🩺 Audit fixes: CLI contracts, config safety, CI consolidation, docs & release status#4

Merged

Labault merged 23 commits into

mainfrom

codex/audit-improvements

Jun 17, 2026

Commits on Jun 17, 2026

🐛 fix: align setup contract and completion
Labault
committed
🐛 fix: make setup file writes safer
Labault
committed
🔧 chore: consolidate brewfiles and add cli smoke tests
Labault
committed
📝 docs: clarify repository architecture and release status
Labault
committed
👷 ci: simplify macos validation workflows
Labault
committed
🐛 fix: resolve script paths from repository root
Labault
committed
🐛 fix(cli): handle --help in mac setup command

Labault
and
claude
committed
🐛 fix(cli): handle --help in mac doctor command

Labault
and
claude
committed
🐛 fix(cli): make mac doctor exit non-zero on failed checks

Labault
and
claude
committed
🐛 fix(setup): write setup log to an absolute path

Labault
and
claude
committed
♻️ refactor(git): rely on managed include for init.defaultBranch

Labault
and
claude
committed
🐛 fix(zsh): stop regenerating completion during mac setup

Labault
and
claude
committed
✨ feat(uninstall): cover all managed files in --remove-config

Labault
and
claude
committed
♻️ refactor(profiles): validate profiles dynamically

Labault
and
claude
committed
👷 ci: lint commits with commitlint instead of check-commit.sh

Labault
and
claude
committed
👷 ci: consolidate macOS workflows into a single gate

Labault
and
claude
committed
♻️ refactor(hardening): scope the forbidden-tool denylist to profiles

Labault
and
claude
committed
🐛 fix(zsh): do not fail setup when completion is not active yet

Labault
and
claude
committed
📝 docs: point Brewfile edit instructions at profiles/full/Brewfile

Labault
and
claude
committed
👷 ci: reject committed local artifacts in the repository

Labault
and
claude
committed
🔧 chore(deps): declare @gitmoji/gitmoji-regex as a direct dependency

Labault
and
claude
committed
📝 docs(release): reconcile version metadata to a pre-1.0 state

Labault
and
claude
committed
📝 docs: deduplicate Homebrew install/update boilerplate in tool docs

Labault
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

🩺 Audit fixes: CLI contracts, config safety, CI consolidation, docs & release status#4

🩺 Audit fixes: CLI contracts, config safety, CI consolidation, docs & release status#4
Labault merged 23 commits into
mainfrom
codex/audit-improvements

Commits on Jun 17, 2026

🐛 fix: align setup contract and completion

🐛 fix: make setup file writes safer

🔧 chore: consolidate brewfiles and add cli smoke tests

📝 docs: clarify repository architecture and release status

👷 ci: simplify macos validation workflows

🐛 fix: resolve script paths from repository root

🐛 fix(cli): handle --help in mac setup command

🐛 fix(cli): handle --help in mac doctor command

🐛 fix(cli): make mac doctor exit non-zero on failed checks

🐛 fix(setup): write setup log to an absolute path

♻️ refactor(git): rely on managed include for init.defaultBranch

🐛 fix(zsh): stop regenerating completion during mac setup

✨ feat(uninstall): cover all managed files in --remove-config

♻️ refactor(profiles): validate profiles dynamically

👷 ci: lint commits with commitlint instead of check-commit.sh

👷 ci: consolidate macOS workflows into a single gate

♻️ refactor(hardening): scope the forbidden-tool denylist to profiles

🐛 fix(zsh): do not fail setup when completion is not active yet

📝 docs: point Brewfile edit instructions at profiles/full/Brewfile

👷 ci: reject committed local artifacts in the repository

🔧 chore(deps): declare @gitmoji/gitmoji-regex as a direct dependency

📝 docs(release): reconcile version metadata to a pre-1.0 state

📝 docs: deduplicate Homebrew install/update boilerplate in tool docs