Martin Vogel e599df1d56 Resolve npm through the shell for Windows compatibility ...

The UI license enumeration invoked npm by bare name via subprocess,
which fails on Windows (npm is npm.cmd there — WinError 2 in the
Windows UI-archive packaging step). Resolve it through the shell, which
handles platform shims everywhere; the command is a constant string.

Signed-off-by: Martin Vogel <martin.vogel@datadice.io>

2026-06-12 18:16:43 +02:00

..

ci

fix: deliver the static -portable linux binary on all install/update paths

2026-06-09 11:36:00 +02:00

git-hooks

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

hooks

Add time-bomb + MCP file read audit, tracked pre-commit hooks

2026-03-21 16:43:48 +01:00

audit-grammar-security.sh

Add 89 new tree-sitter grammars (66 to 155 languages)

2026-04-15 21:28:51 +02:00

audit-license-provenance.py

Run the gate self-test and provenance audit in the security workflow

2026-06-12 13:24:07 +02:00

benchmark-index.sh

Fix C++ SEGV: NULL deref in LSP type resolver on large header files

2026-03-26 16:19:10 +01:00

benchmark-search-graph.sh

Fix search_graph query= multi-minute latency: two-step FTS5 subquery

2026-05-10 19:50:50 +02:00

build.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

check-dco.sh

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

check-lsp-originality.sh

Wire jscpd structural-clone pass into LSP originality guard

2026-06-12 12:58:38 +02:00

check-no-test-skips.sh

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

check-nolint-whitelist.sh

Fix lint: magic numbers in cypher/sqlite_writer/configlink/gitignore, extract URL-in-args helpers

2026-04-02 01:08:51 +02:00

clean.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

clone-bench-repos.sh

Cross-service communication discovery + RAM-first incremental indexing

2026-03-28 13:59:42 +01:00

embed-frontend.sh

Fix Windows build: add zip pkg, portable embed (od replaces xxd)

2026-03-19 10:59:14 +01:00

env.sh

Fix production build errors, add build step to Docker test infra

2026-03-18 17:15:46 +01:00

extract_nomic_vectors.py

Parallelize post-passes, fix mode filtering + semantic edge quality

2026-04-06 12:41:30 +02:00

gen-py-stdlib.py

feat(py_lsp): Round 1 parity push (parent-modules, cast, Self, fwd-refs)

2026-05-09 01:39:28 +02:00

gen-third-party-notices.sh

Extend the notices bundle to the UI dependencies and the Glama image

2026-06-12 10:51:11 +02:00

gen-ui-licenses.py

Resolve npm through the shell for Windows compatibility

2026-06-12 18:16:43 +02:00

generate-lang-code.py

Add 89 new tree-sitter grammars (66 to 155 languages)

2026-04-15 21:28:51 +02:00

install-git-hooks.sh

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

license-gate-check-npm.py

Resolve npm through the shell for Windows compatibility

2026-06-12 18:16:43 +02:00

license-gate-check.py

Bundle third-party notices into release archives; extend release tooling

2026-06-12 02:17:39 +02:00

license-gate.sh

Run the gate self-test and provenance audit in the security workflow

2026-06-12 13:24:07 +02:00

license-policy.json

Exempt the provenance-audit tool from the ScanCode pass

2026-06-12 15:57:08 +02:00

lint.sh

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

new-languages.json

Drop the nim grammar and refresh language counts

2026-06-12 02:17:39 +02:00

security-allowlist.txt

Allow-list the project repository URL in the security audit

2026-06-06 00:20:47 +02:00

security-audit.sh

Exempt the graph-UI server from the raw-network-call audit

2026-06-12 02:28:05 +02:00

security-fuzz-random.sh

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

security-fuzz.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

security-install.sh

fix(install): respect $CLAUDE_CONFIG_DIR in install/uninstall/update

2026-05-30 15:22:37 +02:00

security-network.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-strings.sh

fix(security): widen release audit to all files in binaries/

2026-05-05 00:59:58 +02:00

security-ui.sh

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00

security-vendored.sh

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00

setup-windows.ps1

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

setup.sh

fix(install): respect $CLAUDE_CONFIG_DIR in install/uninstall/update

2026-05-30 15:22:37 +02:00

smoke-test.sh

Merge branch 'session-combined'

2026-06-09 11:57:03 +02:00

soak-test.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

test_mcp_rapid_init.py

fix(mcp): address QA round 1 findings

2026-03-21 12:37:28 -05:00

test.sh

Distill PR #407 (#406) and PR #414 (#413): parent-death watchdog + CBM_LOG_LEVEL

2026-06-06 22:30:38 +02:00

vendor-grammar.sh

Add grammar security audit and enhance vendor script

2026-04-15 20:08:35 +02:00

vendored-checksums.txt

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00