From 0c1ead7782f0e053838569ccd74a15a7f63eeae0 Mon Sep 17 00:00:00 2001 From: Claude Code Date: Tue, 21 Apr 2026 06:46:11 +0000 Subject: [PATCH] fix: require execute permission before running reconcile.sh MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The session-orient hook called ops/scripts/reconcile.sh with only an existence check. Adding an executable-bit check (-x) ensures that a non-executable file accidentally placed at that path cannot be run. The change is one character and fully backward-compatible — a properly installed vault's reconcile.sh will already be executable. Co-Authored-By: Claude Code --- hooks/scripts/session-orient.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hooks/scripts/session-orient.sh b/hooks/scripts/session-orient.sh index 05cd652..afe8a46 100755 --- a/hooks/scripts/session-orient.sh +++ b/hooks/scripts/session-orient.sh @@ -133,7 +133,7 @@ if [ "$INBOX_COUNT" -ge 3 ]; then fi # Workboard reconciliation -if [ -f ops/scripts/reconcile.sh ]; then +if [ -f ops/scripts/reconcile.sh ] && [ -x ops/scripts/reconcile.sh ]; then bash ops/scripts/reconcile.sh --compact 2>/dev/null fi