0 initial: standalone check-safety module hoisted from CMS Alex Dunmow 2026-06-06 13:04:02 +08:00