Release/0.2.0#11
Merged
Merged
Conversation
Add normalizeGuardText() before injection/keyword matching. inj-010 and inj-011 now expect_block in adversarial corpus.
Add extract-changelog-section.mjs and softprops/action-gh-release after npm publish. Document automated release in npm-publishing guide.
Assert strict injection blocks stream path via request.blocked audit. Sync docs to 155 tests / 37 files.
Align local-testing, contributing, and onboarding skills with the 31-check demo tour, homoglyph evasion cases, and release changelog extract. Update cursor-skills.md, docs README, and publish workflow README.
Refresh the docs landing page with v0.2.0 highlights, demo CTA, logo, custom theme styling, search, and nav. Add stable anchor for the full feature demo example.
Scope CHANGELOG rule to library files instead of alwaysApply. Make Aether personas manual @-only. Auto-load contributing and docs skills via paths; keep onboarding and local-testing as explicit /slash skills. Document trigger matrix in cursor-skills.md.
Add pre-commit-quality-gate rule and paired skills for CI gate, release versioning, end-to-end ship-release, and review-before-merge (Bugbot). Inspired by banal repo patterns; document in cursor-skills.md.
github-actions
Bot
added
documentation
Clarify normalizeGuardText as internal in CHANGELOG, document VitePress and Cursor DX in 0.2.0 notes, drop pinned version from docs footer, and set GitHub Release title to shieldkit v<tag>.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
[0.2.0] - 2026-06-18
Added
normalizeGuardText()— strips zero-width characters and folds common Cyrillic homoglyphs before injection/keyword guards.scripts/extract-changelog-section.mjs+softprops/action-gh-release).shieldStreamTexttests (strict injection block on stream path, homoglyph block, audit lifecycle).scripts/extract-changelog-section.mjs(release notes extraction).Changed
inj-010(homoglyph) andinj-011(zero-width) adversarial fixtures nowexpect_blockin all modes.npm run demo— 9-section tour with 31 automated checks (PASS/FAIL + audit evidence); homoglyph/zero-width/stream evasion blocks.examples/agent-with-tools.ts— Ollama smoke with audit evidence andexit 1on failure.scripts/publish.sh,scripts/publish.ps1) — note tag push creates npm release + GitHub Release via CI.normalizeGuardText()before pattern matching.npm run demoquick start, npm provenance badge.Security