faf-cli 7.13.0 → 7.13.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -2
- package/dist/cli.js +279 -279
- package/dist/cli.js.map +28 -28
- package/dist/core/safe-write.d.ts +97 -0
- package/dist/core/slots.d.ts +2 -2
- package/dist/core/typed-none.d.ts +1 -1
- package/dist/detect/assemble.d.ts +1 -1
- package/dist/index.js +156 -156
- package/dist/index.js.map +24 -24
- package/package.json +1 -1
- package/project.faf +3 -3
package/README.md
CHANGED
|
@@ -132,7 +132,16 @@ faf memory etch "a durable fact" --id my-fact
|
|
|
132
132
|
faf memory show
|
|
133
133
|
```
|
|
134
134
|
|
|
135
|
-
### What's New in v7.13.
|
|
135
|
+
### What's New in v7.13.1 — The Co-Author Edition
|
|
136
|
+
|
|
137
|
+
**A security patch: faf-cli's detection no longer follows a link out of your project, so a hostile repo can't pull a file like `~/.aws/credentials` into project.faf or your AI's context.**
|
|
138
|
+
|
|
139
|
+
- **Detection reads stay inside the project.** A README.md, package.json or any other repo file that links outside the project is treated as absent. Links inside the project still work.
|
|
140
|
+
- **`faf git` clones with symlinks off**, and never reads a link's path as a file's content.
|
|
141
|
+
- **`faf cards` reads `agent.fafa` safely**: a link out of its folder is refused.
|
|
142
|
+
- **`slotignored` is shown as `slotignored`**, never N/A.
|
|
143
|
+
|
|
144
|
+
#### v7.13.0 — the Edition release
|
|
136
145
|
|
|
137
146
|
**You and your AI co-author project.faf — AI fills the tech facts from your repo, you write the 6Ws — and faf-cli only touches what it wrote: links can't lead it outside your project, a failed write keeps the original, and your comments, values and notes stay as you left them.**
|
|
138
147
|
|
|
@@ -141,7 +150,7 @@ faf memory show
|
|
|
141
150
|
- **If it's a fact, faf fills the slot.** A typed `None` or `N/A` is an empty slot, and the app-type decides which slots count.
|
|
142
151
|
- `faf auto` fills a tech slot only from a repo fact. With no fact, the slot stays empty; only `project.type` falls back to `library`, and says so on its line.
|
|
143
152
|
- With no fact, your words stay in a slot the app-type uses, and that slot scores 0 until filled.
|
|
144
|
-
- In a slot the app-type leaves out, `faf auto` writes `slotignored
|
|
153
|
+
- In a slot the app-type leaves out, `faf auto` writes `slotignored`: not required, not scored.
|
|
145
154
|
- The 6Ws stay yours: faf never replaces your words there, and `faf go` asks for the empty ones.
|
|
146
155
|
- **`faf ai enhance` is retired.** project.faf isn't enhanced: tech slots come from repo facts, and the 6Ws come from you.
|
|
147
156
|
- **Links and encodings are checked first.** faf refuses, in one line, to write:
|