Skip to content

v2.1.0 - Expanded Catalog, In-Process Quality Gate & Staged Scanner

Choose a tag to compare

View all tags
@kok-o kok-o released this 26 Sep 18:03
· 59 commits to main since this release
v2.1.0
b91128b

ContextOS v2.1.0 - Expanded Catalog, In-Process Quality Gate & Staged Scanner

ContextOS 2.1.0 delivers a major expansion to the open skills catalog, full troubleshooting diagnostics, and pre-commit security governance tools.

What's New in v2.1.0

4 New Industry Catalog Skills

  • security-audit: In-depth vulnerability scanning, SAST/DAST automation, dependency checking, privilege escalation prevention, and SAIF/CIS benchmark mapping.
  • api-design: Deterministic API design guidelines, RESTful contracts, idempotent operations, cursor pagination, rate limiting, and OpenAPI specifications.
  • terraform: Infrastructure as Code (IaC) governance, remote state locking, plan review quality gates, least-privilege provider blocks, and OpenTofu compatibility.
  • ci-cd: GitHub Actions hardening, matrix test workflows, supply chain artifact signing, branch protection rules, and build caching strategies.

Catalog Hardening & Troubleshooting

  • Catalog Diagnostic Guides (TROUBLESHOOTING.md): Added structured troubleshooting guides across all 36 catalog skills covering root causes, concrete code fixes, and verification steps.
  • Design Style Code Implementations (EXAMPLES.md): Added production-ready TypeScript/Tailwind component examples to minimalist-design, brutalist-design, and soft-design.
  • Playwright End-to-End Testing: Enriched testing skill with comprehensive Playwright E2E testing scenarios, fixtures, mock routes, and cross-browser CI configurations.
  • Catalog Sanitation: Removed 13 redundant legacy markdown files across catalog skills to enforce single-source-of-truth standards.

Security & Quality Gate Tooling

  • Staged Git Index Security Scanner (contextos scan): Fast, in-memory scanner inspecting git diff --cached for leaked API secrets, credential patterns, unfinished lazy stubs (// TODO), and task write-scope containment.
  • Isolated Pre-Commit Git Hooks (contextos hook install): Safe hook manager installing isolated ContextOS pre-commit verification blocks without overwriting or interfering with existing user hooks.
  • Quality Gate Engine (contextos gate): Deterministic, in-process drift verification engine checking managed outputs against source skills without disk mutation.
  • GitHub Composite Action (.github/actions/contextos-gate): Security-hardened CI action running from a pinned package version without executing consumer build scripts or npm test.
  • Adapter Compatibility Contracts: Comprehensive specifications and verified test contracts for Cursor, Claude Code, GitHub Copilot, Gemini CLI, Aider, and Zed.
  • Self-Documenting CLI: Updated contextos --help command registry to include scan, hook, recover, and explain.
Assets 2
Loading