Skip to content

v0.4.19

Choose a tag to compare

@kevin-hartman kevin-hartman released this 20 Oct 06:54
· 29 commits to main since this release

Stop the dsn-inline-credentials canon + gate message from self-tripping the corporate postgres-connection-string secret scanner.

  • skills/consort/agents/navigator.md: the canon illustrating the forbidden inline-credential DSN pattern no longer embeds a contiguous scheme://user:pass@host literal. This file ships into every scaffold's .claude/**/navigator.md, so the literal previously rode in the scaffold commit and blocked a fresh project's first push.
  • consort/architecture/test-smell-clean.ts: same reword in the gate's user-facing message + a comment (the message is bundled into dist and written to agent-log.jsonl when the smell fires, which snapshots commit).
  • Detector regex and the credential-less teaching DSNs are unchanged; the rule is intact.
  • Added a consort-hard-rules recurrence guard so the canon/message can't re-introduce a literal.

Consort-only; pins scm-utils 0.3.4 (no repoint). Full BDD suite green (4625 passed).