chore: env allowlist + path-guard + token-guard + hooks .mts + bootstrap + cascade#620

Closed

John-David Dalton (jdalton) wants to merge 15 commits into

mainfrom

chore/harden-env-allowlist

Commits on Apr 27, 2026

chore: env allowlist + path-guard + token-guard + hooks .mts + bootstrap + cascade
John-David Dalton (jdalton)
committed
fix(hooks): address Bugbot feedback — drop orphan _api-key-check.sh + align pre-commit .env scope
John-David Dalton (jdalton)
committed
fix(hooks): align pre-push .env detection + fix sed redaction regex (Bugbot)
John-David Dalton (jdalton)
committed
fix(bootstrap): apply stripRange to catalog path too (Bugbot)
John-David Dalton (jdalton)
committed
chore(deps): bump @socketsecurity/lib to 5.25.0
John-David Dalton (jdalton)
committed
refactor: adopt @socketsecurity/lib/primordials
John-David Dalton (jdalton)
committed
chore(deps): bump @socketsecurity/lib to 5.26.0
John-David Dalton (jdalton)
committed
chore(deps): downgrade @socketsecurity/lib to 5.25.1
John-David Dalton (jdalton)
committed
chore: sync SKILL.md docs to canonical
John-David Dalton (jdalton)
committed
chore(claude): add workflow-dispatch rule
John-David Dalton (jdalton)
committed
docs(path-guard): sync paths-allowlist.yml schema docs + check-paths.mts.tmpl
John-David Dalton (jdalton)
committed
chore(claude): sync hooks to template canonical
John-David Dalton (jdalton)
committed
chore(deps): refresh pnpm-lock.yaml for private-name-guard hook
John-David Dalton (jdalton)
committed
chore(format): apply oxfmt to bootstrap-from-registry.mts
John-David Dalton (jdalton)
committed
chore(ci): cascade socket-registry pins to 3f2f2c00
John-David Dalton (jdalton)
committed