3 Commits

Include renames

Author	SHA1	Message	Date
Jinwoo-H	73be7f5acd	style(scripts): use .at(-1) in the dot-segment fold ... oxlint's prefer-at rule; the repo-wide lint gate is an error, not a warning. Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb	2026-09-12 14:14:49 -04:00
Jinwoo-H	8f89b31129	fix(scripts): fold dot segments before matching node_modules/.bin ... The predicate joins call arguments textually, so a literal '..' segment hid a path that resolves into node_modules/.bin at runtime. Folds '.' and '..' (and Windows separators) first. A '..' that genuinely escapes .bin still does not match. Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb	2026-09-12 14:05:35 -04:00
Jinwoo-H	1ebabca913	Widen Windows shim ratchet to detect package bin spawns ... Follow local program expressions into node_modules/.bin while preserving the existing literal check, roots, and allow-list. Document static-analysis limits and cover unsafe and resolver-based invocations. Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb	2026-09-12 01:31:45 -04:00