• v1.28.0 7e233469a5

    v1.28.0 — Mission Control MCP & Claude Forge Security Hooks
    All checks were successful
    CI / json-check (push) Successful in 7s
    CI / security (push) Successful in 8s
    CI / manifest (push) Successful in 7s
    Publish / detect-release (push) Successful in 7s
    CI / lua-check (push) Successful in 12s
    CI / sast (push) Successful in 17s
    Publish / tag (push) Successful in 6s
    Publish / promote-release (push) Successful in 0s
    Stable

    Gravity Bot released this 2026-03-16 05:42:34 +00:00 | 120 commits to master since this release

    What's Changed

    Security Hooks (Claude Forge Cherry-Pick)

    • output-secret-filter.sh — PostToolUse hook that detects API keys, bearer tokens, private keys, and credentials in tool output. Masks them before they enter conversation history.
    • security-auto-trigger.sh — PostToolUse hook on Edit|Write that detects modifications to security-sensitive files (auth, jwt, oauth, .env, migrations, crypto) and suggests review before committing.

    Architecture Decision

    • ADR-008: Claude Code Ecosystem Tools Evaluation — Evaluated Claude Forge, Mission Control (both projects), and Agent Deck. Decision: cherry-pick two security hooks from Forge, skip all other tools.

    Documentation

    • MCP Server Inventory — Catalogued all active MCP servers (gitea, openproject, cloud Gmail/Calendar), hooks, and shell aliases.

    Bug Fix

    • Removed unregistered /humanize trigger from gt-writing-quality SKILL.md — the slash command was documented but never registered in gravity-skills.tsv.

    Tasks

    • OP#2002: Initialize version branch from develop
    • OP#1936: Evaluate Claude Code ecosystem tools (Forge, Mission Control, Agent Deck)
    • OP#2241: fix: remove unregistered /humanize trigger from gt-writing-quality
    • OP#1994: Evaluate all 6 Claude Forge security hooks
    • OP#1995: Implement approved security hooks
    • OP#1996: Test security hooks integration
    • OP#1997-2000: Mission Control MCP tasks (closed per ADR-008 skip decision)
    • OP#2001: Document MCP server inventory in repo docs
    • OP#2026: Pre-release merge: consolidate feature branches
    • OP#2003: Create release branch and publish v1.28.0
    Downloads