Skip to content

v1.4.0 — Composite metadata, per-skill CLI allowlists, credential hardening

Latest
Latest

Choose a tag to compare

View all tags
@kyle-srp kyle-srp released this 07 Aug 02:43
· 1 commit to main since this release
v1.4.0-release
ef6d715
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Production release cut from main (ef6d715). All 12 skills republished to ClawHub.

Highlights

  • Composite category-resolution metadata — keyword-driven composites (market-entry, competitor-analysis, pricing-analysis, listing-audit, daily-radar, review-deepdive, report, opportunity-scan) now expose meta.resolved_category_path under a single documented key across all commands. An empty top-level categories section paired with a non-null resolved path is unambiguous fallback resolution, no longer misread as missing data.
  • Keyword ABA out-of-window dates — a status=empty with resolvedDate=null is now documented as an out-of-window date (distinct from a resolved snapshot lacking the keyword) and is retriable by reselecting a recent in-window week.
  • Per-skill CLI command allowlists — every amazon-* skill bundles scripts/allowed-commands.json listing exactly the subcommands its SKILL.md declares; the shared CLI refuses anything else with a structured COMMAND_NOT_ALLOWED error before any API request (no credits). Prose promise → mechanical, fail-closed guarantee.
  • Credential-source hardening — removed the skill-directory config.json fallback and the legacy APICLAW_API_KEY / ~/.apiclaw/config.json sources; requests to untrusted hosts withhold the Bearer key entirely; credential files created 0600 and review-fallback temp dirs use mktemp -d.
  • Capabilities & Data Flow declarations added to all 12 skills (exact network host, bundled CLI subcommands, local files, what is/isn't sent, credit-cost confirmation).
  • Accurate credit reporting for composite commands (run-scoped tracker sums every internal call).

Skills republished

amazon-analysis 1.1.13 · amazon-competitor-intelligence-monitor 1.1.9 · amazon-daily-market-radar 1.0.9 · amazon-keyword-traffic-analysis 0.1.6 · amazon-listing-audit-pro 1.0.8 · amazon-market-entry-analyzer 1.0.9 · amazon-market-trend-scanner 1.0.8 · amazon-opportunity-discoverer 1.0.9 · amazon-pricing-command-center 1.1.8 · amazon-review-intelligence-extractor 1.0.9 · web-extract 0.2.4 · zoodata 1.1.9

Full changelog: CHANGELOG.md

Assets 2
Loading