Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Dicklesworthstone/destructive_command_guard
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.2.9
Choose a base ref
...
head repository: Dicklesworthstone/destructive_command_guard
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.2.10
Choose a head ref
  • 19 commits
  • 31 files changed
  • 3 contributors

Commits on Jan 15, 2026

  1. refactor: complete telemetry to history rename in test files 

    Update remaining stale "telemetry" references to "history":
- tests/common/db.rs: doc comments, db filename pattern, error messages
- tests/common/fixtures.rs: module doc comments
- tests/history_integration.rs: test function names, temp db filenames

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    6d0bd89 View commit details
    Browse the repository at this point in the history

  2. fix: rename DCG_TELEMETRY_* env vars to DCG_HISTORY_* 

    The history module was renamed from telemetry, but the environment
variable strings still used the old DCG_TELEMETRY_* naming. This
creates inconsistency between the constant names (ENV_HISTORY_*)
and their values (DCG_TELEMETRY_*).

Changes:
- DCG_TELEMETRY_DB → DCG_HISTORY_DB
- DCG_TELEMETRY_DISABLED → DCG_HISTORY_DISABLED
- Updated doc comment in schema.rs
- Updated e2e test script to use new env var name

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    d44bde6 View commit details
    Browse the repository at this point in the history

  3. Fix potential stack overflow in recursive heredoc scanning by limitin… 

    …g depth to 50. Also includes Windows compatibility improvements.
    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    a8f24b0 View commit details
    Browse the repository at this point in the history

  4. Update crates to latest versions and resolve compatibility issues.

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    804e4c5 View commit details
    Browse the repository at this point in the history

  5. Fix deprecated criterion::black_box usage in benchmarks

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    46d1df5 View commit details
    Browse the repository at this point in the history

  6. fix(redaction): Handle quoted secrets with spaces in values 

    Improves secret redaction regex patterns to properly handle quoted
secret values that may contain spaces:

Pattern Changes:
- AWS_SECRET_ACCESS_KEY: Now matches double-quoted, single-quoted,
  or unquoted values using alternation: (?:"[^"]*"|'[^']*'|\S+)
- AZURE_KEY: Same quoting pattern applied
- PASSWORD: Updated to handle quoted passwords with spaces
- SECRET/API_KEY: Updated to handle quoted values

New Test Coverage:
- test_quoted_secrets_redaction() verifies:
  - Double-quoted secrets: AWS_SECRET_ACCESS_KEY="secret with spaces"
  - Single-quoted secrets: AWS_SECRET_ACCESS_KEY='secret with spaces'
  - Unquoted secrets: AWS_SECRET_ACCESS_KEY=secret_no_spaces
  - Quoted passwords: password="my secret password"

Before this fix, commands like:
  export AWS_SECRET_ACCESS_KEY="wJal secret key here"
Would only redact "wJal" leaving "secret key here" exposed in logs.

The raw string literals (r#"..."#) are used to avoid escaping
backslashes in the regex patterns.

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    a04f570 View commit details
    Browse the repository at this point in the history

  7. fix(context): Improve inline interpreter detection to avoid false pos… 

    …itives on echoed commands
    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    3b426b0 View commit details
    Browse the repository at this point in the history

  8. style: Apply cargo fmt to new test

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    4d271ac View commit details
    Browse the repository at this point in the history

  9. fix: improve robustness of xargs regex, simulate limits, and OOM prot… 

    …ection

- Fix xargs trigger regex in heredoc.rs to correctly handle end-of-string matches.
- Fix SimulateLimits initialization in cli.rs to include max_line_bytes.
- Implement max_line_bytes support in simulate.rs to prevent OOM on very long lines during simulation.
    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    77fa5fb View commit details
    Browse the repository at this point in the history

  10. ci: add ACFS checksum dispatch

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    85f8ab1 View commit details
    Browse the repository at this point in the history

  11. fix(heredoc): Fix Tier 1 bypass for inline scripts with attached quot… 

    …es (e.g. bash -c"...")
    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    2890891 View commit details
    Browse the repository at this point in the history

  12. ci: add ACFS checksum update notification workflow

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    46a6c5e View commit details
    Browse the repository at this point in the history

  13. refactor(context): improve inline code detection

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    8d1ce05 View commit details
    Browse the repository at this point in the history

  14. chore: remove duplicate attributes

    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    041f432 View commit details
    Browse the repository at this point in the history

  15. chore: bump version to 0.2.10 

    Release v0.2.10 includes the following changes since v0.2.9:

Fixes:
- fix(heredoc): Fix Tier 1 bypass for inline scripts with attached quotes
- fix(context): Improve inline interpreter detection to avoid false positives
- fix(redaction): Handle quoted secrets with spaces in values
- fix: improve robustness of xargs regex, simulate limits, and OOM protection
- fix: stack overflow prevention in recursive heredoc scanning (depth limit 50)
- fix: rename DCG_TELEMETRY_* env vars to DCG_HISTORY_*

Refactoring:
- refactor(context): improve inline code detection with forward-tracking state machine
- refactor: complete telemetry to history rename in test files

Maintenance:
- chore: remove duplicate attributes
- style: Apply cargo fmt to new test
- Update crates to latest versions and resolve compatibility issues
- Fix deprecated criterion::black_box usage in benchmarks

CI/CD:
- ci: add ACFS checksum dispatch
- ci: add ACFS checksum update notification workflow

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    811bc62 View commit details
    Browse the repository at this point in the history

  16. style: apply cargo fmt to fix formatting issues 

    Fix trailing whitespace and formatting inconsistencies in:
- src/cli.rs
- src/context.rs
- src/evaluator.rs
- src/history/schema.rs
- src/simulate.rs

This resolves the CI formatting check failure for the v0.2.10 release.

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    ce4abb7 View commit details
    Browse the repository at this point in the history

  17. feat: implement telemetry pruning command 

    - Add prune_older_than and prune_to_size to HistoryDb
- Add 'prune' subcommand to CLI
- Add integration tests for pruning
    @Dicklesworthstone
    Dicklesworthstone committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    06c6ea7 View commit details
    Browse the repository at this point in the history

  18. fix: resolve clippy errors for release v0.2.10 

    - src/simulate.rs: Move helper functions (read_line_bounded,
  consume_until_newline) before test module to fix items_after_test_module error
- src/simulate.rs: Use map_or instead of if let/else for option handling
- src/history/schema.rs: Add #[allow] attributes for intentional casts
- src/history/schema.rs: Add missing # Errors doc section to prune_older_than_dry_run
- Minor formatting fixes in cli.rs, context.rs, and test files

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    f8c982e View commit details
    Browse the repository at this point in the history

  19. style: fix trailing whitespace and extra blank lines 

    - src/simulate.rs: Remove extra trailing blank lines
- tests/repro_normalization_bypass.rs: Fix trailing whitespace

Co-Authored-By: Claude Opus 4.5 <[email protected]>
    @Dicklesworthstone @claude
    Dicklesworthstone and claude committed Jan 15, 2026
    Configuration menu
    Copy the full SHA
    eb31003 View commit details
    Browse the repository at this point in the history
Loading