John Smith b191ee49cb fix(167): use os.path.realpath consistently for path resolution in plan_pre_flight ...

- Add 'import os' to import block
- Replace Path(raw).resolve(strict=True) with Path(os.path.realpath(raw))
- Replace Path.cwd().resolve() with Path(os.path.realpath(os.getcwd()))

Both sides now route through os.path.realpath() so symlink resolution is
deterministic and both sides share the same lexical+symlink semantics.
The downstream is_file() guard still rejects non-existent targets.

2026-08-10 16:29:02 -04:00

..

audit

fix(scripts): address SonarCloud annotations on PR #188

2026-08-09 15:46:34 -04:00

issue_loop

feat(issue-loop): autonomous ralph-mode loop driver (issue-loop-sdd) [2/2]

2026-08-10 03:42:59 -04:00

scanners

fix(scripts): move # nosonar marker to SAME line as S3516/S2083 violation (#149)

2026-08-09 04:40:28 -04:00

templates/plugin

feat(scripts): add new_plugin.py scaffolder

2026-08-03 22:35:13 -04:00

__init__.py

feat(freshness): #36 freshness_index prototype + tests

2026-08-06 07:58:26 -04:00

_allowlist.py

fix(drift_detector): allowlist session_id to close path traversal (#95)

2026-08-06 16:18:29 -04:00

_http.py

fix(164): cap GitHub API response body at 50 MB to prevent memory exhaustion (#201)

2026-08-10 15:46:04 -04:00

catalog_updater.py

fix(158): validate catalog.yaml root is a dict after yaml.load in catalog_updater (#195)

2026-08-10 13:24:19 -04:00

counterfactual_diffs_spike.py

chore(scripts,tests): address 14 Python code-smell findings (#146)

2026-08-09 00:47:52 -04:00

dev-setup.sh

fix(scripts): resolve SonarCloud findings (path traversal + bash test)

2026-08-08 21:32:38 -04:00

drift_detector.py

fix(160): validate HERETEK_SESSION_STATE_DIR is under safe root (#197)

2026-08-10 14:09:17 -04:00

freshness_index.py

fix(freshness): address I2 + I3 reviewer findings

2026-08-06 08:02:55 -04:00

freshness_tokens.py

feat(tokens): #46 freshness tokens system + install wiring

2026-08-06 10:33:10 -04:00

generate_marketplace.py

fix(scripts): suppress 7 pythonsecurity S8707/S8705 false positives (#145)

2026-08-09 04:36:31 -04:00

heretek_cli.py

chore: minor polish bundle from v3.5 final review (closes #173)

2026-08-09 12:56:59 -04:00

issue_drafter.py

fix(164): cap GitHub API response body at 50 MB to prevent memory exhaustion (#201)

2026-08-10 15:46:04 -04:00

lookup_gate.py

fix(scripts): move # nosonar marker to SAME line as S3516/S2083 violation (#149)

2026-08-09 04:40:28 -04:00

model_profile_loader.py

fix(profiles): split demote test + newlines + collision guard + marker integration

2026-08-06 09:47:59 -04:00

new_plugin.py

feat(scripts): add new_plugin.py scaffolder

2026-08-03 22:35:13 -04:00

plan_pre_flight.py

fix(167): use os.path.realpath consistently for path resolution in plan_pre_flight

2026-08-10 16:29:02 -04:00

refresh_pins.py

fix(164): cap GitHub API response body at 50 MB to prevent memory exhaustion (#201)

2026-08-10 15:46:04 -04:00

rlm_fast_gate_spike.py

fix(scripts): move # nosonar marker to SAME line as S3516/S2083 violation (#149)

2026-08-09 04:40:28 -04:00

security_scan.py

fix(166): document git clone URL allowlist security contract (#202)

2026-08-10 16:20:40 -04:00

stale_dep_intercept.py

fix(scripts): move # nosonar marker to SAME line as S3516/S2083 violation (#149)

2026-08-09 04:40:28 -04:00

staleness_metric_spike.py

chore(scripts,tests): address 14 Python code-smell findings (#146)

2026-08-09 00:47:52 -04:00

suppression.py

fix(scripts): v1.x P1 batch — env var, shallow clone, coverage, §8 features

2026-08-07 23:01:01 -04:00

svok_provenance_spike.py

chore(scripts,tests): address 14 Python code-smell findings (#146)

2026-08-09 00:47:52 -04:00

validate.py

feat(scripts): add validate.py with JSON Schema enforcement

2026-08-03 22:21:03 -04:00