Repository navigation
docs(spec-loop): sync specs with main up to ccb53a388 - #1704
Merged
Merged
Conversation
Hand-sync of tools/spec-loop/specs/ with the functionality that landed between 43e4c6e and ccb53a3. Specs changed: - adapters: Gmail drafting through the gmail-plaintext MCP tools, not the CLI (93051d5, #1681); the Jira CLI's explicit --deployment and the tracker backends shipped as generated plugin copies (1cf5cee, #1683); local-tracker report files and folders created 0600 / 0700 (68ec4a3, #1700). - agent-isolation-sandbox: agent-guard unwrapping env / command and refusing env -S (b00d4b5, #1691; 4aea234, #1694); the macOS touch overlay shown whether or not activation is granted (0d9c168, #1697); the sandbox-lint workflow refusing a tracked .claude/settings.local.json (51a610b, #1692) and sandbox-lint refusing the Gmail token path in allowRead (93051d5, #1681). - vetted-command-surface: the spelling guard refusing a quoted ~, the right spelling behind env / command, and other spellings of the eval wrapper (b00d4b5, #1691). - adoption-and-setup: the tracker-backend question on every first setup and the Jira label mapping and doctor gate (1cf5cee, #1683). - .last-sync bumped to ccb53a3. No spec change needed (specs already updated in the commit itself): ccb53a3, 9a8ec5f, 9955d7d, c9f34cc, 76cc6e8, 1d773a8, 16014a2. No functional change for the specs: d4b7dc3 (review-body wording), 77e8145 (test timing), 8d606d6 (eval fixtures), a04891f (the previous sync). Generated-by: Claude Opus 5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hand-sync of
tools/spec-loop/specs/with the functionality that landed onmainbetween 43e4c6e (the last sync, #1682) and ccb53a3. Specs only; no skill, tool or doc outside the spec directory changes.Specs changed
gmail-plaintextMCP tools, not the CLI (fix(sandbox): stop exposing the Gmail OAuth token to sandboxed Bash #1681); the Jira CLI's explicit--deploymentand the tracker backends shipped as generated plugin copies (fix(security-tracker): harden the local and Jira backends after review #1683); local-tracker report files and folders created0600/0700(fix(local-tracker): keep new report files and folders to their owner #1700).env/commandand refusingenv -S(fix(agent-guard): see through env/command; refuse a quoted ~ and the eval wrapper's other spellings #1691, fix(agent-guard): refuse env -S instead of re-splitting its string #1694); the macOS touch overlay shown whether or not activation is granted (fix(agent-isolation): show the macOS touch overlay even when activation is refused #1697); the sandbox-lint workflow refusing a tracked.claude/settings.local.json(fix(ci): refuse a committed .claude/settings.local.json in sandbox-lint #1692); sandbox-lint refusing the Gmail token path inallowRead(fix(sandbox): stop exposing the Gmail OAuth token to sandboxed Bash #1681).~, the right spelling behindenv/command, and other spellings of the eval wrapper (fix(agent-guard): see through env/command; refuse a quoted ~ and the eval wrapper's other spellings #1691).doctorgate (fix(security-tracker): harden the local and Jira backends after review #1683)..last-syncbumped to ccb53a3.Not changed
Generative AI disclosure
Drafted with Claude Code (Claude Opus 5); every spec statement was checked against the code it describes, and reviewed by the author.
🤖 Generated with Claude Code