Claude's Code

bdf7e6105/18/2026, 19:58:5405/18, 19:58nadeem-mac/esauhr

fix(pdf): trim cell padding across all table builders so signature stays bottom-pinned Nadeem 2026-05-18: 'reduce the cell padding to save space so the signature box in the bottom appears properly' Five layout helpers trimmed in src/lib/formCore.js: • drawSectionHeader h 9 → 7.5 text 11pt → 10.5pt (-2mm) • drawSingleRow min 8.5 → 7 per-line 4.5 → 4.2 base 2.5 → 2 text 11pt → 10.5pt (-1.5mm/row) • drawTwoColTable min 7 → 6 per-line 4.3 → 4 base 2.5 → 2 text 9.5pt → 9pt (-1mm/row) • drawLabelValueTable label-pad 3.4 → 2.8 per-line 4.6 → 4.2 bottom-pad 3 → 2 text 10.5pt → 10pt (-2mm/row) • drawPolicyBullets lineH 3.8 → 3.4 font 8.5 → 8 gap 0.5 → 0.3 (-0.4mm/line) Cumulative saving on a typical annual-leave PDF (5-row EMPLOYEE INFO + 5-row LEAVE DETAILS + SUBSTITUTE row + 3-bullet POLICY): • 10 rows × ~1mm = 10mm • 4 section headers × 2mm = 8mm • 3 policy bullets × 0.4mm = 1mm • Total: ~19mm reclaimed That's enough for the bottom-pinned signature grid (35.4mm) to fit without the sigY clamp ever kicking in for standard cases. The clamp remains as a safety net for unusually long policy lists or rare edge cases. Typography stays balanced — sizes nudged down proportionally with the padding so the form still reads cleanly. No content fidelity lost. Forms are tighter but not cramped.

2a4917a05/18/2026, 19:58:4105/18, 19:58YeIWE/BLP

fix: menu navigation, dashboard charts, public API access - Layout: replace el-menu router attr with manual @select + router.push - Router: add all 9 static child routes (was only 3) - Dashboard: add ECharts with 4 chart panels (orders, revenue, category, users) - Gateway: whitelist public read paths (/product/, /review/, /search/, /promotion/seckill/list) - Auth: public product browsing works without token, admin endpoints still protected menu fix: removing router attribute prevents full-page reloads that lose JWT token. Now using @select handler with explicit router.push() for stable navigation.

95cfc8305/18/2026, 19:58:2905/18, 19:58gregtago/henri

feat: déplacer 'À venir' dans la colonne du jour (au lieu de Suggestions) Plus cohérent : la colonne du milieu liste ce qui se passe dans le temps (aujourd'hui + à venir replié), la colonne Suggestions à gauche reste dédiée aux propositions à ajouter à Ma journée du jour. Tailles de texte un peu remontées (13/11px) puisqu'on a plus d'espace dans la colonne centrale (40% vs 20%).

d99a48c05/18/2026, 19:58:2505/18, 19:58lucas-hub-lab/Isa-Lucas

feat: Frühdienst F1 (6:30-15:00) ergänzt Neuer Diensttyp F1 in allen Dienstplan-Selects, Label-Maps, Kalender-Anzeige und KI-Scan-Prompt eingetragen. Badge-Farbe: orange (#fed7aa). Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

095b4e505/18/2026, 19:58:0305/18, 19:58CannObserv/watcher

#162 chore(cr): binding-tree error handling + content-type parity - binding-tree route: catch ValueError (no primary binding) → 404 partial - binding-tree route: catch ServerError/AuthError/ConnectError → 503 partial - watched_item_form: pass content_types from route, loop in template (adds file) - watched_item_create_submit: validate default_content_type against ContentType enum - tests: cover ValueError + ServerError paths on binding-tree route - tests: cover all-content-types in WI-create form, invalid-ct flash on submit Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

1a67f4b05/18/2026, 19:57:5405/18, 19:57imperialmediaweb-bit/bcagent

fix(parse): multi-sheet + multi-header-row scan + UI diagnostic la eșec Userul s-a lovit de 'Fișierul nu conține date valide' pe XLS real. Parserul vechi presupunea header pe rândul 1 al primei foi. Acum: 1. Scanează TOATE foile din workbook 2. Pentru fiecare foaie, încearcă rândurile 0-5 ca posibil header 3. Pentru fiecare candidat, calculează cât de bine se mapează la {date, agent, producer, client, volume, value} 4. Alege candidatul cu cele mai multe rânduri parsabile (date e obligatoriu) 5. Substring fuzzy match tightened: cere ≥4 chars pe ambele părți + 60% overlap când aliasul include header-ul. Previne 'Doc' ↔ 'data document'. Cazuri suportate (testate): - Header pe rândul 3 cu titlu + rând gol înainte ✓ - Date în a doua/treia foaie (prima are doar note) ✓ - Format Saga cu 13 coloane: detectează corect Data emiterii / Reprezentant / Partener / Valoare ✓ - Header invalid → UI afișează sheets + sample 5 rânduri + top candidați UI Dashboard: când rows=0, hero-ul nu mai e gol — arată: - Lista de foi din fișier - Primele 5 rânduri raw (debug) - Top candidați cu coloanele detectate - Apel la utilizator să trimită screenshot Regresii: 23/23 teste vechi încă trec.

30748a705/18/2026, 19:56:5305/18, 19:56FlaxenComa/contextGraph

Anexo §9 con el código fuente comentado para cumplir la rúbrica literal El enunciado oficial pide "Scripts utilizados, comentados" dentro del PDF. Añado §9 con el contenido íntegro de scrapping.py, obtainTriplets.py, contextGraph.py, ask.py y visualize.py como bloques de código Python. Reemplazos colaterales de Unicode en obtainTriplets.py para que xelatex no se queje al renderizar el código: - "cantaor↔guitarrista" -> "cantaor<->guitarrista" (en el prompt sistema) - "%d triplets → %s" -> "%d triplets -> %s" (en un log.info) PDF final: 991KB con ambas imágenes embebidas (pipeline + grafo) y el anexo completo. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

9b1f62305/18/2026, 19:56:5305/18, 19:56Danzers99/ShyftProd

Round 6c: Per-agent 'today' pills + Phynet-aware diff labels Phynet's "I want to know when they complete the course" signal turns out to live in the existing daily-diff engine — when a roster snapshot from today shows shyftoffPct=100 and yesterday's shows <100, that IS a Foundations completion event. The plumbing was there; this round surfaces it where it matters: on the agent card. • New src/utils/todayMovement.js — flattens the multi-category dailyDiff result into a Map<sid, Array<{kind,label,tone}>> so the team-roster cards can light up the agents who moved today. Significance order: production > foundations > ready > bg > status > added > new-issue. 9 tests cover ordering, multiple movements per SID, defensive null handling, and the Foundations-completion happy path. • TeamRosterView / AgentCard — accept a `movements` prop and render up to 2 green pills (e.g. "✓ Foundations completed today", "✓ BG cleared today") above the CIP status string. Pills only render when daily-diff has ≥2 days of history. • ProductionReadinessChecker: - todayMovements useMemo on top of the dailyDiff, - passed into TeamRosterView. - Daily-diff rollup section now relabels for Phynet: "Finished ShyftOff certification" → "Finished Foundations", and the Litmos-only categories (gotCredentials, completedLitmos) are hidden when campaign.key === "phynet". Effect for the user: upload a fresh roster CSV daily. The day after an agent crosses 100% on Foundations, their card shows a green pill — and the rollup section says "✓ Finished Foundations · N" with the agents listed. 678 → 687 tests pass. Build 389.75 kB → 114.11 kB gzip. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

62aa30305/18/2026, 19:56:5305/18, 19:56dallals/konaclaw

docs(stt): add SMOKE.md with 8 pre-merge gates (mlx-whisper) Reflects the as-shipped implementation post-pivot. Gates: engine smoke, first-use model download, warm call, permission denied, empty audio, append behavior, long audio, engine unavailable. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

3e5120205/18/2026, 19:56:5305/18, 19:56robert-dinero/bot-lash-designer

chore: initial commit — Bot Studio Lash Projeto derivado do bot-barbeiro, adaptado para estúdios de lash designer. Portas isoladas para coexistir na mesma VM: Express 3003, WAHA 3011, nginx 8444. Co-Authored-By: Claude Opus 4.7 <[email protected]>

ad71e3105/18/2026, 19:56:5205/18, 19:56home-assistant/core

prusalink: add sd_ready, farm_mode, and status_connect binary sensors (#169310) Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

d14317305/18/2026, 19:56:5205/18, 19:56XeldarAlz/FFXIV-DomanMahjongSolver

fix(plugin-dalamud): latch most-recent opp discarder for chi/pon inference The v0.1.0.2 MeldTracker.ObserveSnapshot compared discard counts to "previous tick", but opponents discard several ticks BEFORE we click chi/pon — their discard fires, the prompt sits visible for seconds, then we click. By the time the closed hand shrinks by 2, lastDiscardCounts already matches the post-discard count, so FindIncrementingOpponentSeat returns -1 and inference never fires. After the first chi/pon in a hand melds=0 forever, hints/auto-play pause until next hand. Reported live by the developer on v0.1.0.2 ("hints work, auto-play won't fire after a chi/pon"). The fix latches pendingOppDiscardSeat the moment an opp's count increments and holds it across the prompt window until either the closed-hand-shrink consumes it (chi/pon/minkan) or ObserveWall resets it on hand boundary. Two new regression tests pin the realistic timing (opp discards on tick N, we click on tick N+k) and the consumption semantics (second call needs its own fresh opp discard). Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

358aced05/18/2026, 19:56:5205/18, 19:56shrawansapre/options-advisor

feat: fix share image capture + add hover preview, round mobile table edges - Switch html-to-image → html2canvas-pro (canvas renderer, no SVG/foreignObject blank image bug) - Use onclone callback to reposition snapshot element during capture; no DOM flicker - Add hover preview on Download image button (desktop ≥900px only) — clones snapshot at 55% scale - Remove circle border from share trigger button - Round mobile comparison table corners (r-xl) including ≤600px breakpoint - Add date alongside time in mobile comparison header Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

46ea2cb05/18/2026, 19:56:5105/18, 19:56lucastomasferrari-cell/PASE

feat(herramientas): hub con 4 cards + modal grande embebido Pedido Lucas: "menu Herramientas en sidebar, cuadros con cada herramienta, click → ventana popup donde entras a la funcion". Nuevo: - Pantalla /herramientas (HerramientasHub.tsx): grilla de cards con Importar, Lector MP, Configurar dashboards, Blindaje. Hover lift + border accent. - Click en card → modal 95vw x 92vh con la herramienta embebida. Cierra con X o click fuera. - Cada herramienta se carga lazy (no descarga el chunk hasta que abris el modal). Suspense fallback con loader. - Solo aparecen cards de herramientas con permiso del user. Cambios sidebar: - Section "Herramientas" ahora tiene 3 items: Equipo, Contador/IVA, "Mas herramientas" (-> /herramientas hub). - Blindaje SACADO del sidebar — vive solo en el hub ahora. - (Importar y Lector MP nunca estuvieron en sidebar, solo accesibles via tour. Ahora ganan visibilidad en el hub.) Permisos: - tienePermiso('herramientas_hub') = true si tiene acceso a AL MENOS UNA de las 4 herramientas (importar, lector_mp, ajustes_dashboards, blindaje). - Las rutas standalone (/herramientas/importar, etc.) siguen existiendo con sus propios gates para compat con tour y bookmarks. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

4474f6005/18/2026, 19:56:5105/18, 19:56Aymeric22-coder/fynix

feat: persistance recommandations « Fait » (Supabase) L'état « ✓ Fait » des cartes Recommandations était jusqu'ici en state session local — perdu au rechargement. Désormais persisté côté Supabase (table recos_done) avec optimistic update et rollback en cas d'erreur. INFRA : - Migration 030_recos_done (+ DOWN) : table recos_done avec RLS owner-only, UNIQUE (user_id, reco_key), undone_at NULL = actif. À APPLIQUER MANUELLEMENT dans Supabase Studio avant le déploiement (la CLI db push n'est pas configurée — cf. project_fynix memo). - types/database.types.ts : ajout RecoDone + RecoDoneInsert. API : - app/api/recos/done/route.ts (GET + POST avec validation Zod). GET → { recoKeys: string[] } actives (undone_at IS NULL). POST { recoKey, done: true } → upsert (re-active si déjà existant). POST { recoKey, done: false } → update undone_at = now() (historique conservé, pas de DELETE pour pouvoir retracer les recos déjà faites). - Réutilise withAuth + RLS Supabase pour l'isolation par user. UI : - hooks/use-recos-done.ts : fetch initial + toggle optimistic avec rollback sur erreur. useRef pour snapshot fiable (StrictMode-safe). - components/analyse/Recommandations.tsx : bouton « Fait » câblé sur hook ; section « Complétées (N) » en accordéon (fermé par défaut) ; boutons disabled pendant loading initial. - Clés stables = reco.id (hardcoded dans lib/analyse — pas de modif côté lib/ requise). TESTS (+14) : - app/api/recos/done/__tests__/route.test.ts (8 tests) : GET / POST done/undone / body Zod invalide / erreurs Supabase. - hooks/__tests__/use-recos-done.test.ts (5 tests) : load initial, optimistic AVANT fetch resolve, rollback HTTP 500, rollback réseau. - vitest.config.ts : scan hooks/**/*.test.ts(x). Vérifs : 977 -> 991 tests OK, tsc silencieux, eslint 0 warning. Co-Authored-By: Claude Opus 4.7 <[email protected]>

b4faa7605/18/2026, 19:56:5105/18, 19:56lolacoraless/aff-corp-growth

feat: pacing 6 meses en todas las secciones del dashboard - PS1: +3 queries (nmv_pacing, reg_pacing, landing_pacing) → M-1 a M-6 acumulado al día D vs cierre total - HTML: calcAvgP() helper + processNmvPacing/processRegPacing/processLandingPacing - projBothCompact() acepta avgP como 4° param; fallback a ratio-pace M-1 si no hay datos - renderNmv, renderReg, renderTraffic: computan avg pacing ratio por canal y lo pasan a las celdas - getPulseMetrics + scCell: Daily Pulse usa avgP de 6 meses para nmv/reg/newAff - queries.md: documenta los 3 nuevos queries y la fórmula pacing Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

6c5d63405/18/2026, 19:56:5105/18, 19:56nice20235/E-commerce

docs: add root README, remove BackEnd-specific readme Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

a58f6e605/18/2026, 19:56:5105/18, 19:56CDishaw-Tech/OfficeQuickTools

Add Tailwind, Inter font, layout components, and homepage grid - Install Tailwind 4 via @tailwindcss/vite and @fontsource/inter - Set output: 'static' for Cloudflare Pages deployment - Add BaseLayout with Inter font, meta tags, and Google Ads TODO placeholder - Add AdPlaceholder (728x90 leaderboard) and TrustBadges components - Add public/_headers with Cloudflare Pages security headers - Replace index.astro with navy/slate homepage grid across 4 tool categories Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

f5f26a505/18/2026, 19:56:5105/18, 19:56raulgoncalvz/quiniela-mundial-2026

feat: show password in admin user list after creation or reset Passwords are kept in local state (session only) and shown with a copy button next to each user. Also saved when the admin resets a password via "Cambiar". Co-Authored-By: Claude Opus 4.7 <[email protected]>

47b532905/18/2026, 19:56:5105/18, 19:56osvaldoandrade/codeq

chore(docs): remove Java, Node.js, and Python integration guides (#602) These per-language integration docs were tied to the Java, Python, and JavaScript/TypeScript SDKs that have been removed as part of the "Go via gRPC only" simplification. With those SDKs gone, the integration guides became orphans and are deleted here. go-integration.md is retained because Go is now the only supported SDK. Cross-reference cleanup in docs/integrations/README.md and other indexes is handled in a separate unit. Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

d39893305/18/2026, 19:56:5005/18, 19:56AB-lab113/hidering

[HRG] checkpoints: add mainnet anchor at h=2939 (v2.0.0 chain) First HRG mainnet checkpoint since the 16 May 2026 hard fork. Anchors the v2.0.0 chain at block 2939 (hash 5155f6f6...26592, cumul_diff 0x2e096dbbf) to prevent any deep reorg of the post-HF history. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

3ce2a1b05/18/2026, 19:56:5005/18, 19:56zegrt/rupee

M3b: fuel-brand normalisation in MerchantNameUtils Fuel stations post bodies like "IOC OUTLET MUMBAI 12345", "HPCL DELHI PETROL PUMP", "BPCL OUTLET 9876 PUNE" — each variant carries a location and outlet code suffix. Without normalisation, a user who set "always trust IOC = Fuel" got the rule to fire on only the exact merchant they categorised first. Every other outlet of the same brand surfaced as a new "Unnamed" in Inbox. Approach: extend MerchantNameUtils.clean() with a fuel-brand step that returns the bare brand name when a recognised token is present. Six brands covered today: IOC / IOCL / INDIAN OIL → "IOC" HPCL / HINDUSTAN PETROLEUM → "HPCL" BPCL / BHARAT PETROLEUM → "BPCL" SHELL / SHELL PETROL etc → "Shell" NAYARA → "Nayara" ESSAR PETROL / ESSAR FUEL → "Essar" Bare "HP" and "BP" are deliberately omitted — the bare two-letter prefixes collide with too many non-fuel retailers (HP electronics, Bharat-prefixed companies). Power users can add manual trust rules for those. Matching uses padded whole-word comparison rather than bare substring. The cleaned merchant gets uppercased, all non- alphanumerics replaced with spaces, leading + trailing whitespace padded in, then collapsed. We test for " TOKEN " inside the padded string. So "IOC" matches "IOC OUTLET MUMBAI" but does NOT match "BIOCON LIMITED" (regression test pinned). "INDIAN OIL" matches "INDIAN OIL CORP MUMBAI" because the matcher preserves inter-word spaces. normalizeFuelBrand is exposed `internal` so tests can call it directly without round-tripping through clean(); useful for triage if a future change makes a brand match too aggressively. 10 new tests in MerchantNameUtilsTest covering each brand, the BIOCON anti-collision case, and counter-sanity on non-fuel merchants. Existing 9 tests preserved. Why not a dedicated FuelNotificationParser: fuel transactions already come through bank-specific parsers (CRED/ICICI for card swipes, GenericUpi for UPI to fuel pumps) — adding a parser ahead of them would lose maskedDigits + provider hints. The right layer to enforce the "every IOC outlet maps to same merchant" guarantee is the merchant clean-up step, which every parser already calls via toEntityName = MerchantNameUtils.cleanForEntity(...). Build: assembleDebug + testDebugUnitTest both green. 216 tests (+10). Co-Authored-By: Claude Opus 4.7 <[email protected]>

ccde3be05/18/2026, 19:56:5005/18, 19:56AntoineToussaint/pilot

Sidebar footer: always advertise n + Shift-X `n new workspace` already became unconditional in an earlier commit but the user's screenshot still didn't show it — locking in the current behavior with a sanity check by also widening Shift-X. Shift-X (archive workspace) used to gate on has_sessions, which hid the shortcut for the most common case: a read-only review workspace the user wants to dismiss from the inbox after merging or losing interest. Now always available when a workspace is selected; label flips to "archive (kills sessions)" when there's something to kill alongside. Co-Authored-By: Claude Opus 4.7 <[email protected]>

9d58f2405/18/2026, 19:56:5005/18, 19:56umuttnurayy-beep/Scout-Football

Fix: Ana ekran maç kartı pick'i detay sayfasıyla tutarlı hale getirildi useContextPickLabel hook eklendi; HeroCard, MiniHighlightCard, TomorrowFeaturedCard ve MatchRow context-based pick ile güncelleniyor. Preload dedup map sayesinde ek network yükü yok. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

7cea1b205/18/2026, 19:56:5005/18, 19:56Deanrichardf/media-dashboard

Add per-tab city background images; compact CSS Each tab fades to a different landmark photo: Colosseum (Recent Podcasts), Santorini Oia (Older Podcasts), Florence Duomo (Recent Books), Prague Charles Bridge (Older Books), Santorini aerial (Weekly Articles). Replaced animated blobs with Pexels photo + dark overlay. Compacted CSS. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

d2c938005/18/2026, 19:56:5005/18, 19:56edoardope/planet-ecosystem-sim

Initial commit: gene-driven planet ecosystem simulation Cube-sphere 3D voxel planet (Three.js, no build) with: - ~40-gene genome driving full phenotype expression - FSM AI with gene-thresholded states + memory-biased decisions - Spatial memory (~384 zones per animal) with adaptivity-driven learning - Reproductive isolation + automatic species clustering & lineage tracking - Live inspector UI (state/genome/brain tabs), analytics panel, food web Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

8ab919005/18/2026, 19:56:5005/18, 19:56CapinCrack/lemon-business-mvp

Build complete 6-screen Path A claim flow Screens 1-6: Profile Preview → Edit Profile → Account Creation → Verify Ownership → Value Props → Checkout. Includes auto-save draft API route and document upload verification API backed by Supabase Storage. Checkout has a fake Stripe UI with a success state. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

6dc0ab205/18/2026, 19:56:5005/18, 19:56johnsondigitalsystems/loadout

Merge VFP Phase 2 Group C: firearm-form iron-sight optic-picker extension Iron-pick clears stale reticle; reticle picker hidden + sight-type info shown for iron optics; scope/red-dot flows byte-identical. analyze clean; new firearm_form_iron_sights_test + scope_catalog_v2 23/23 (no regression). Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

857ba3705/18/2026, 19:56:5005/18, 19:56marksilvo/spending-assessment

Strip UTF-8 BOM before detecting Nationwide CSV format Co-Authored-By: Claude Opus 4.6 <[email protected]>

95f6e6a05/18/2026, 19:56:5005/18, 19:56Maksim7700/storinka-api

Add JWT-based authentication scaffolding - User entity mapped to users table (role/plan/status enums, BCrypt password, optional Google ID) - UserRepository with findByEmail / existsByEmail / findByGoogleId lookups - AuthService with register/login flows, AuthController exposing POST /api/auth/{register,login} - JwtService (HS256) + JwtAuthenticationFilter wired into stateless SecurityConfig - SecurityConfig permits /api/auth/**, /api/templates/**, /api/vendors/**; everything else requires JWT - Load .env via spring.config.import (Boot's native mechanism — works in Boot 4 where third-party SPI registration did not) - Switch ddl-auto to validate now that an entity matches the schema Co-Authored-By: Claude Opus 4.7 <[email protected]>

2eab34205/18/2026, 19:56:4905/18, 19:56kiuk104/mindmap-project

feat: Google Photos URL 자동 식별 (gphotos link type) - linkIcon('gphotos') = 📷, linkDefault = 'Google Photos' - detectLinkType: 두 패턴 추가 · https://photos.google.com/... · https://photos.app.goo.gl/... (단축 공유 링크) - 링크 모달 type select에 "📷 Google Photos" 옵션 추가, 전용 placeholder - .lbadge.gphotos = #ea4335 (Google 브랜드 빨강) + 흰 글자 Drive 블루, Docs 파스텔 블루, YouTube 빨강과 시각 구분 본문 자동 인식과 모달 모두 동일 패턴으로 식별 — 텍스트에 photos.google.com이 포함되면 편집 종료 시 자동으로 📷 Google Photos 배지가 추가됨. iframe 임베드는 불가 (Notion과 동일 — 자체 인증 필요). 클릭하면 새 탭으로 열림. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

469d2eb05/18/2026, 19:56:4905/18, 19:568fqycwdt8v-oss/chemclaw2

chore: rewrite BACKLOG.md for Python era; remove obsolete TS-era items Cross-referenced every entry against the current Python tree (api/, packages/, migrations/). The pre-Python-migration TypeScript items (~70 lines) referenced apps/web/, packages/db, packages/agent-tools, workers/fp-worker, ChatClient.tsx, Drizzle migrations — all of which were deleted in 2b3ab16. Those entries are dropped; git history holds them if a TS-era observation is ever needed for context. What's left is grouped into PR-sized tiers: - A: security/correctness (auth iss claim, ADMIN_USER_IDS startup validation, substance-gate double-fire, rate-limit key sanitization) - B: performance (campaign N+1, budget TOCTOU, SSE buffer cap) - C: refactor (wiki query split at 521 LOC, embeddings module) - D: tests (pytest harness — no coverage for phases 1-8 today) - E: polish (temporal_exact flag, ELN path, CAS regex bound) - F: long-horizon / blocked (multi-tenant RLS, audit-read, skills DB, tool forging, etc.) - Cleanup: orphan TS packages No code changes; documentation only. Co-Authored-By: Claude Opus 4.7 <[email protected]>

1b17aff05/18/2026, 19:56:4905/18, 19:56DanP88/equishow

style(tarification): plan actuel en orange (brand) au lieu de vert Co-Authored-By: Claude Opus 4.7 <[email protected]>

b9e3c4905/18/2026, 19:56:4905/18, 19:56vichosv/BalanceFC-v2

fix: botón cerrar perfil fijo en esquina + tabs tienda sin jitter vertical PlayerProfileSheet: botón ✕ position:fixed top/right (esquina, zIndex 1002, borde accent) siempre visible en móvil. ShopPage: tabs con overflowY hidden + touch-action pan-x + indicador a bottom:0 (no -1) → ya no rebota verticalmente al deslizar. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

685a5ca05/18/2026, 19:56:4805/18, 19:56JGal44/retrofitready

Heat pump card: loan calculator, carbon tax, Warmer Homes, 3 quotes nudge Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

ec12f0305/18/2026, 19:56:4805/18, 19:56fangrh/tdgl-flow

feat: add viewer-session proxy endpoints to workflow API Co-Authored-By: Claude Opus 4.7 <[email protected]>

29038f605/18/2026, 19:56:4805/18, 19:56ravenmok/salon-purchasing-tracker

Fix remove race condition + button/price overlap - saveStateNow(): immediate Supabase upsert (no debounce) — used by remove/restore so a realtime event within 800ms can't undo the hide - removeItem/restoreItem: call saveStateNow() instead of saveState() so hidden state is committed to Supabase before any subscription event fires - [data-role=designer] .card-content { padding-right: 132px } — shifts price/cost text left so Remove + Edit buttons don't overlap it Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

a72316f05/18/2026, 19:56:4805/18, 19:56screwyforcepush/game-commitfreq

refactor: adjust ember for cobalt create xray-a94925.csv Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

07f6b4505/18/2026, 19:56:4805/18, 19:56DrBaher/Drbaher-cli

site: OG images + sibling tool-page cross-links + ToolCard grid 3+2 layout (#5) * site: OG images + sibling tool-page cross-links to compare-cli Follow-up to the narrative-integration PR. Closes the two deferred items from that PR's scope cut: - OG images (static SVG + dynamic generator) still rendered "Four CLIs" - Sibling tool pages (draft / nda-review / docx2pdf / sign) didn't yet cross-link to /tools/compare-cli/ in their "Where it fits" sections. public/og-default.svg - Headline "Four CLIs for the contract workflow" -> "Five CLIs for the". - Description rewritten to include "gate drift" before "sign with audit trails", line-wrap tightened to fit 28px font. - Bottom row inserts "compare-cli" between docx2pdf-cli and sign-cli; x positions reshuffled (98/118/270/290/420/440/560/580) to keep the five names evenly spaced. src/pages/og/[...slug].png.ts - `default`, `overview`, `workflow`, `install`, `use-cases`, `changelog` page configs all updated to mention five CLIs / six commands. Specific workflow → "Draft → review → negotiate → convert → compare → sign. Six commands across five CLIs". - `install` description gains `compare-cli` in the npm install chain. - New `tools/compare-cli` entry mirroring the sibling pages' shape. - The CLI-name strip array adds 'compare-cli' between 'docx2pdf-cli' and 'sign-cli' so dynamic OG images render five names in the bottom band. Tool pages — each "Where it fits in the workflow" section updated: - draft-cli.astro: "first step in the four-CLI workflow" -> "five-CLI workflow"; new sentence positioning the filled draft as the BASE compare-cli gates against before sign. - nda-review-cli.astro: new paragraph after the finalize section explicitly documenting how negotiation.json is consumed by compare-cli's --from-negotiation flag, citing the three-tier resolution and --require-signoffs. - docx2pdf-cli.astro: "conversion step in the four-CLI workflow" -> "five-CLI workflow"; PDF output is now described as what compare-cli gates before sign-cli seals it. - sign-cli.astro: "Where it fits" rewritten to chain through compare-cli as the gate immediately before the seal ("substantive drift = no sign"). No code change. No tests. No version bump. Pure narrative continuity. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]> * site(index): ToolCard grid lg:grid-cols-5 -> lg:grid-cols-3 Five cards in one row at lg was too cramped — taglines wrapped at every word ("compare-cli" needed 5 lines), the rightmost card got clipped on typical viewports, and the visual rhythm fought the content. Switching to grid-cols-3 gives a 3+2 layout: three cards on row 1 (draft-cli / nda-review-cli / docx2pdf-cli, ~roughly the "build" phase), two cards on row 2 (compare-cli / sign-cli, the "verify + seal" phase). Mobile (grid-cols-1) and small (sm:grid-cols-2) breakpoints unchanged. This is a layout fix; no copy or component changes. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]> --------- Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

2fc7a0805/18/2026, 19:56:4805/18, 19:56marcoaadc/mediarescue

chore: initial project setup with CLAUDE.md and custom agent definitions Establishes MediaRescue project structure with TLA+/TLC spec-driven development methodology. Includes 4 custom agent definitions for Rust core, API, QA, and TLA+ specification writing. Co-Authored-By: Claude Opus 4.6 <[email protected]>

3a4cd1c05/18/2026, 19:56:4805/18, 19:56vitormonofloor/Monofloor_Files

✨ Q2 Central: coluna Risco + consultor normalizado do Timeline - Coluna "Risco" na tabela Q2 (chip colorido por nivel: critico/alto/moderado/baixo) - Distribuicao de risco na sintese Q2 (Score de risco: N critico, N alto, N moderado) - Merge consultor normalizado do Timeline (39 sem consultor → 14) - refresh-dashboard.ps1: fallback de idades preserva snapshot anterior quando pipefy-dates ausente - merge_risco_q2.py: script avulso pra merge manual sem re-rodar refresh inteiro Co-Authored-By: Claude Opus 4.6 <[email protected]>

603844505/18/2026, 19:56:4705/18, 19:56bhwilkoff/BOBA-Playbook

fix(mod): allow status=applied + iOS upsert conflict target — v2.277 User retried image upload, got "duplicate key value violates unique constraint card_image_overrides_card_number_key" because two bugs combined: ### Bug 1: CHECK constraint blocked status='applied' v2.275 added applied_image_file + applied_at columns but didn't update the status CHECK constraint, which still only allowed 'pending'|'approved'|'rejected'. The boba-mod-merge Worker's final PATCH (status='applied') was silently failing, leaving rows stuck at 'approved' with applied_image_file=null. Fix: migration drops + recreates the constraint to include 'applied'. Recorded in supabase_schema.sql. ### Bug 2: iOS upsert had no explicit on_conflict target submitImageOverride sent `Prefer: resolution=merge-duplicates` but PostgREST can't infer the conflict target on a table with multiple unique constraints (pkey + card_number_key). Without `?on_conflict= card_number` in the URL, PostgREST fell back to plain INSERT, which fails when a row for the card_number already exists. The web SDK was fine — `.upsert(_, { onConflict: 'card_number' })` sets the query param automatically. The iOS REST path needed it explicit. Fix: iOS submitImageOverride URL is now /rest/v1/card_image_overrides?on_conflict=card_number ### After this ships Beta tester + admin retries will upsert the existing S-101A row (updating storage_path to point at the new upload), the Worker will succeed end-to-end (CHECK now permits 'applied'), and the new versioned R2 filename lands on the row's applied_image_file. The existing S-101A row in DB still has the OLD storage_path from the earlier admin upload. When the admin retries (after this v2.277 ships), the row's storage_path will be overwritten with the new upload's path, so the Worker processes the LATEST image. iOS build: ✓ verified Debug-iphonesimulator iPhone 17 Pro. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

4198b8e05/18/2026, 19:56:4705/18, 19:56JuanPCortez/OGA-UAM-AZC-CAU

Corregir cierre del lightbox al hacer clic fuera de la imagen El overlay (z-index 900) quedaba tapado por el lightbox (z-index 1000) y nunca recibía clicks. Se reemplaza por un listener en el propio div del lightbox que cierra solo cuando e.target === el contenedor, igual que la implementación de numeralias en index.js. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

a16619905/18/2026, 19:56:4705/18, 19:56nickreyntjens/digitalcontentsigner

Fix noVNC black canvas test: poll for frame content instead of fixed 3s wait The canvas element is created in the DOM before the RFB handshake completes, so a fixed waitForTimeout(3000) races against frame delivery. Replace with waitForFunction that polls up to 20 s until the canvas has non-zero dimensions and at least one non-black pixel — the earliest reliable signal that the VNC server has sent its first FramebufferUpdate. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

6add54b05/18/2026, 19:56:4705/18, 19:56papodeagente/recorrente

feat(bolso/fase-b): UI completa + relatorios + mobile - /vendas/[id]: detalhe completo (items, payments, receivables, cancelar) - /relatorios: KPI por periodo (hoje/semana/mes), vendas por dia (mini bar chart), top produtos, top clientes, despesas por categoria - /financeiro: nova aba Fluxo de caixa (entrou/saiu/saldo + ultimas movimentacoes) - /configuracoes/whatsapp: pagina dedicada com URL do webhook + tokens - /configuracoes: link para sub-pagina whatsapp UI: - AppShell extraido para client component - Sidebar so desktop, bottom-nav fixa no mobile (5 abas) - FAB '+' mobile com acoes rapidas - Empty state polido em /vendas Routers: - reports: salesByDay, topProducts, topCustomers, expensesByCategory, cashflow Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

f433bff05/18/2026, 19:56:4705/18, 19:56jgt7405/analytics-frontend

Phase 2 hygiene: Remove hardcoded paths, fix postinstall hook, add newline injection guard - Step 9: Removed hardcoded C:/temp/... path from tsconfig.json include - Step 10: Removed postinstall hook that was defeating webpack cache - Step 12: Added newline stripping to contact form replyTo field for email header injection protection All changes are backward-compatible and improve build performance/security. Co-Authored-By: Claude Haiku 4.5 <[email protected]>

32d72db05/18/2026, 19:56:4705/18, 19:56defynet1/wallpapergram

Pin Playwright MCP to absolute npx path + explicit PATH Robust against shells that haven't picked up Node.js on PATH yet (e.g. an editor opened before the Node install). Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

0598c0a05/18/2026, 19:56:4705/18, 19:56andreasronge/ptc_runner

fix(security): include shared binaries in sandbox heap accounting (#993) (#995) Large binaries allocated in BEAM shared-binary storage bypassed the sandbox max_heap_size limit because include_shared_binaries defaulted to false on OTP 28. A 20 MB String.duplicate could succeed under a tiny heap cap. Setting include_shared_binaries: true in both Sandbox.execute/3 and Sandbox.run_bounded/2 ensures binary allocations count toward the process memory budget. Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 <[email protected]>

9c2422905/18/2026, 19:56:4705/18, 19:56SuarezPM/apohara-probant

deslop(docs): bulk 9→12 vendor consistency sweep across user-facing docs Post-12-vendor-live-flip (commit f8a04d7) cascade: 26+ stale '9 vendor' refs scattered across user-facing docs. Surgical sed sweep keeping each claim aligned with the current production state (12-vendor live, 7 producing + 5 fail-open per JUDGE-FAQ Q1). Files updated: - README.md (Try-it-live pipeline desc, sanity-check, BYOK desc, Granite Guardian comparison context — corrected to '10-vendor FallbackVendorAdapter ensemble' since the 93.75% measurement predates 12-vendor expansion; Shipped section flipped to 12-vendor LIVE with evidence log link; threshold footnote rewritten to reflect live state vs deferred rescale) - docs/mcp/{README,server-spec}.md (MCP tool description: 9→12) - docs/strategy/commercial-offering-2026Q3.md (6 refs incl quorum math 3/9 → 3/12 and OpenRouter route count 7/9 → 10/12) - docs/compliance/{soc2,iso27001}-control-mapping-2026.md (multiple refs) - docs/submissions/{techex,milan}-2026-submission.md (originals — pre-paste variants .9vendor/.12vendor.md unchanged) - docs/video/SUBMISSION-VIDEO-SCRIPT.md (Pablo records this — now says 12) Out-of-scope (intentionally left): docs/research/12-vendor-ensemble-design.md (documents the 9→12 transition); docs/submissions/*.9vendor.md (historical variants); AUDIT.md (historical record); docs/rfc/ (internal planning). Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

f9b793805/18/2026, 19:56:4705/18, 19:56osvaldoandrade/codeq

ci(release): remove publish-pypi + publish-go-module (#601) The Python and legacy Go REST SDKs are being retired as part of the "Go via gRPC apenas" simplification. The release workflow no longer needs to: - Build and publish sdks/python to PyPI (publish-pypi job). - Tag sdks/go/<version> for the separate Go module (publish-go-module job). Releases now publish only the Go binary, the npm CLI installer at npm/, the GitHub Release, and the codeq-service docker image. No surviving job depended on the removed ones, so no needs:/if: rewiring is needed. Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>