Garry TanandClaude Fable 5 57a1d957f4 fix(redact): block real all-caps URL passwords, not just shape-match ...

urlPasswordIsPlaceholder skipped any password matching /^[A-Z][A-Z0-9_]*$/,
so a real DSN like postgres://admin:PROD2026SECRET@db-prod.internal/app slipped
the HIGH pre-push block. Replace the shape rule with an anchored, exact-match
set of doc-convention placeholder tokens (PASSWORD, PASS, CHANGEME, ...),
compared case-sensitively and never as a substring (PROD2026SECRET must not
match SECRET). The USER:PASSWORD doc convention still suppresses; real all-caps
and lowercase passwords block. Regression cases pinned both directions.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-16 10:14:32 -07:00

..

code-intelligence

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

diagram-render

v1.58.0.0 feat: diagram + multi-format document engine (mermaid, excalidraw, single-file HTML, DOCX) (#1990)

2026-06-12 15:38:53 -07:00

bin-context.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

conductor-env-shim.ts

v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)

2026-06-14 11:40:57 -07:00

context-bill.ts

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

egress-receipt.ts

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

eval-model.ts

v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593)

2026-08-15 22:20:30 -07:00

fs-atomic.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

gbrain-exec.ts

v1.58.4.0 fix: high-priority community bug wave + PTY plan-mode smoke gate (#2077)

2026-06-21 07:15:19 -07:00

gbrain-guards.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

gbrain-local-status.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

gbrain-repo-policy-client.ts

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gbrain-sources.ts

v1.61.0.0 fix wave: guards failing open / silent failures (9 fixes, 4 community PRs absorbed) (#2472)

2026-08-08 09:28:45 -07:00

gbrain-supabase-provision.ts

v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593)

2026-08-15 22:20:30 -07:00

gstack-decision-semantic.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

gstack-decision.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

gstack-memory-helpers.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

is-conductor.ts

v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)

2026-06-14 11:40:57 -07:00

jsonl-store.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

redact-audit-log.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

redact-engine.ts

v1.58.4.0 fix: high-priority community bug wave + PTY plan-mode smoke gate (#2077)

2026-06-21 07:15:19 -07:00

redact-patterns.ts

fix(redact): block real all-caps URL passwords, not just shape-match

2026-08-16 10:14:32 -07:00

staging-guard.ts

v1.56.1.0 fix(sync): staging-dir ownership guard + resume-correctness fixes (#1802) (#1856)

2026-06-07 06:51:10 -07:00

worktree.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00