From 18c8960adcab633287e82457453f60eb8c2753fc Mon Sep 17 00:00:00 2001 From: bastien Date: Wed, 30 Sep 2026 19:07:10 +0200 Subject: [PATCH] =?UTF-8?q?chore(memory):=20journal=20+=20TODO=20=E2=80=94?= =?UTF-8?q?=20higgsfield=20pack=20merged=20to=20develop=202026-09-30?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .claude/memory/journal.md | 1 + .claude/tasks/TODO.md | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.claude/memory/journal.md b/.claude/memory/journal.md index f5dfb6b..1bff2be 100644 --- a/.claude/memory/journal.md +++ b/.claude/memory/journal.md @@ -559,3 +559,4 @@ rules: - /ship-feature higgsfield-pack on feature/higgsfield-pack ([[BDR-109]]): Step 8.6 in install-plugins.sh, 7.3b in update-all.sh, doctor lines, `lib/higgsfield-skills.sh`, two toggles with allowlist, routing in CLAUDE.global.md (312/320), suite 16 cases. ctx7 + 21st login offers fixed (dead under tee, [[LRN-185]]). - Gates: challenge 0 BLOCKER / 7 MAJOR closed; verifier ECARTS(6) → CONFORME ×2; security PASS ×2 (2 MEDIUM accepted: unpinned skills content, unpinned npm package); final review 1 Important fixed; `make test` 45 suites rc 0. Registries: BDR-109, LRN-183..188, BLK-025, EVAL-039. - Branch UNMERGED, awaits human signal for `gitflow finish`. Left for the user: `.superpowers/sdd/2026-09-30-higgsfield-pack/` scratch; remaining npm deny spellings. +- User go "pour tout le reste tu peux merger": feature/higgsfield-pack merged into develop via `gitflow finish` → df6dbce, spec + plan purged (BDR-065), pushed (develop == origin/develop), local + origin copies removed by the lib. Open: user wants npm global installs on `ask` instead of `deny` (supply-chain caution, installs themselves fine); deny removal = hand edit by the user (hard_deny on weakening guardrails), `ask` tier abandoned under auto mode ([[BDR-090]]) → soft_deny entry proposed. diff --git a/.claude/tasks/TODO.md b/.claude/tasks/TODO.md index 76fd75b..18c4727 100644 --- a/.claude/tasks/TODO.md +++ b/.claude/tasks/TODO.md @@ -9,7 +9,8 @@ routing lines, complete scope, TTY fix on ctx7 + 21st (option A), deny aliases. - [ ] parked (per-task minors, none blocking): "rename" comment vs rm-then-mv; no `--` before the clone URL; ssh URL can prompt; no sweep of a stale `.higgsfield-stage.*`; timeout path itself untested; "pack not installed" when only unlisted skills are synced; doctor version read unbounded - [ ] user decision: close the remaining npm global-install spellings in settings.json deny (`npm i -g`, `npm add -g`, `npm -g i`) — pattern grammar for a mid-string wildcard unverified ([[BLK-025]]) - [ ] user decision: pin a commit for higgsfield-ai/skills and a version for `@higgsfield/cli` (security gate, 2 MEDIUM, accepted as is) -- feature/higgsfield-pack UNMERGED — human gate ("merge it") +- feature/higgsfield-pack merged into develop 2026-09-30 (df6dbce, user go) +- [ ] user decision pending: npm global installs from `deny` to a prompt tier — `ask` does not prompt under `defaultMode: auto` ([[BDR-090]]); option = one `autoMode.soft_deny` entry (vet the package first), deny lines removed by the user by hand ## 2026-09-29 — effort round: every skill carries a level next to its model pin (feature/effort-round) User table: low fix-a-line/run-a-script · medium day-to-day · high refactor/resisting bug ·