Neil 2dcbc6a83a test(package): reject an Electron install takeover by exact command ...

CodeRabbit was right about #20787. Replacing the pinned postinstall string
with a /electron/i keyword check was wrong in both directions, verified:

  rebuild-native-deps.mjs && rebuild-native-deps.mjs   PASSED  (should fail)
  rebuild-native-deps.mjs && check-electron-version    FAILED  (should pass)

The owner's own path contains no "electron", so duplicating it slipped
through -- the one case the contract is named for. And a substring match
rejects any later step that merely mentions Electron, which is the same
over-tightness that broke every open PR in the first place, relocated.

Later steps are now checked against the exact owned command plus the known
Electron install commands. A second case pins the rejections themselves,
because reading the real postinstall cannot show a bad chain would be caught
-- that is how #20787 shipped with a guard that did not guard.

Split into its own file rather than adding a max-lines disable (AGENTS.md).

2026-09-15 00:08:18 -07:00

..

build-plugins

fix(codex): stop blocking the main thread on trust grants (#16441) (#16594)

2026-08-26 16:44:55 -07:00

docker

ci(package): retry apt fetches and docker builds behind the Ubuntu mirror (#18797)

2026-09-04 22:24:18 -07:00

nsis

fix(windows): copy the daemon host exe verbatim instead of renaming it (MDE T1036) (#17865)

2026-09-05 21:11:28 -07:00

oxlint-plugins

perf(store): detect Zustand rerender churn the current audit cannot see (#19059)

2026-09-06 15:12:19 -07:00

patches

fix(pty): pace the EAGAIN write retry so a stalled reader can't saturate the daemon thread (#15319)

2026-09-14 02:32:08 -07:00

relay-assets

docs(relay): correct why the ConPTY teardown asset diverges from the desktop patch (#18636)

2026-09-04 22:40:38 -07:00

scripts

test(package): reject an Electron install takeover by exact command

2026-09-15 00:08:18 -07:00

dev-app-update.yml

chore: move dev-app-update.yml into config/ (#1276)

2026-04-30 00:11:14 -07:00

electron-builder.config.cjs

build: reduce native dependency installs to the host platform (#20420)

2026-09-12 21:25:03 -07:00

electron-vite-target.config.cts

fix: close readiness gaps found by merged-change audit (#17159)

2026-08-31 08:17:40 -07:00

i18n-translation-source.md

docs(i18n): adopt gettext PO as the canonical translation source (#11478)

2026-07-31 11:46:25 -07:00

i18next.config.ts

fix(i18n): extract translateSearchKeyword calls so settings-search keywords reach en.json

2026-09-03 15:07:34 -07:00

knip.json

fix(codex): stop blocking the main thread on trust grants (#16441) (#16594)

2026-08-26 16:44:55 -07:00

localization-audit.md

perf(renderer): take the English catalog and the xterm WebGL addon off the boot graph (#18326)

2026-09-03 00:26:30 -07:00

localization-coverage-allowlist.json

fix(i18n): repair French locale drift breaking static analysis (#18550)

2026-09-03 18:24:43 -07:00

max-lines-baseline.txt

chore(mobile): remove stale max-lines exceptions (#19366)

2026-09-07 14:54:18 -07:00

oxlint-anti-slop.json

fix(lint): enable anti-slop/no-unknown-type-aliases (#20784)

2026-09-15 00:02:04 -07:00

oxlint-code-quality-casting.json

Add code quality lint for type assertions (#19462)

2026-09-12 20:43:36 -07:00

oxlint-code-quality-native-plugins.json

chore(lint): update oxlint to 1.77 and enable no-op cleanup rules (#13901)

2026-08-11 18:19:43 -07:00

oxlint-code-quality-type-aware.json

chore(lint): update oxlint to 1.77 and enable no-op cleanup rules (#13901)

2026-08-11 18:19:43 -07:00

oxlint-dead-classes.json

feat(design-system): gate renderer UI with @shadcn/lint (#20731)

2026-09-14 17:52:21 -07:00

oxlint-design-system.json

feat(design-system): gate renderer UI with @shadcn/lint (#20731)

2026-09-14 17:52:21 -07:00

oxlint-performance-audit.json

perf(store): detect Zustand rerender churn the current audit cannot see (#19059)

2026-09-06 15:12:19 -07:00

oxlint-react-doctor.json

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

packaged-runtime-node-modules.cjs

build: reduce native dependency installs to the host platform (#20420)

2026-09-12 21:25:03 -07:00

performance-audit.md

feat(perf): lint repeated sort setup and schedule regression contracts (#18822)

2026-09-05 13:56:06 -07:00

reliability-gates.jsonc

refactor(native-chat): give each structured dispatch state exactly one meaning (#20133)

2026-09-13 13:46:57 -07:00

runtime-electron-baseline.txt

feat(orcad): boot the Orca runtime on plain Node (#15968)

2026-08-22 21:47:46 -07:00

ts-nocheck-baseline.txt

Remove settled-worker automatic resume and hibernation fences (#19544)

2026-09-08 05:14:59 -04:00

tsconfig.cli.json

fix(claude): install SessionEnd for capable versions (#20530)

2026-09-13 21:59:57 -07:00

tsconfig.e2e.json

feat(ssh): verify host keys, and restore panes correctly across a reconnect (#14844)

2026-08-17 16:40:01 -07:00

tsconfig.node.json

refactor(host): route app paths and version through an AppEnvironment port (#16019)

2026-08-22 21:12:23 -07:00

tsconfig.relay.json

Support agent status hooks over SSH (#1865)

2026-05-14 16:06:23 -07:00

tsconfig.tc.cli.json

refactor to clean up the codebase (#412)

2026-04-08 22:49:16 -07:00

tsconfig.tc.web.json

perf(startup): stop queueing window creation behind the proxy apply and i18n (#18436)

2026-09-03 21:19:06 -07:00

tsconfig.web.json

refactor(preload): split the preload contract into per-domain api modules (#14403)

2026-08-13 20:52:04 -07:00

vitest.config.ts

ci: balance existing unit and E2E shards using recorded timings (#20367)

2026-09-12 03:10:05 -07:00

vitest.performance.config.ts

perf(store): detect Zustand rerender churn the current audit cannot see (#19059)

2026-09-06 15:12:19 -07:00