Colby McHenry e35d4861e0 test(agent-eval): block the codegraph CLI outright — hiding it from PATH was not enough (CG-7) ...

An agent denied `codegraph` on PATH ran `find / -maxdepth 4 -iname "*codegraph*"`,
found the binary, and invoked it by ABSOLUTE PATH — 12 times in one without-arm
run. So block the invocation itself with a PreToolUse hook on Bash, written into
the run's output dir as an artifact alongside the MCP configs rather than as a
repo file.

The pattern matches command positions only, so looking is still allowed and only
using is denied: `grep codegraph src/`, `ls .codegraph` and `which codegraph`
pass through, while `codegraph explore`, `/abs/path/codegraph …`, `cd x &&
codegraph …` and `VAR=1 codegraph …` are refused. run-all.sh proves both
directions at startup and refuses to run if either fails. parse-run.mjs's
detector uses the same rule, so prevention and detection cannot drift — and it no
longer false-positives on the corpus path, which contains the word codegraph.

Verified end-to-end: the without-arm now probes with `ls .codegraph; which
codegraph`, finds nothing usable, and falls back to Read/Bash.

2026-08-04 16:10:32 -05:00

..

benchmarks

test(agent-eval): block the codegraph CLI outright — hiding it from PATH was not enough (CG-7)

2026-08-04 16:10:32 -05:00

design

Self-hosted telemetry on Cloudflare D1 + password-gated admin dashboard (CG-7) (#1497)

2026-08-01 16:17:10 -05:00

grammars

feat(extraction): add Visual Basic .NET language support (.vb) (#648, #639, #170) (#1164)

2026-07-03 11:55:45 -05:00

plans

feat: wire up framework route extraction (#89)

2026-05-07 22:03:33 -05:00

SEARCH_QUALITY_LOOP.md

feat: Add complete PHP language support with trait handling and property extraction

2026-04-07 13:44:14 -05:00