ac0ed3b7f6
docs(credit): attribute #953 fix to Terry Li (@terry-li-hm) via #1041/#1130 ( #1131 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: Terry Li <12233004+terry-li-hm@users.noreply.github.com >
2026-09-12 19:00:11 -07:00
6db8e94abc
fix(github): qualifier-only or empty topics are clean no-results, not ERROR ( #953 ) ( #1130 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-09-12 11:32:36 -07:00
488ab5c3b0
fix(verify): run the pytest suite instead of unittest discover ( #1120 )
2026-09-12 09:52:00 -07:00
586ba1deac
fix(reddit): clamp engagement before log10 so downvoted posts don't crash ranking ( #1119 )
2026-09-12 09:51:54 -07:00
6c0080454e
fix(cookies): anchor Safari cookie host matching to the domain ( #1118 )
2026-09-12 09:51:49 -07:00
eeb3d5a496
fix(grok): parse CLI JSON output so X search is not empty ( #1051 ) ( #1057 )
2026-09-12 09:51:43 -07:00
c53374a8c0
fix(instagram): unwrap user reels media envelopes ( #1042 )
...
Co-authored-by: Bo Zhang <187063395+Tethys0@users.noreply.github.com >
2026-09-12 09:51:37 -07:00
a5abaa2e06
fix(github): bound qualifier-only topic fragments in errors and logs so fanout cannot spam them ( #954 ) ( #1039 )
2026-09-12 09:51:28 -07:00
e6d2d51f7b
fix(transcribe): send the skill User-Agent in _post_audio so Groq's Cloudflare edge stops returning 403 ( #983 ) ( #1036 )
2026-09-12 09:51:22 -07:00
78218a88f4
chore: normalize line endings to LF via .gitattributes ( #1032 )
...
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-09-12 09:51:16 -07:00
63b27c6d41
fix(xurl): recognize the ~/.xurl/auth.yml directory layout ( #1027 )
2026-09-12 09:51:11 -07:00
5af840d40e
fix(grok): decode CLI stdout as UTF-8, not the OS locale codec ( #1025 )
2026-09-12 09:51:06 -07:00
a9e81da08a
fix(doctor): retry rate-limited probes instead of reporting a false outage ( #971 )
2026-09-12 09:51:01 -07:00
3181c957c1
fix(github): strip wrapped search qualifiers from topics ( #952 ) ( #970 )
2026-09-12 09:50:55 -07:00
f931f147d4
docs: correct HERMES_SETUP.md install path (scanner blocks --force) ( #962 )
...
Co-authored-by: technicianofthesacred <technicianofthesacred@users.noreply.github.com >
2026-09-12 09:50:50 -07:00
8e82edac73
fix(arxiv): preserve adapter-valid papers during normalization ( #947 )
2026-09-12 09:50:44 -07:00
8475c8552a
LinkedIn source: honor the date window, follow the cursor, and signal partial results ( #939 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-09-12 09:50:39 -07:00
90deb7c2ec
fix(setup): surface ScrapeCreators /profile 5xx instead of already-linked ( #925 )
...
Co-authored-by: arimu1 <19286898+arimu1@users.noreply.github.com >
2026-09-12 09:50:33 -07:00
fec2d82434
fix: accept an API root in *_BASE_URL overrides ( #918 )
...
Co-authored-by: Opgeek-1 <finance@tomo.inc >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-09-12 09:50:28 -07:00
27151e7fe1
fix: entity-miss demotion is inert on topics without a distinctive entity ( #888 )
...
Co-authored-by: Trevin Chow <trevin@trevinchow.com >
2026-09-12 09:50:23 -07:00
a5de3878c5
Added: Docs option: quick first run for /last30days ( #832 )
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-09-12 09:50:17 -07:00
175bc785f9
fix(env): strip trailing inline comments from unquoted .env values ( #1121 )
2026-09-12 08:27:27 -07:00
4cecd4ea32
fix(release): bring mcp/manifest.json into the version lockstep ( #1122 )
2026-09-12 08:27:22 -07:00
1344fb5215
test(backends): isolate the grok off-PATH probe from the real filesystem ( #1123 )
2026-09-12 08:27:17 -07:00
d01a3e0d26
fix(env): treat unsubstituted config templates as unconfigured ( #1126 )
...
Co-authored-by: CommandCodeBot <noreply@commandcode.ai >
2026-09-12 08:27:11 -07:00
ca9d415e66
chore(release): bump version to 3.24.0 ( #1125 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com >
2026-09-09 00:00:26 -07:00
b15e2eb46a
feat(x): X search over the official X API, plus the Grok Bot X connector ( #1124 )
...
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com >
2026-09-08 23:31:23 -07:00
310f0b405d
chore(release): bump version to 3.23.1 ( #1113 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
2026-09-07 19:44:20 -07:00
06acd75570
fix(ci): restore scheduled OSV scanner startup ( #1112 )
...
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
2026-09-07 19:35:19 -07:00
67ffc41cf9
chore(deps): bump trufflesecurity/trufflehog from 3.96.0 to 3.97.1 ( #1107 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Matt Van Horn <mvanhorn@users.noreply.github.com >
2026-09-07 18:53:46 -07:00
fb2ddbe73b
fix(keychain): check presence without requesting passwords ( #1111 )
...
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Alan Livshin <8812633+Comradery64@users.noreply.github.com >
2026-09-07 18:52:19 -07:00
35dd284de8
fix(bluesky): use refresh tokens for expired sessions ( #1065 )
...
Co-authored-by: ming <silverchris@foxmail.com >
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Matt Van Horn <mvanhorn@users.noreply.github.com >
2026-09-07 18:50:53 -07:00
1dbdbcfc0b
fix(planner): honor operator --plan subquery sources at default/deep ( #1093 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: Gustavo Samudio <TheGusishere@users.noreply.github.com >
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Matt Van Horn <mvanhorn@users.noreply.github.com >
2026-09-07 18:46:32 -07:00
3abba4483e
fix: named creator accounts (--ig-creators / --creators) count as first-party provenance ( #1104 )
...
Co-authored-by: khsaurabh <saurabhkh89@gmail.com >
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Matt Van Horn <mvanhorn@users.noreply.github.com >
2026-09-07 18:45:38 -07:00
8caa6d0d38
harden: detected non-static command inside command in run.go ( #1109 )
...
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Matt Van Horn <mvanhorn@users.noreply.github.com >
2026-09-07 18:45:33 -07:00
cfd36bbc74
test: keep Amazon date fixture portable on Windows ( #1080 )
...
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
2026-09-07 18:39:10 -07:00
2527f51944
docs(skill): note config hook ships only with Claude Code plugin install ( #1103 )
...
Co-authored-by: khsaurabh <saurabhkh89@gmail.com >
2026-09-07 18:28:12 -07:00
d248a09896
fix(hooks): use bare CLAUDE_PLUGIN_ROOT in SessionStart ( #1092 )
2026-09-07 18:28:07 -07:00
a46c419a8c
fix(http): drop credential headers on cross-origin redirects ( #1069 )
2026-09-07 18:28:02 -07:00
9f7f87a4bd
docs(skill): correct LAW count in SKILL.md (five -> eleven) ( #1102 )
2026-09-07 18:24:13 -07:00
088559478c
docs: add Validate workflow status badge to README ( #1098 )
2026-09-07 18:24:09 -07:00
81ab133696
chore(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.5.0 to 2.5.1 ( #1079 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-07 18:24:05 -07:00
7a87b5de6f
chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 ( #1105 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-07 18:24:00 -07:00
13d9edc5b3
chore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.9 ( #1106 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-07 18:23:56 -07:00
56ba5ace27
fix(skill): Grok Bot / Cursor agent chat is a hidden-link citation host (LAW 8 detects CURSOR_AGENT) ( #1095 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-09-02 08:33:24 -07:00
1f378527b2
chore(release): bump version to 3.23.0 ( #1091 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-01 10:18:03 -07:00
41fcb4d59d
fix(env): add LAST30DAYS_SKIP_KEYCHAIN so tests can seal the Keychain source (keychain-only port of #1050 ) ( #1090 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: OSideMedia <261988918+OSideMedia@users.noreply.github.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-09-01 10:07:46 -07:00
dc25291fca
fix: continue research after optional X skip (rewrite of #1077 onto extras-host main) ( #1089 )
...
Co-authored-by: Michael Ensor <me@advertisingreportcard.com >
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-09-01 10:07:42 -07:00
7f4e16b954
fix(bird): pass only the vendored client's env surface to the subprocess ( #1072 )
...
_subprocess_env() previously copied the full os.environ into the scan-excluded vendored Node client (#1063 ). Now the child env is an explicit allowlist: platform/runtime vars, Node TLS/proxy/CA config, X session cookies (AUTH_TOKEN/CT0/TWITTER_*), LAST30DAYS_DISABLE_BROWSER_COOKIES, ambient BIRD_* vars, plus injected credentials, with BIRD_DISABLE_BROWSER_COOKIES hard-set to 1. A vendor-drift test guards the allowlist against future bird-search bumps.
2026-09-01 07:51:09 -07:00
23dbee4ca2
fix(youtube): default yt-dlp player_client=android to clear the bot-gate ( #1088 )
...
Port of #1075 rebased onto current main (post-#1087 env.py rewrite).
Default yt-dlp YouTube calls pass player_client=android so search,
transcripts, and comments clear the web bot-gate without cookies or
ScrapeCreators spend. Override or disable with LAST30DAYS_YT_PLAYER_CLIENT
(empty disables; persisted empty values survive load_env_file/get_config).
Token restricted to [A-Za-z0-9_-]+ before the SSH path; injection folds
into an existing youtube: --extractor-args spec so comment_sort survives.
Fixes #1052
Co-authored-by: saurabh <saurabhkagent@gmail.com >
2026-09-01 07:39:00 -07:00
Matt Van Horn