Martin Vogel 8951647d3e Fix remaining install/update gaps + in-memory zip extraction ...

Install command:
- Add cbm_kill_other_instances() to kill stale MCP servers
- Add cbm_macos_adhoc_sign() to sign binary if placed unsigned

Update command:
- Replace skills-only reinstall with full cbm_install_agent_configs()
- Replace external unzip with cbm_extract_binary_from_zip() via zlib

Refactor: extract 10-agent config loop into cbm_install_agent_configs()
called by both install and update.

New: cbm_extract_binary_from_zip() — in-memory zip extraction with
stored + deflate support, path traversal rejection, bounds checks.
4 unit tests. Smoke: add install.ps1 E2E for Windows.

2026-03-24 23:14:33 +01:00

..

hooks

Add time-bomb + MCP file read audit, tracked pre-commit hooks

2026-03-21 16:43:48 +01:00

build.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

clean.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

clone-bench-repos.sh

v0.5.1: Fix C/C++/CUDA/GLSL function extraction, add config linker and tests

2026-03-06 17:50:18 +01:00

embed-frontend.sh

Fix Windows build: add zip pkg, portable embed (od replaces xxd)

2026-03-19 10:59:14 +01:00

env.sh

Fix production build errors, add build step to Docker test infra

2026-03-18 17:15:46 +01:00

lint.sh

Use cc (Apple Clang) on macOS, gcc on Linux — unified CI/local parity

2026-03-18 13:08:33 +01:00

security-allowlist.txt

Add install scripts, CI pre-signing, download E2E smoke tests

2026-03-24 23:14:33 +01:00

security-audit.sh

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

security-fuzz-random.sh

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

security-fuzz.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-install.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-network.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-strings.sh

Fix security audit false positives in CI

2026-03-20 18:47:55 +01:00

security-ui.sh

Robust UI audit: skip inline URL scan on dist/, keep structural checks

2026-03-20 20:56:52 +01:00

security-vendored.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

setup-windows.ps1

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

setup.sh

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

smoke-test.sh

Fix remaining install/update gaps + in-memory zip extraction

2026-03-24 23:14:33 +01:00

test_mcp_rapid_init.py

fix(mcp): address QA round 1 findings

2026-03-21 12:37:28 -05:00

test.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

vendor-grammar.sh

Add Go LSP hybrid type resolver, config store, and supporting infrastructure

2026-03-12 13:26:13 +01:00

vendored-checksums.txt

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00