mathiasandClaude Sonnet 5 e157311cd8 fix(mcp): validate the claim envelope before brain_edit writes too (#136) ...

7 review rounds closed 8 distinct bypasses across two mechanism families: fence-detection (field-name substring, block-containment, fence-stripping, CRLF, UTF-8 BOM) and value-extraction (folded YAML block scalar hiding an invalid value). A known v1 gap remains in the block-scalar fold's handling of blank-line-interrupted continuations — documented on checkClaimEnvelope, accepted deliberately (narrow, requires an already-privileged caller deliberately constructing a specific malformed-YAML shape) rather than chased past diminishing returns. Real fix (shared, tested, encoding-normalized frontmatter parser) tracked separately as hyperguild#138.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Mathias <mthbqv@gmail.com>

2026-09-23 10:28:07 +00:00

..

cmd

feat(claudewatcher): exclude whole project directories from ingestion

2026-09-15 08:09:58 +02:00

internal

fix(mcp): validate the claim envelope before brain_edit writes too (#136)

2026-09-23 10:28:07 +00:00

Dockerfile

fix(ci): allow ingestion Dockerfile to fetch internal gitea modules

2026-05-22 12:12:09 +02:00

go.mod

feat(webhook): trigger brain-sync on Gitea push instead of 15-min poll

2026-07-07 22:00:56 +02:00

go.sum

feat(webhook): trigger brain-sync on Gitea push instead of 15-min poll

2026-07-07 22:00:56 +02:00