5 Commits

Author	SHA1	Message	Date
Joseph O'Brien	19e74b4a1b	security: audit Command call sites; confirm no argument injection ... Closes #18 All six Command::new call sites audited: - bitwarden.rs (sh -c): shell string is a hardcoded literal; no user data. - bitwarden.rs (bw unlock): all args hardcoded. - bitwarden.rs (bw get): item_name and session passed as discrete .args() elements; no shell. - nothooks/runner.rs (nu/sh/etc): interp and script path passed as discrete args; no shell. - notstrap/repo.rs (git clone): url and dest passed as discrete .arg() calls; no shell. - notfiles/tests/integration.rs: test harness with hardcoded args only. Added SAFETY comments on the three sites that handle user-controlled config values.	2026-04-11 23:52:40 -04:00
Joseph O'Brien	0d60583c65	fix(notfiles,nothooks): validate package on unlink; batch state I/O in HookRunner ... Closes #10, closes #13	2026-04-11 23:40:40 -04:00
Joseph O'Brien	ebb8a5946d	refactor(nothooks): make hook runner language-agnostic ... Remove hardcoded nu interpreter. HookSpec gains an optional interpreter field; runner infers from file extension (.sh, .nu, .py, .rb, .zsh, .bash) when not set. Integration tests now use sh — no nu runtime dep on CI.	2026-04-04 01:14:29 -04:00
Joseph O'Brien	b4cba74ea3	docs: update HANDOFF.md — age-native redesign progress (tasks 1–7 complete)	2026-04-01 20:58:09 -04:00
Joseph O'Brien	4cc6fb022d	feat(nothooks): add phase-aware hook runner with setup-hook state tracking	2026-03-31 17:26:26 -04:00