Garry Tan 9b65041d1c fix(security): learnings input validation + cross-project trust gate ... Three fixes to the learnings system: 1. Input validation in gstack-learnings-log: type must be from allowed list, key must be alphanumeric, confidence must be 1-10 integer, source must be from allowed list. Prevents injection via malformed fields. 2. Prompt injection defense: insight field checked against 10 instruction-like patterns (ignore previous, system:, override, etc.). Rejected with clear error message. 3. Cross-project trust gate in gstack-learnings-search: AI-generated learnings from other projects are filtered out. Only user-stated learnings cross project boundaries. Prevents silent prompt injection across codebases. Also adds trusted field (true for user-stated source, false for AI-generated) to enable the trust gate at read time. Closes #841 Co-Authored-By: Ziad Al Sharif <Ziadstr@users.noreply.github.com>		2026-04-13 09:36:33 -07:00
..
chrome-cdp	fix: security audit round 2 (v0.13.4.0) (#640)	2026-03-29 22:46:33 -06:00
dev-setup	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
dev-teardown	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
gstack-analytics	feat: opt-in usage telemetry + community intelligence platform (v0.8.6) (#210)	2026-03-19 17:21:05 -07:00
gstack-builder-profile	feat: relationship closing — office-hours adapts to repeat users (v0.16.2.0) (#937)	2026-04-08 22:21:28 -10:00
gstack-community-dashboard	fix: Supabase telemetry security lockdown (v0.11.16.0) (#460)	2026-03-24 15:01:31 -07:00
gstack-config	feat: composable skills — INVOKE_SKILL resolver + factoring infrastructure (v0.13.7.0) (#644)	2026-03-29 23:35:17 -06:00
gstack-diff-scope	feat: Review Army — parallel specialist reviewers for /review (v0.14.3.0) (#692)	2026-03-30 22:07:50 -06:00
gstack-extension	feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)	2026-03-26 11:15:24 -06:00
gstack-global-discover.ts	refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941)	2026-04-10 17:13:15 -10:00
gstack-learnings-log	fix(security): learnings input validation + cross-project trust gate	2026-04-13 09:36:33 -07:00
gstack-learnings-search	fix(security): learnings input validation + cross-project trust gate	2026-04-13 09:36:33 -07:00
gstack-open-url	feat: community wave — 7 fixes, relink, sidebar Write, discoverability (v0.13.5.0) (#641)	2026-03-29 21:43:36 -06:00
gstack-patch-names	fix: ship idempotency + skill prefix name patching (v0.14.3.0) (#693)	2026-03-30 22:25:46 -06:00
gstack-platform-detect	feat: declarative multi-host platform + OpenCode, Slate, Cursor, OpenClaw (v0.15.5.0) (#793)	2026-04-04 15:32:20 -07:00
gstack-relink	fix: top-level skill dirs so Claude discovers unprefixed names (#761)	2026-04-02 18:34:00 -07:00
gstack-repo-mode	feat: test coverage catalog — shared audit across plan/ship/review (v0.10.1.0) (#259)	2026-03-22 11:28:16 -07:00
gstack-review-log	fix: community PRs + security hardening + E2E stability (v0.12.7.0) (#552)	2026-03-26 23:21:27 -06:00
gstack-review-read	fix: gstack-slug bash compatibility — source to eval (#354)	2026-03-22 21:02:01 -07:00
gstack-session-update	feat: team-friendly gstack install mode (v0.15.7.0) (#809)	2026-04-05 23:49:03 -07:00
gstack-settings-hook	fix(security): shell injection in bin/ scripts — use env vars instead of interpolation	2026-04-13 09:33:01 -07:00
gstack-slug	fix: gstack-slug produces deterministic slugs across sessions (#897)	2026-04-07 15:42:13 -10:00
gstack-specialist-stats	feat: adaptive gating + cross-review dedup for review army (v0.15.2.0) (#760)	2026-04-04 22:46:21 -07:00
gstack-team-init	fix(security): shell injection in bin/ scripts — use env vars instead of interpolation	2026-04-13 09:33:01 -07:00
gstack-telemetry-log	fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)	2026-03-28 08:35:24 -06:00
gstack-telemetry-sync	fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)	2026-04-06 00:47:04 -07:00
gstack-timeline-log	feat: Session Intelligence Layer — /checkpoint + /health + context recovery (v0.15.0.0) (#733)	2026-04-01 00:50:42 -06:00
gstack-timeline-read	feat: Session Intelligence Layer — /checkpoint + /health + context recovery (v0.15.0.0) (#733)	2026-04-01 00:50:42 -06:00
gstack-uninstall	feat: team-friendly gstack install mode (v0.15.7.0) (#809)	2026-04-05 23:49:03 -07:00
gstack-update-check	fix: community PRs + security hardening + E2E stability (v0.12.7.0) (#552)	2026-03-26 23:21:27 -06:00