Skip to content

v2.1.2

Choose a tag to compare

View all tags
@sprngr sprngr released this 14 Aug 01:25
· 12 commits to main since this release
v2.1.2
fc88f2a

Rubber Duck v2.1.2 — Patch Rollup

Changed

  • duck-tape skill metadata bumped to v2.1.2 in source and regenerated artifact.
  • Claude hook install guidance now supports repo-local .claude/settings.local.json (recommended) or .claude/settings.json.
  • Claude troubleshooting guidance now validates both settings targets.
  • Quick start now includes manifest-based update command: ./scripts/rubber-duck.sh sync --project.
  • Edited skills aligned to project version v2.1.2 (duck-tape, duck-adapt, quack).

Fixed

  • Clarified Claude hook setup docs to match repo-local config workflow.
  • Replaced distributed src/skills/... references with .agents/skills/... in duck-tape hooks/docs and duck-adapt guidance.
  • Harness artifact renderer now expands {{include: skill-snippets/...}} in agent bodies, removing leaked include tokens in rendered duckling dist artifacts.
  • Quack boundaries now render safety carve-out snippet correctly (no leaked include token in built skill output).

Security

  • Opencode duck-tape transcript snapshots now redact recursively before writing .duck-tape/-transcript.json, preventing raw secret leakage.
  • Expanded redaction coverage across shell, PowerShell, and opencode plugin extract paths:
  • password/passwd/pwd/secret/token/client_secret/private_key key-value forms
  • credentialed connection URIs (scheme://user:pass@host)
  • secret-like environment assignments (...PASSWORD=..., ...TOKEN=..., etc.)
  • baseline PII shapes (email, phone, SSN)

Full Changelog: v2.1.1...v2.1.2

Assets 2
Loading