fix(guards): match protect-paths per path token, fail closed, and stop double-registering guards with the plugin - #159

Merged

CodeWithJuber merged 10 commits into

fix/protect-paths-false-positives

Sep 24, 2026

Commits on Sep 23, 2026

fix(guards): match protect-paths secret paths per path token
claude
committed
86fd705
fix(guards): run protect-paths on node and fail closed
claude
committed
04b245a
fix(doctor): do not re-register guards when the forgekit plugin is enabled
claude
committed
592a780
docs: document path-token protect-paths, fail-closed launch and plugin-aware doctor
claude
committed
eed1b7f
fix(guards): close the protect-paths bypasses found in review
claude
committed
771dc37
fix(init): skip guard hooks when the plugin is enabled in any scope
claude
committed
af2870f
fix(guards): protect any npmrc outside the project; linear .env name match
claude
committed
0b2761b

Commits on Sep 24, 2026