sinapse-ai 1.20.0 → 1.20.1

package/.sinapse-ai/core/atlas/render-html.js

@@ -162,17 +162,19 @@ renderDiagrams('s-model'); // initial visible tab
 
 function tbl(cols,rows){return '<table><thead><tr>'+cols.map(c=>'<th>'+c+'</th>').join('')+'</tr></thead><tbody>'+
   rows.map(r=>'<tr>'+r.map(c=>'<td>'+c+'</td>').join('')+'</tr>').join('')+'</tbody></table>';}
-const code=s=>'<code>'+(s||'')+'</code>';
-const sev=s=>'<span class="tag'+(/NON-NEGOTIABLE/.test(s)?' nn':'')+'">'+s+'</span>';
+// Data cells come from atlas-data.json (framework registry, mutable via PR) — escape before innerHTML.
+const esc=s=>String(s).replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
+const code=s=>'<code>'+esc(s||'')+'</code>';
+const sev=s=>'<span class="tag'+(/NON-NEGOTIABLE/.test(s)?' nn':'')+'">'+esc(s)+'</span>';
 
 document.getElementById('t-constitution').innerHTML=tbl(['Art.','Principle','Severity'],
-  D.articles.map(a=>[a.number,a.title,sev(a.severity)]));
+  D.articles.map(a=>[esc(a.number),esc(a.title),sev(a.severity)]));
 
 document.getElementById('t-squads').innerHTML=tbl(['Squad','Name','Agents','Workflows','Orchestrators'],
-  D.squads.map(s=>[code(s.id),s.name,s.agents,s.workflows,(s.orqx||[]).map(code).join(' ')||'—']));
+  D.squads.map(s=>[code(s.id),esc(s.name),esc(s.agents),esc(s.workflows),(s.orqx||[]).map(code).join(' ')||'—']));
 
 document.getElementById('t-rules').innerHTML=tbl(['Rule','Governs'],
-  D.rules.map(r=>[code(r.id),r.title]));
+  D.rules.map(r=>[code(r.id),esc(r.title)]));
 
 // Workflows (search + source filter)
 function renderWorkflows(){
@@ -185,14 +187,14 @@ function renderWorkflows(){
   });
   document.getElementById('c-workflows').textContent=rows.length+' of '+D.workflows.length;
   document.getElementById('t-workflows').innerHTML=tbl(['Workflow','Source','Type','Description'],
-    rows.map(w=>[code(w.id),w.squad?code(w.squad):'<span class="tag">framework</span>',w.type||'—',w.description||'—']));
+    rows.map(w=>[code(w.id),w.squad?code(w.squad):'<span class="tag">framework</span>',esc(w.type||'—'),esc(w.description||'—')]));
 }
 ['q-workflows','f-workflows-src'].forEach(id=>document.getElementById(id).addEventListener('input',renderWorkflows));
 
 // Agents (search + squad filter + orqx toggle)
 const squads=[...new Set(D.agents.map(a=>a.squad))].sort();
 const sel=document.getElementById('f-agents-squad');
-sel.innerHTML='<option value="">all squads</option>'+squads.map(s=>'<option>'+s+'</option>').join('');
+sel.innerHTML='<option value="">all squads</option>'+squads.map(s=>'<option>'+esc(s)+'</option>').join('');
 function renderAgents(){
   const q=(document.getElementById('q-agents').value||'').toLowerCase();
   const sq=sel.value; const onlyOrqx=document.getElementById('f-agents-orqx').checked;
@@ -202,7 +204,7 @@ function renderAgents(){
   });
   document.getElementById('c-agents').textContent=rows.length+' of '+D.agents.length;
   document.getElementById('t-agents').innerHTML=tbl(['Agent','Persona','Squad','Role',''],
-    rows.map(a=>[code(a.id),a.persona||'—',code(a.squad),a.role||a.title||'—',a.isOrqx?'<span class="tag nn">orqx</span>':'']));
+    rows.map(a=>[code(a.id),esc(a.persona||'—'),code(a.squad),esc(a.role||a.title||'—'),a.isOrqx?'<span class="tag nn">orqx</span>':'']));
 }
 ['q-agents','f-agents-orqx'].forEach(id=>document.getElementById(id).addEventListener('input',renderAgents));
 sel.addEventListener('change',renderAgents);

package/.sinapse-ai/core/registry/service-registry.json

@@ -1,7 +1,7 @@
 {
   "version": "1.0.0",
   "generated": "2026-06-19T20:32:21.238Z",
-  "totalWorkers": 373,
+  "totalWorkers": 372,
   "categories": {
     "checklist": {
       "count": 16,
@@ -24,7 +24,7 @@
       "description": "JavaScript utility scripts"
     },
     "task": {
-      "count": 215,
+      "count": 214,
       "subcategories": [
         "analysis",
         "creation",
@@ -10933,36 +10933,6 @@
         "addedVersion": "1.0.0"
       }
     },
-    {
-      "id": "waves",
-      "name": "Waves",
-      "description": "<!-- Story: WIS-4 - Wave Analysis Engine -->",
-      "category": "task",
-      "subcategory": "general",
-      "inputs": [],
-      "outputs": [],
-      "tags": [
-        "task",
-        "general",
-        "waves"
-      ],
-      "path": ".sinapse-ai/development/tasks/waves.md",
-      "taskFormat": "TASK-FORMAT-V1",
-      "executorTypes": [
-        "Agent",
-        "Worker"
-      ],
-      "performance": {
-        "avgDuration": "1m",
-        "cacheable": false,
-        "parallelizable": false
-      },
-      "agents": [],
-      "metadata": {
-        "source": "development",
-        "addedVersion": "1.0.0"
-      }
-    },
     {
       "id": "yolo-toggle",
       "name": "Yolo Toggle",