T

windyboy f77a4afd50 security: widen verifier (openssh/hyphenated-sk/ctx7sk/credential-assign/telegram/conn-string), fix GIT_WORKFLOW guidance

- BEGIN [A-Z0-9 ]*PRIVATE KEY now covers OPENSSH/RSA/EC variants
- sk- patterns tolerate hyphens and prefixed families (ctx7sk-)
- credential-assign catches PASSWORD=/token:/|API_KEY| tables (placeholder-aware)
- telegram bot tokens + connection strings with embedded passwords
- .obsidian/** third-party plugin code excluded from value scan (noise)
- regression: all 12 files named in REVIEW-FOLLOWUP now flagged
- GIT_WORKFLOW: drop git add . / Windows path, add verifier step,
  note force-push exception for the one-time history rewrite

2026-09-26 12:09:11 +08:00

.claude

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

.codex

remove airport wiki

2026-04-15 14:34:24 +08:00

.config

fix: resolve lonely if ESLint warning

2025-09-15 08:49:07 -04:00

.github

phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI

2026-09-26 11:31:48 +08:00

.obsidian

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

.qoder

refactor(vault): Phase 3 — metadata convergence

2026-09-26 11:37:19 +08:00

.scripts

security: widen verifier (openssh/hyphenated-sk/ctx7sk/credential-assign/telegram/conn-string), fix GIT_WORKFLOW guidance

2026-09-26 12:09:11 +08:00

.zcode/plans

vault backup: 2026-09-11 20:58:25

2026-09-11 20:58:25 +08:00

00_Inbox

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

01_Projects

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

02_Areas

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

03_Resources

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

04_Archive

refactor(vault): Phase 4 — 06_Metadata slimming 42 → 8

2026-09-26 11:38:51 +08:00

05_Attachments

vault backup: 2026-02-04 13:41:36

2026-02-04 13:41:36 +08:00

06_Metadata

security: widen verifier (openssh/hyphenated-sk/ctx7sk/credential-assign/telegram/conn-string), fix GIT_WORKFLOW guidance

2026-09-26 12:09:11 +08:00

.gitignore

phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI

2026-09-26 11:31:48 +08:00

.prettierignore

feat: add linting and formatting setup with configs in .config folder

2025-09-15 08:31:46 -04:00

AGENTS.md

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

CLAUDE.md

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

package.json

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

pnpm-lock.yaml

Initial vault setup with PARA structure

2026-01-05 21:10:11 +08:00

README.md

refactor(vault): Phase 5 — single agent contract

2026-09-26 11:41:32 +08:00

README.md

My Obsidian Vault

Personal knowledge base using the PARA method, version-controlled with Git.

Structure

00_Inbox/           Capture → process weekly
01_Projects/        Time-bound work
02_Areas/           Ongoing responsibilities
03_Resources/       Reference materials
04_Archive/         Completed items & clippings
05_Attachments/     Media files
06_Metadata/        Templates & reference docs

Entry Points

AGENTS.md — operations manual for AI agents (permission table, safety rules, code style)
06_Metadata/Reference/PARA_METHOD.md — PARA methodology reference
06_Metadata/Reference/GIT_WORKFLOW.md — git workflow guide

Scripts

pnpm lint              # Lint + format (auto-fix)
pnpm lint:check        # Check only
pnpm format            # Prettier format
pnpm vault:stats       # Vault statistics

CI

GitHub Actions runs lint, format check, and secret scanning on every push/PR to main.