Vance IngallsandClaude Opus 4.6 623a8ee067 fix(cli): harden Docker rendering — shell injection, cleanup, Dockerfile drift ...

- Replace execSync string interpolation with execFileSync array form
  to eliminate shell injection surface on docker build/inspect commands
- Use try/finally for temp directory cleanup instead of duplicated rmSync
- Remove redundant docker info pre-check — dockerImageExists already
  fails with a clear error if Docker isn't running
- Remove duplicate mkdirSync (output dir already created by caller)
- Fix Dockerfile.render drift — add hf-render wrapper script so manual
  builds use chrome-headless-shell for deterministic BeginFrame rendering
- Fix printRenderComplete TOCTOU — statSync directly with catch instead
  of existsSync guard
- Remove unused imports (existsSync, execSync)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 17:55:51 -07:00

..

cli

fix(cli): harden Docker rendering — shell injection, cleanup, Dockerfile drift

2026-04-06 17:55:51 -07:00

core

feat: allow clip animation + ship <hyperframes-player> web component (#209)

2026-04-06 19:59:39 +02:00

engine

fix: address QA report P0-P2 issues for 10/10 agent experience (#208)

2026-04-06 18:56:39 +02:00

player

feat: allow clip animation + ship <hyperframes-player> web component (#209)

2026-04-06 19:59:39 +02:00

producer

fix: address QA report P0-P2 issues for 10/10 agent experience (#208)

2026-04-06 18:56:39 +02:00

studio

chore: release v0.2.2

2026-04-03 04:36:19 +00:00