@mmerterden/multi-agent-pipeline 20.27.0 → 20.27.1

package/CHANGELOG.md

@@ -16,6 +16,13 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [20.27.1] - 2026-10-19
+
+### Fixed
+
+- The pre-commit secret scan reads a file moved without a change as a rename, not as new content. A diff limited to the new path cannot see the rename, so a plain `git mv` of a file holding long generated identifiers was blocked as a high-entropy secret. Exact renames are skipped; a rename with edits is still scanned whole.
+- `smoke-learn-transcripts.sh` reads its fixture with a window wide enough for any checkout; the fixture keeps the date of the checkout that wrote it and the miner reads the last 30 days by default.
+
 ## [20.27.0] - 2026-10-16
 
 ### Added

package/docs/facts.json

@@ -1,7 +1,7 @@
 {
   "$comment": "Generated by pipeline/scripts/gen-facts.mjs. Do not hand-edit: the site reads this, and a number edited here instead of at its source is the drift this file removes.",
-  "generatedAt": "2026-10-16",
-  "version": "20.27.0",
+  "generatedAt": "2026-10-19",
+  "version": "20.27.1",
   "phaseSchema": 2,
   "phases": [
     {
@@ -40,10 +40,10 @@
   "skillCountAll": 229,
   "agentCount": 10,
   "hosts": ["Claude Code", "Codex CLI", "Copilot CLI"],
-  "toolCount": 197,
+  "toolCount": 198,
   "toolCategories": {
     "ios": 42,
-    "web": 35,
+    "web": 36,
     "android": 33,
     "store": 30,
     "vphone": 10,
@@ -62,5 +62,5 @@
     "ui": 1
   },
   "pluginSkillCount": 253,
-  "toolkitVersion": "3.22.3"
+  "toolkitVersion": "3.23.0"
 }

package/manifest.json

@@ -1,12 +1,12 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.27.0",
-  "commit": "ecae7ee9cdf384be989d519a17cdf8b89c594d38",
-  "generatedAt": "2026-10-16T06:02:08.689Z",
+  "version": "20.27.1",
+  "commit": "8040d90c26b39f701acce97d9c1c94185b49e852",
+  "generatedAt": "2026-10-19T19:12:28.483Z",
   "algorithm": "sha256",
   "fileCount": 1402,
   "files": {
-    "CHANGELOG.md": "849337446408fe3fadb526d34e45c6a774b62d0b7aa88333a31d0c9aac41ac44",
+    "CHANGELOG.md": "aa756c7dbf9a21e5bbaaf7a833485b361b357cfd872376fa433c1f28003a1ed0",
     "LICENSE": "8d8c51aaf1e1538b180c69965fa038db71be86798cc3e26a143bebfefe16a43e",
     "README.md": "7727e831f6421adeeaf2e34d9aeb8a6a11ad7ee5b166e09ade43d70704c27cfb",
     "README.tr.md": "ce7978c53c733cf359c21423fbfed640f20644584ff153aaab473958fdccfdc3",
@@ -34,7 +34,7 @@
     "docs/best-practices.md": "f8b75b0d38b5896a6a852bb30a1edddeb24dab8b5b7b1d9313290e1241c72024",
     "docs/ecosystem.md": "9b23467fca1bcdc0275e7eccd3428c36181ba9f8cd866778159edd7d65a4d563",
     "docs/engineering.md": "550528cd47c7d2c921729c68d0782a00ac8e77a4bdfec479f6749f9c3235d188",
-    "docs/facts.json": "9b8a5d8dd40cb543146acc627afc0b456f9f4d2b8273509c3d4cca7cf00b7010",
+    "docs/facts.json": "0422d0ff7dd0d13badae514ba07c891bf43683b528adcd17d37b917296565cc8",
     "docs/features.md": "d5fcbe3acc05e054efdf0c43ddfc1a82ef3d463f349ea2ec5b4842fa26d9d49d",
     "docs/performance.md": "bbf2f3922c25dcba0c1a9e69ef420e3871a729af5b35009a49b48a5d3c5cd151",
     "docs/recovery-guide.md": "59a8f1b66b34cb9ff5507b3d54dac3b9915e184aa044d9c758d18cac818d510e",
@@ -66,7 +66,7 @@
     "install/templates/multi-agent-autopilot-awake.plist.template": "ddd25c76c56fcbb38a89de8e35637372d70ace993d6bc487a88ca9cfb702fe1f",
     "install/templates/multi-agent-autopilot.plist.template": "122c8a61cd927edd99375d6e3da40f1d42bcceed5b6641785c8b28bb930bc77e",
     "install/unattended-profile-legacy.json": "f52e86b998956f09ad306b1735a6c10b58580d7082d8a55665a4c6bb15c3aa1f",
-    "package.json": "8bc7f4948cd5ba3a59a7a38116ea6f6d116f73907d916555a92ce228364a465e",
+    "package.json": "2c191cdf79ea666e46e28fc4221a47904c8f9c73e1f715113164571dd7cb8989",
     "pipeline/agents/android-architect.md": "11fb74543cb0ebcf9525ca6654fe95d53da7229e0bf4a1149b31fd9005abc453",
     "pipeline/agents/backend-architect.md": "b02a606c301e4714131aed70ae6d16eeb77fbc819a001e2752cff2488d4246de",
     "pipeline/agents/bulk-reader.md": "6597052cd7d205bac2b1c7633f5232fe1a40730664a913b8eb77efd5a786dc25",
@@ -649,7 +649,7 @@
     "pipeline/scripts/plugin-refresh.sh": "687a33199ad963616ab537e32210ec8c967e76ecc42f494ee8a1dc9fe947fc30",
     "pipeline/scripts/pr-request.mjs": "e6f4ded2366c6599bb345b3011ecc771e13b8a1561afa4c9a50bca4edff17456",
     "pipeline/scripts/pr-timeline.mjs": "6a12df12a72f3440796569d3264edb0b3e105be6e4f2e26e958a5a0da340d05c",
-    "pipeline/scripts/pre-commit-check.sh": "46081c47891c46e4aa96d7df58222d06d95087bce98bb2f543fb15a63322a52a",
+    "pipeline/scripts/pre-commit-check.sh": "6012f0d4f55ef9e6ace2e9cf7e4a85cabce89c08ca5e2c6f625cd8e28bf449c1",
     "pipeline/scripts/pre-push-check.sh": "6e9761fed96e3bae111ccd554b44e35917517c6a8ae5dae7236fe8c69e7fe122",
     "pipeline/scripts/probe-evidence-capability.sh": "ac74252eed6b773fdbc7ec475a63606925f1ba7b5e7c6f911329f46fd920eae7",
     "pipeline/scripts/probe-store-key.mjs": "b46dfcf444c95d0bb61de36823314945dacaaacb8f35841d153dcfcde8e4df1a",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.27.0",
+  "version": "20.27.1",
   "description": "6-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/scripts/pre-commit-check.sh

@@ -520,12 +520,19 @@ fi
 # NUL-delimited so filenames with spaces are scanned (a space-split loop would
 # silently skip them - a secret false-negative).
 
+# A file moved without a change adds no line that is not already in history,
+# but a diff limited to its new path cannot see the rename and reads every line
+# as added. Only exact (R100) renames are skipped; a rename with edits is still
+# scanned whole.
+UNCHANGED_RENAMES=$(git diff --cached -M --diff-filter=R --name-status 2>/dev/null | awk -F'\t' '$1 == "R100" { print $3 }')
+
 # Already-staged content - the common case, and the only source when nothing
 # in the triggering command itself runs `git add`.
 while IFS= read -r -d '' file; do
   [ -z "$file" ] && continue
   [ ! -f "$file" ] && continue
   is_binary "$file" && continue
+  [ -n "$UNCHANGED_RENAMES" ] && printf '%s\n' "$UNCHANGED_RENAMES" | grep -qxF -- "$file" && continue
   content=$(git diff --cached -- "$file" 2>/dev/null | grep "^+" | grep -v "^+++" || true)
   queue_file "$file" "$content"
 done < <(git diff --cached --name-only -z 2>/dev/null)