From 0dc125d09a2bb3c79e382450fb4bf211d0a214aa Mon Sep 17 00:00:00 2001 From: Safi Date: Wed, 8 Apr 2026 20:00:05 +0100 Subject: [PATCH] =?UTF-8?q?release:=200.3.15=20=E2=80=94=20Trae=20platform?= =?UTF-8?q?,=20security=20hardening,=20pipx=20hooks,=20PowerShell=20fix?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- CHANGELOG.md | 13 +++++++++++++ README.md | 4 +++- pyproject.toml | 2 +- 3 files changed, 17 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6aeb4c7b..a4b32ef3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,19 @@ Full release notes with details on each version: [GitHub Releases](https://github.com/safishamsi/graphify/releases) +## 0.3.15 (2026-04-08) + +- Feat: Trae and Trae CN platform support (`graphify install --platform trae` / `trae-cn`) +- Fix: `skill-droid.md` was missing from PyPI package data — Factory Droid users couldn't install the skill +- Fix: XSS in HTML legend — community labels now HTML-escaped before `innerHTML` injection +- Fix: Shebang allowlist validation in `hooks.py` and all 6 skill files — prevents metacharacter injection from malicious binaries +- Fix: `louvain_communities()` kwargs now inspected at runtime for cross-version NetworkX compatibility +- Fix: pipx installs now detected correctly in git hooks (reads shebang from graphify binary) +- Fix: graspologic ANSI escape codes no longer corrupt PowerShell 5.1 scroll buffer +- Docs: Japanese README added +- Docs: `graph.json` + LLM workflow example added to README +- Docs: Codex PreToolUse hook now documented in platform table + ## 0.3.14 (2026-04-08) - Fix: `graphify codex install` now also writes a PreToolUse hook to `.codex/hooks.json` so the graph reminder fires before every Bash tool call (#86) diff --git a/README.md b/README.md index e620c521..9368cd5f 100644 --- a/README.md +++ b/README.md @@ -93,7 +93,9 @@ After building a graph, run this once in your project: **Claude Code** does two things: writes a `CLAUDE.md` section telling Claude to read `graphify-out/GRAPH_REPORT.md` before answering architecture questions, and installs a **PreToolUse hook** (`settings.json`) that fires before every Glob and Grep call. If a knowledge graph exists, Claude sees: _"graphify: Knowledge graph exists. Read GRAPH_REPORT.md for god nodes and community structure before searching raw files."_ — so Claude navigates via the graph instead of grepping through every file. -**Codex, OpenCode, OpenClaw, Factory Droid, Trae** write the same rules to `AGENTS.md` in your project root. These platforms don't support PreToolUse hooks, so AGENTS.md is the always-on mechanism. +**Codex** writes to `AGENTS.md` and also installs a **PreToolUse hook** in `.codex/hooks.json` that fires before every Bash tool call — same always-on mechanism as Claude Code. + +**OpenCode, OpenClaw, Factory Droid, Trae** write the same rules to `AGENTS.md` in your project root. These platforms don't support PreToolUse hooks, so AGENTS.md is the always-on mechanism. Uninstall with the matching uninstall command (e.g. `graphify claude uninstall`). diff --git a/pyproject.toml b/pyproject.toml index e6f67898..83715bbe 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta" [project] name = "graphifyy" -version = "0.3.14" +version = "0.3.15" description = "AI coding assistant skill (Claude Code, Codex, OpenCode, OpenClaw) - turn any folder of code, docs, papers, or images into a queryable knowledge graph" readme = "README.md" license = { file = "LICENSE" }