Ramnique Singh 8cf1335577 refactor(x): make capability activation a discriminated union; fence the loadSkill path ... The design rule "app/always capabilities are never model-loadable" was held only by two arrays happening to be separate. Now it is structural: CapabilityDefinition is a union — ModelCapability (requires catalog title/summary and lazy content, cannot carry a fragment) vs EagerCapability (requires promptFragment, never enters the catalog) — and DiskSkill is typed as ModelCapability, making the disk trust boundary a compile-time fact instead of a comment. The kitchen is fenced along with the menu: catalog building and skill-tool attachment go through pure, fenced helpers (buildCatalogFromEntries / toolNamesFromEntries), and the boundary test now feeds a real eager capability through a mixed list and asserts both the catalog hides it and the tool path refuses its tools. Golden snapshots unchanged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-10 08:38:51 +05:30
..
cli	fix(security): close & (background) command-executor allowlist bypass	2026-05-10 19:35:03 +00:00
docs	feat(oauth): switch Google OAuth from PKCE to authorization code flow with client secret	2026-04-10 00:43:34 +05:30
experimental	Fix/prebuilt cards updates (#263)	2025-09-16 15:29:48 +05:30
python-sdk	update py-sdk docs	2025-08-19 13:35:10 +05:30
rowboat	fix: make dev script cross-platform for Windows PowerShell	2026-02-19 13:07:07 +05:30
rowboatx	wip-electron	2026-01-16 12:05:33 +05:30
x	refactor(x): make capability activation a discriminated union; fence the loadSkill path	2026-07-10 08:38:51 +05:30