Commit Graph

  • 8418d2535b allowlist CMS registry browse/detail fetch() to orchestrator endpoints main Alex Dunmow 2026-07-05 10:42:08 +08:00
  • 3476316e9c fix(frontend): match calcomblock REST allowlist by location-independent suffix Alex Dunmow 2026-07-05 03:06:20 +08:00
  • 2c7fe9aa62 fix: model orchestrator + cli as first-class scan targets (WO-WZ-023) Alex Dunmow 2026-07-04 22:39:47 +08:00
  • 44d60b5f7b feat(frontend): allowlist /.well-known/skills/ fetches Alex Dunmow 2026-07-04 15:21:21 +08:00
  • 542324fe5c feat(colors): exempt templates/email/*.ninjatpl from the hardcoded-color check Alex Dunmow 2026-07-04 14:42:41 +08:00
  • e03144e12d feat: codeless plugin repos (plugin.mod, no Go) exempt from go.mod checks (WO-WZ-020) Alex Dunmow 2026-07-04 12:43:54 +08:00
  • 482e4f9d43 fix(check2): skip RBAC check for the definitions-only core SDK Alex Dunmow 2026-07-04 09:28:19 +08:00
  • 05a0354c85 style: normalize any check finding lines to canonical file:line format Alex Dunmow 2026-07-04 01:30:52 +08:00
  • c4d01de82c feat: concise output + diff-scoped any check Alex Dunmow 2026-07-04 01:16:56 +08:00
  • 3b5a6d26d6 docs: design for concise output + diff-scoped any check Alex Dunmow 2026-07-04 00:45:26 +08:00
  • b423f90e29 feat: no -buildmode=plugin check (disabled until WO-WZ-017) Alex Dunmow 2026-07-03 18:34:28 +08:00
  • 40d33d0587 rawsql: allow FROM pg_roles admin catalog lookup Alex Dunmow 2026-07-03 16:36:58 +08:00
  • bba5946bb1 allow site-agent streaming hook createClient (WO-SA-006) Alex Dunmow 2026-07-03 03:05:25 +08:00
  • 3c88b19ff6 docs: make README all-inclusive (full 31-check table, all CLI flags) Alex Dunmow 2026-07-02 15:12:19 +08:00
  • 936a7e7ef9 feat: enforce proto generation freshness Alex Dunmow 2026-06-20 12:40:06 +08:00
  • f968cb31d9 fix: skip gitignored .worktrees/ dirs in repo scans Alex Dunmow 2026-06-18 16:53:18 +08:00
  • 7b96ceac4d Link CLAUDE.md to AGENTS.md Alex Dunmow 2026-06-18 16:46:53 +08:00
  • 73259c6b30 fix(check-safety): recognize methodRolesSeed RBAC table; resolve backend scan-root Alex Dunmow 2026-06-18 11:04:40 +08:00
  • c048766075 feat(checks): add check 28 — public page handlers inject admin toolbar Alex Dunmow 2026-06-17 22:37:59 +08:00
  • 7599fff971 feat: sanction /api/helpdesk/ as a known non-proto fetch prefix (WO-028) Alex Dunmow 2026-06-10 21:40:25 +08:00
  • c3bb958f23 feat(frontend-check): flag raw <button> in JSX — use the shared <Button> component Alex Dunmow 2026-06-10 15:15:46 +08:00
  • fbe14f6c57 chore(frontend-check): document use-entity-search exception; allow helpdesk multipart fetches Alex Dunmow 2026-06-10 14:52:35 +08:00
  • 0e8d0e6d1c fix(scan-roots): detect consolidated CMS layout (backend/go.mod + web/src) Alex Dunmow 2026-06-10 14:52:35 +08:00
  • 57bca429cc chore: follow CMS module rename in rule strings + test fixtures Alex Dunmow 2026-06-06 13:55:47 +08:00
  • cd88c808b0 initial: standalone check-safety module hoisted from CMS Alex Dunmow 2026-06-06 13:04:02 +08:00