Address adversarial review findings: capture health, network gating, credentials, CI, packaging by Co-Messi · Pull Request #12 · Co-Messi/supercut

test: scope vitest collection to this checkout

Co-Messi

committed

aa4add0

feat(schema): declare the unified clock in the event log

Co-Messi

committed

b617865

fix(render): hard capture-health gate; legacy skew comes from the schema marker

Co-Messi

committed

3a247b5

fix(director): never send a provider-scoped key to a custom endpoint

Co-Messi

committed

7e67c9b

fix(security): --block-private-network now gates every request type

Co-Messi

committed

8ca3f02

fix(security): gate record-stage requests; align allowPrivateNetwork defaults

Co-Messi

committed

77c18c5

fix(director): treat page-derived text as data in prompts; add --dry-run preview

Co-Messi

committed

5e4b101

fix(director): preserve the take when QC cuts everything; report before render

Co-Messi

committed

6a10223

fix(render): bound the ffmpeg mux with a timeout and explicit maxBuffer

Co-Messi

committed

1458cd3

fix(render): catch hard tab deaths; size the render timeout from the plan

Co-Messi

committed

a79f6f6

feat(director): meter usage-less providers; refuse oversized calls pre-send

Co-Messi

committed

be98d46

fix(director): bound the --repo walk with a file-count budget

Co-Messi

committed

d9d8041

fix: low-severity audit findings across CLI, director, and render

Co-Messi

committed

4e30b12

chore(ci): green audit via lockfile fix; verify build and package shape

Co-Messi

committed

57ab54c

chore(npm): ship only render assets; add publish metadata; v0.1.0

Co-Messi

committed

460d632

docs: lead with the AI director; npm-safe images; npx-first quick start

Co-Messi

committed

8f038cb

test: malformed take directories and the ffmpeg mux failure path

Co-Messi

committed

7930e89

fix(director): per-run nonce in untrusted markers; scrub to a fixpoint

Co-Messi

committed

ae87272

fix(capture): restore record()'s fail-closed allowPrivateNetwork default

Co-Messi

committed

5114985

feat(security): gate WebSocket connections when the private-network guard is on

Co-Messi

committed

f548478

fix(director): applyVerdicts throws a typed AllScenesCutError instead of failing open

Co-Messi

committed

c0461d4

fix(director): preflight tolerates 401/403 roots; add --skip-preflight

Co-Messi

committed

1a10492

fix(director): warn when SUPERCUT_ALLOW_SPARSE bypasses the generate health gate

Co-Messi

committed

0f2cd10

fix(director): size the per-image token estimate as a cross-provider ceiling

Co-Messi

committed

55e8fb7

test: wiring coverage for the record request gate and the generate health gate

Co-Messi

committed

19145c5

chore(ci): run e2e by naming convention so new e2e files can't be skipped

Co-Messi

committed

ddec22e

fix(render): stop the watchdog timer and fatal-poll loop on every exit path

Co-Messi

committed

29b41ce

fix(render): capture health counts cursor_path point timestamps as take duration

Co-Messi

committed

1f26566

fix(director): apply --app scoping inside the repo walk, before the file budget

Co-Messi

committed

785c6cd

Navigation Menu

Address adversarial review findings: capture health, network gating, credentials, CI, packaging - #12

Address adversarial review findings: capture health, network gating, credentials, CI, packaging#12
Co-Messi wants to merge 33 commits into
mainfrom
fix-audit-findings

Commits on Sep 2, 2026

test: scope vitest collection to this checkout

feat(schema): declare the unified clock in the event log

fix(render): hard capture-health gate; legacy skew comes from the schema marker

fix(director): never send a provider-scoped key to a custom endpoint

fix(security): --block-private-network now gates every request type

fix(security): gate record-stage requests; align allowPrivateNetwork defaults

fix(director): treat page-derived text as data in prompts; add --dry-run preview

fix(director): preserve the take when QC cuts everything; report before render

fix(render): bound the ffmpeg mux with a timeout and explicit maxBuffer

fix(render): catch hard tab deaths; size the render timeout from the plan

feat(director): meter usage-less providers; refuse oversized calls pre-send

fix(director): bound the --repo walk with a file-count budget

fix: low-severity audit findings across CLI, director, and render

chore(ci): green audit via lockfile fix; verify build and package shape

chore(npm): ship only render assets; add publish metadata; v0.1.0

docs: lead with the AI director; npm-safe images; npx-first quick start

test: malformed take directories and the ffmpeg mux failure path

fix(director): per-run nonce in untrusted markers; scrub to a fixpoint

fix(capture): restore record()'s fail-closed allowPrivateNetwork default

feat(security): gate WebSocket connections when the private-network guard is on

fix(director): applyVerdicts throws a typed AllScenesCutError instead of failing open

fix(director): preflight tolerates 401/403 roots; add --skip-preflight

fix(director): warn when SUPERCUT_ALLOW_SPARSE bypasses the generate health gate

fix(director): size the per-image token estimate as a cross-provider ceiling

test: wiring coverage for the record request gate and the generate health gate

chore(ci): run e2e by naming convention so new e2e files can't be skipped

fix(render): stop the watchdog timer and fatal-poll loop on every exit path

fix(render): capture health counts cursor_path point timestamps as take duration

fix(director): apply --app scoping inside the repo walk, before the file budget

Commits on Sep 3, 2026

fix(security): request gate fails closed on DNS failure and never caches the failure

fix(cli): dry-run's suggested record command keeps --block-private-network

fix(director): --dry-run no longer requires ffmpeg

fix(director): wrap the full page-derived analysis in the untrusted markers, not just the inventory