feat!: close 7 feature-toggle gaps (user-scope-only, clean-break major version)#244

Merged

dean0x merged 24 commits into

mainfrom

feat/close-feature-toggle-gaps

Jun 16, 2026

Commits on Jun 15, 2026

chore(dream): add PF-013

dean0x
and
Devflow Dream
committed
chore(dream): refresh hooks knowledge

dean0x
and
Devflow Dream
committed

Commits on Jun 16, 2026

feat(hooks): gate decisions/curation on config OR sentinel (dual-signal)

dean0x
and
claude
committed
refactor(cli): remove dead working-memory-disabled sentinel

dean0x
and
claude
committed
feat(hud)!: hard-remove statusLine from settings.json on --disable

dean0x
and
claude
committed
refactor(post-install): extract pure deny-list functions + fix non-array bug - Fix mergeDenyList: Array.isArray guard so non-array deny neither throws nor spreads chars - Add DEVFLOW_HISTORICAL_DEN…
dean0x
committed
feat(init): dedicated atomic security step + manifest security field + --security flag - Add ManifestData.features.security ('user'|'managed'|'none'|undefined) wired into readManifest builder so it…
dean0x
committed
feat(cli)!: add devflow security command + full deny-list lifecycle - New devflow security command (src/cli/commands/security.ts): --status: reports none/user/managed/both + entry count derived fro…
dean0x
committed
feat(cli): add devflow safe-delete toggle command
dean0x
committed
fix(init): drain pending-turns queue on --no-memory
dean0x
committed
feat(cli): sync manifest features on toggle + surface security/safe-delete in list
dean0x
committed
feat(cli): sync manifest features on toggle + surface security/safe-delete in list Manifest sync (Phase E1): - ambient --enable/--disable, decisions --enable/--disable, hud --enable/--disable, memo…
dean0x
committed
fix: address self-review issues Atomic settings writes (invariant: never-truncate-on-crash for the file Claude Code reads every turn): - init.ts security step: the managed-success strip and the 'no…
dean0x
committed
fix(hud): make --disable self-healing - strip lingering statusLine even when already disabled
dean0x
committed
chore(dream): refresh hooks, cli-rules, decisions knowledge

dean0x
and
Devflow Dream
committed
test(migrations): add coverage for purge-dead-working-memory-sentinel-v1

dean0x
and
claude
committed
fix(safe-delete,list): consistency and exhaustive-switch fixes (batch-D)

dean0x
and
claude
committed
test(uninstall): lock down security-removal decision logic with pure helper + tests

dean0x
and
claude
committed
refactor(security): consolidate SecurityMode + security helpers (batch-E-foundation)

dean0x
and
claude
committed
fix(security): adopt canonical helpers, fix partial-failure crash, and fix no-flag UX

dean0x
and
claude
committed
fix(init): plug declined-sudo security gap and exhaust SecurityMode (batch-F-init)

dean0x
and
claude
committed
test: cover applyUserSecurityDenyList, syncManifestFeature, loadTemplateDenyEntries Adds 12 new test cases across init-logic.test.ts and manifest.test.ts to cover the write-path seams introduced by…
dean0x
committed
refactor: replace nested ternary with switch and update stale JSDoc in post-install
dean0x
committed
docs(cli): document security + safe-delete commands and --security init flag Closes the SF15/SF17/SF18 documentation review issues for PR #244: - docs/cli-reference.md: add Security (Deny List) + S…
dean0x
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat!: close 7 feature-toggle gaps (user-scope-only, clean-break major version)#244

feat!: close 7 feature-toggle gaps (user-scope-only, clean-break major version)#244
dean0x merged 24 commits into
mainfrom
feat/close-feature-toggle-gaps

Commits on Jun 15, 2026

chore(dream): add PF-013

chore(dream): refresh hooks knowledge

Commits on Jun 16, 2026

feat(hooks): gate decisions/curation on config OR sentinel (dual-signal)

refactor(cli): remove dead working-memory-disabled sentinel

feat(hud)!: hard-remove statusLine from settings.json on --disable

refactor(post-install): extract pure deny-list functions + fix non-array bug - Fix mergeDenyList: Array.isArray guard so non-array deny neither throws nor spreads chars - Add DEVFLOW_HISTORICAL_DEN…

feat(init): dedicated atomic security step + manifest security field + --security flag - Add ManifestData.features.security ('user'|'managed'|'none'|undefined) wired into readManifest builder so it…

feat(cli)!: add devflow security command + full deny-list lifecycle - New devflow security command (src/cli/commands/security.ts): --status: reports none/user/managed/both + entry count derived fro…

feat(cli): add devflow safe-delete toggle command

fix(init): drain pending-turns queue on --no-memory

feat(cli): sync manifest features on toggle + surface security/safe-delete in list

feat(cli): sync manifest features on toggle + surface security/safe-delete in list Manifest sync (Phase E1): - ambient --enable/--disable, decisions --enable/--disable, hud --enable/--disable, memo…

fix: address self-review issues Atomic settings writes (invariant: never-truncate-on-crash for the file Claude Code reads every turn): - init.ts security step: the managed-success strip and the 'no…

fix(hud): make --disable self-healing - strip lingering statusLine even when already disabled

chore(dream): refresh hooks, cli-rules, decisions knowledge

test(migrations): add coverage for purge-dead-working-memory-sentinel-v1

fix(safe-delete,list): consistency and exhaustive-switch fixes (batch-D)

test(uninstall): lock down security-removal decision logic with pure helper + tests

refactor(security): consolidate SecurityMode + security helpers (batch-E-foundation)

fix(security): adopt canonical helpers, fix partial-failure crash, and fix no-flag UX

fix(init): plug declined-sudo security gap and exhaust SecurityMode (batch-F-init)

test: cover applyUserSecurityDenyList, syncManifestFeature, loadTemplateDenyEntries Adds 12 new test cases across init-logic.test.ts and manifest.test.ts to cover the write-path seams introduced by…

refactor: replace nested ternary with switch and update stale JSDoc in post-install

docs(cli): document security + safe-delete commands and --security init flag Closes the SF15/SF17/SF18 documentation review issues for PR #244: - docs/cli-reference.md: add Security (Deny List) + S…