Jinwoo Hong c6548b98f4 test(scripts): widen the Windows shim ratchet to catch package bin spawns (#20285) ...

* Widen Windows shim ratchet to detect package bin spawns

Follow local program expressions into node_modules/.bin while preserving the existing literal check, roots, and allow-list. Document static-analysis limits and cover unsafe and resolver-based invocations.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb

* fix(scripts): fold dot segments before matching node_modules/.bin

The predicate joins call arguments textually, so a literal '..' segment hid a
path that resolves into node_modules/.bin at runtime. Folds '.' and '..' (and
Windows separators) first. A '..' that genuinely escapes .bin still does not
match.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb

* style(scripts): use .at(-1) in the dot-segment fold

oxlint's prefer-at rule; the repo-wide lint gate is an error, not a warning.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb

2026-09-13 16:08:56 -04:00

..

build-plugins

fix(codex): stop blocking the main thread on trust grants (#16441) (#16594)

2026-08-26 16:44:55 -07:00

docker

ci(package): retry apt fetches and docker builds behind the Ubuntu mirror (#18797)

2026-09-04 22:24:18 -07:00

nsis

fix(windows): copy the daemon host exe verbatim instead of renaming it (MDE T1036) (#17865)

2026-09-05 21:11:28 -07:00

oxlint-plugins

perf(store): detect Zustand rerender churn the current audit cannot see (#19059)

2026-09-06 15:12:19 -07:00

patches

fix(xterm): remove scrollback decorations by identity (#13178)

2026-09-07 18:18:04 -07:00

relay-assets

docs(relay): correct why the ConPTY teardown asset diverges from the desktop patch (#18636)

2026-09-04 22:40:38 -07:00

scripts

test(scripts): widen the Windows shim ratchet to catch package bin spawns (#20285)

2026-09-13 16:08:56 -04:00

dev-app-update.yml

chore: move dev-app-update.yml into config/ (#1276)

2026-04-30 00:11:14 -07:00

electron-builder.config.cjs

build: reduce native dependency installs to the host platform (#20420)

2026-09-12 21:25:03 -07:00

electron-vite-target.config.cts

fix: close readiness gaps found by merged-change audit (#17159)

2026-08-31 08:17:40 -07:00

i18n-translation-source.md

docs(i18n): adopt gettext PO as the canonical translation source (#11478)

2026-07-31 11:46:25 -07:00

i18next.config.ts

fix(i18n): extract translateSearchKeyword calls so settings-search keywords reach en.json

2026-09-03 15:07:34 -07:00

knip.json

fix(codex): stop blocking the main thread on trust grants (#16441) (#16594)

2026-08-26 16:44:55 -07:00

localization-audit.md

perf(renderer): take the English catalog and the xterm WebGL addon off the boot graph (#18326)

2026-09-03 00:26:30 -07:00

localization-coverage-allowlist.json

fix(i18n): repair French locale drift breaking static analysis (#18550)

2026-09-03 18:24:43 -07:00

max-lines-baseline.txt

chore(mobile): remove stale max-lines exceptions (#19366)

2026-09-07 14:54:18 -07:00

oxlint-code-quality-casting.json

Add code quality lint for type assertions (#19462)

2026-09-12 20:43:36 -07:00

oxlint-code-quality-native-plugins.json

chore(lint): update oxlint to 1.77 and enable no-op cleanup rules (#13901)

2026-08-11 18:19:43 -07:00

oxlint-code-quality-type-aware.json

chore(lint): update oxlint to 1.77 and enable no-op cleanup rules (#13901)

2026-08-11 18:19:43 -07:00

oxlint-performance-audit.json

perf(store): detect Zustand rerender churn the current audit cannot see (#19059)

2026-09-06 15:12:19 -07:00

oxlint-react-doctor.json

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

packaged-runtime-node-modules.cjs

build: reduce native dependency installs to the host platform (#20420)

2026-09-12 21:25:03 -07:00

performance-audit.md

feat(perf): lint repeated sort setup and schedule regression contracts (#18822)

2026-09-05 13:56:06 -07:00

reliability-gates.jsonc

fix(chat): bound journal replay memory by live history (#20247)

2026-09-12 19:39:30 -07:00

runtime-electron-baseline.txt

feat(orcad): boot the Orca runtime on plain Node (#15968)

2026-08-22 21:47:46 -07:00

ts-nocheck-baseline.txt

Remove settled-worker automatic resume and hibernation fences (#19544)

2026-09-08 05:14:59 -04:00

tsconfig.cli.json

fix(codex): reconcile marketplace and plugin tables through the config mirror (#20150)

2026-09-11 21:22:10 -07:00

tsconfig.e2e.json

feat(ssh): verify host keys, and restore panes correctly across a reconnect (#14844)

2026-08-17 16:40:01 -07:00

tsconfig.node.json

refactor(host): route app paths and version through an AppEnvironment port (#16019)

2026-08-22 21:12:23 -07:00

tsconfig.relay.json

Support agent status hooks over SSH (#1865)

2026-05-14 16:06:23 -07:00

tsconfig.tc.cli.json

refactor to clean up the codebase (#412)

2026-04-08 22:49:16 -07:00

tsconfig.tc.web.json

perf(startup): stop queueing window creation behind the proxy apply and i18n (#18436)

2026-09-03 21:19:06 -07:00

tsconfig.web.json

refactor(preload): split the preload contract into per-domain api modules (#14403)

2026-08-13 20:52:04 -07:00

vitest.config.ts

ci: balance existing unit and E2E shards using recorded timings (#20367)

2026-09-12 03:10:05 -07:00

vitest.performance.config.ts

perf(store): detect Zustand rerender churn the current audit cannot see (#19059)

2026-09-06 15:12:19 -07:00