jakevin 72bc86cf41 fix: code audit round 2 — safety, hot-reload, error diagnostics (#982) ...

* fix: code audit round 2 — pruneEmptyDirs, evaluateWithArgs, hot-reload, error cause chain

1. pruneEmptyDirs: use path.relative() instead of startsWith() to prevent
   false boundary matches on overlapping directory names
2. evaluateWithArgs: add safe evaluate method that auto-serializes args via
   JSON.stringify, preventing injection by design
3. Hot-reload: detect mtime changes on user adapter files in daemon mode,
   invalidate module cache so edits take effect without restart
4. toEnvelope: preserve error cause chain in verbose mode for better
   production debugging

* fix: address review feedback on code audit round 2

- pruneEmptyDirs: resolve() paths before relative() check
- evaluateWithArgs: validate keys are valid JS identifiers
- hot-reload: only bust ESM cache on reload, not first load
- toEnvelope: move cause serialization into toEnvelope itself
  so all consumers (AI agents, MCP tools) get cause chain

2026-04-13 09:36:53 +08:00

..

check-doc-coverage.sh

fix: sync package-lock.json to unblock CI (#937)

2026-04-10 23:29:09 +08:00

clean-dist.cjs

refactor(adapters): convert adapter layer from TypeScript to JavaScript (#928)

2026-04-10 14:52:18 +08:00

copy-yaml.cjs

refactor(adapters): convert adapter layer from TypeScript to JavaScript (#928)

2026-04-10 14:52:18 +08:00

fetch-adapters.js

fix: code audit round 2 — safety, hot-reload, error diagnostics (#982)

2026-04-13 09:36:53 +08:00

postinstall.js

fix: project hygiene — docs, lint, daemon restart (#942)

2026-04-11 00:50:05 +08:00