Add TelosNews skill and repository whitelist security

[eeeschwartz]

Summary

This PR adds two new features to the USER directory:

1. TelosNews Personal Skill - Automated news aggregation based on TELOS interests
2. Repository Whitelist Security System - Prevents accidental pushes to unauthorized repos

1. TelosNews Skill

What it does

• Searches for news related to your TELOS topics (AI/economy, community building, sustainability, etc.)
• Groups results by topic area
• Posts formatted results to Notion with source URLs
• Based on last week's TELOS news prompt request

Location

• USER/SKILLS/TelosNews/ - Main skill files
• ~/.claude/skills/TelosNews - Symlink for PAI discovery

Usage

# Invoke the skill
"find TELOS news"
"news about my interests"

Implementation

• Reads TELOS files to extract interests
• Uses WebSearch for recent news (last 7 days)
• Formats results grouped by topic
• Creates Notion page via MCP tools

2. Repository Whitelist Security

What it does

Prevents accidentally pushing code or creating issues/PRs in repositories you don't own.

Components

• REPOWHITELIST.md - Centralized whitelist configuration
• CheckRepoWhitelist.ts - Validation tool (in CORE/Tools)
• Git pre-push hook - Blocks unauthorized git push
• REPOSECURITY.md - Complete documentation

Protection

• ✅ git push to USER repo (pre-push hook installed)
• 📝 git push to other repos (hook template provided)
• 📝 gh issue create (shell wrapper documented)
• 📝 gh pr create (shell wrapper documented)

Usage

# Normal operation (whitelisted)
git push origin main  # ✅ Works

# Blocked operation
git push to-unwhitelisted-repo  # ❌ Blocked with clear error

# Emergency override
ALLOW_PUSH=1 git push origin main  # ⚠️ Bypasses check

Commits

1. 1ed7ae4 - Add USER/SKILLS directory with TelosNews personal skill
2. 58e2555 - Add repository whitelist security system

Testing

TelosNews:

• Skill files created and structured properly
• Symlink created for PAI discovery
• Test run successfully posted to Notion
• Found 37 articles across 5 topic areas

Repository Whitelist:

• Whitelist checker validates repos correctly
• Pre-push hook installed and executable
• Error messages clear and actionable
• Emergency override works

Next Steps

After merge:

1. Add gh wrapper function to ~/.zshrc
2. Install pre-push hook in other repos
3. Run TelosNews skill weekly for updates

Related

• Addresses accidental push prevention requirement
• Establishes pattern for personal skills in USER directory

[eeeschwartz]

Closing - this is personal customization work for eeeschwartz/PAI fork, not upstream contribution