@djordje-stojanovic/sigmaskills 0.16.2 → 0.16.4

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to [Sigmaskills](https://github.com/Djordje-Stojanovic/Sigma
 
 ## [Unreleased]
 
+## [0.16.4] — 2026-10-23
+
+### Fixed
+
+- `sigmadeeplook`: a small zip-based document can no longer eat gigabytes. A 600 KB `.docx` with a 600 MB `docProps/core.xml` took 7.1 GB in the properties reader; a part over 256 MB, or over 16 MB and more than 200 times its packed size, now reads as empty and is flagged `TRUNCATED` (peak 409 MB on the same file). The same limit covers EPUB, OpenDocument and the `--page` pptx reader.
+- `sigmadeeplook`: the XML entity guards looked only at the first 200 KB (`parse_xml`) and 1 MB (`xml_entity_danger`) of a file, so a long comment before the DOCTYPE hid a billion-laughs declaration. They now read the whole part. Property parts of office, EPUB and OpenDocument files refuse a declared entity too.
+- `sigmadeeplook`: a tool's timeout now ends the whole tool, not only the first process. On Windows a tool behind a `.cmd` shim (diec on a truncated `.exe`) kept running at 100 % CPU and held the output pipe, so the look never returned. `dl_core.run_tree` kills the process tree (`taskkill /T`, a process group elsewhere); the look returns at the limit with a `TIMEOUT` flag.
+- `sigmafinanceman` company models run on hosts where FRED does not answer. FRED timed out on every read from three Linux hosts, so every DCF, LBO and comps run failed after two minutes of retries. The 10-year rate now gets one 15-second FRED try, then comes from the Yahoo ^TNX chart (the source column names which one). A test fakes the FRED timeout.
+- `sigmafinanceman` `references/masters.md`: the Musk solar quote now stops where the source sentence goes on (no added full stop), and the two Horowitz "calculus" quotes cite the opening of chapter 4, not the section "The Struggle". `references/strategy.md`: the private equity playbook adds buyout lines (debt against EBITDA, the three sources of gain, the exit multiple, fees), next to the venture lines.
+
+## [0.16.3] — 2026-10-23
+
+### Changed
+
+- `sigmafinanceman` carries the investors' knowledge. `references/masters.md` holds ten verbatim, sourced quotes and the core principles of 14 investors and operators (Musk, Buffett, Huang, Ackman, Munger, Jobs, Altman, Bezos, Zuckerberg, Druckenmiller, Horowitz, Leone, Thiel, Andreessen). `references/strategy.md` merges them into one nine-step method for any investment, names where the masters disagree and how the method decides, and gives a playbook per kind (growth and dividend stocks, index funds, macro and trading, private equity and venture, real estate, crypto, a rented-out asset such as GPUs, reselling, cars, buying a business). The question round reads the method first, and `finman.py --principles "Buffett P1,Munger P5"` names the applied principles in the workbook (Method sheet), the deck, the page and the report. A test checks that every quote has a source and a link, and that the skill links both files.
+
 ## [0.16.2] — 2026-10-22
 
 ### Changed
@@ -422,7 +438,9 @@ Ship high-rigor, installable agent skills (not apps): full-repo audits, performa
 | 2026-08-11 | `5dab832` | Add CHANGELOG and mark v0.1.0 as the first Sigmaskills release |
 | 2026-08-11 | `124a666` | Polish v0.1.0 docs for multi-host install and use |
 
-[Unreleased]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.16.2...HEAD
+[Unreleased]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.16.4...HEAD
+[0.16.4]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.16.3...v0.16.4
+[0.16.3]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.16.2...v0.16.3
 [0.16.2]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.16.1...v0.16.2
 [0.16.1]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.16.0...v0.16.1
 [0.16.0]: https://github.com/Djordje-Stojanovic/Sigmaskills/compare/v0.15.2...v0.16.0

package/README.md

@@ -6,7 +6,7 @@ Portable [Agent Skills](https://agentskills.io/) that install once and run on **
 
 | | |
 |---|---|
-| **Release** | [**v0.16.2**](https://github.com/Djordje-Stojanovic/Sigmaskills/releases/tag/v0.16.2) |
+| **Release** | [**v0.16.4**](https://github.com/Djordje-Stojanovic/Sigmaskills/releases/tag/v0.16.4) |
 | **Changelog** | [CHANGELOG.md](CHANGELOG.md) |
 | **License** | [MIT](LICENSE) |
 | **Spec** | [agentskills.io](https://agentskills.io/) |

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "name": "sigmaskills",
-  "version": "0.16.2",
+  "version": "0.16.4",
   "description": "Portable Agent Skills monorepo and first-party Sigma Installer",
   "skills": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djordje-stojanovic/sigmaskills",
-  "version": "0.16.2",
+  "version": "0.16.4",
   "description": "Portable Agent Skills monorepo and first-party Sigma Installer",
   "type": "module",
   "license": "MIT",