release: 5.2.0 — quality overhaul, growth-roster trim, hook + tooling… - #2
Merged
Conversation
… hardening Framework-wide audit-and-improve pass driven by two deep-research audits (defect + forward-looking improvement), plus the root .claude/ local-install sync. BREAKING: 7 growth agents removed (merged into 4) — update direct references: content-architect + idea-machine + calendar-builder -> content-strategist content-writer -> content-creator growth-hacker + conversion-optimizer -> growth-engineer performance-analyst -> marketing-analyst (resolves collision with performance-optimizer) Highlights: - Security: fixed permission-denied-logger shell injection; narrowed over-broad permission-guard Tier-0 regexes (benign process substitution, the no-verify flag inside messages, scoped recursive deletes); OWASP-2021 mapped table + no CVE-from-memory; bounded secret-scan. - Review system: shared _review-finding-contract.md (severity + 0-100 + parseable footer) across 12 skills; few-shot exemplars; detect-stack-first gates. - Debate system: shared _debate-protocol.md + full verdict lattice. - Quality/process: config-derived thresholds; delivery/verification/contract fixes. - Stack specialists: 2026 version targets + modernization (WP Interactivity API, WooCommerce Blocks, n8n AI nodes, Velite/Fumadocs). - Tooling: package.json (npm run check), eval.yml CI gate, sync-local-install.js; fixed inject-principles/bump-version/check-references; removed trim-agent-descriptions. - Counts synced to 32 skills / 44 agents / 36 commands across all manifests. Verified: eval 6/6, check-references 0 problems, INDEX in sync, /audit-self clean (no discipline regressions; docs/planning/audit-2026-06-02.md). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
… hardening
Framework-wide audit-and-improve pass driven by two deep-research audits (defect + forward-looking improvement), plus the root .claude/ local-install sync.
BREAKING: 7 growth agents removed (merged into 4) — update direct references:
content-architect + idea-machine + calendar-builder -> content-strategist
content-writer -> content-creator
growth-hacker + conversion-optimizer -> growth-engineer
performance-analyst -> marketing-analyst (resolves collision with performance-optimizer)
Highlights:
Verified: eval 6/6, check-references 0 problems, INDEX in sync, /audit-self clean (no discipline regressions; docs/planning/audit-2026-06-02.md).