Repository navigation
Polish the README and add an animated demo - #3
Merged
Merged
Conversation
Follow awesome-readme conventions: a quick-link row under the badges, a collapsible table of contents, two more bypass rows in the Why table, an FAQ for the questions the fail-closed design raises, and a roadmap built from the known gaps.
scripts/demo.ts renders assets/demo.svg from what deniedBy really returns under DEFAULT_DENY, so the demo cannot drift from the library. Regenerate it with `pnpm demo`. The SVG is plain CSS animation, honours prefers-reduced-motion, and is not shipped in the npm package.
Fix each command's width with textLength so the typing cover lines up in any monospace font. Hide only .cover elements for reduced-motion viewers, not every class that starts with "c".
Base automatically changed from
fix/close-wrapper-script-and-overflow-bypasses
to
main
October 17, 2026 17:27
devmaxxx
marked this pull request as ready for review
October 17, 2026 17:27
CI ran only for PRs into main, so a PR stacked on another PR's branch was never tested. Drop the base filter, keep push builds on main, and add workflow_dispatch for manual runs.
3 tasks done
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
assets/demo.svg).scripts/demo.tsbuilds it from whatdeniedByreally returns underDEFAULT_DENY, so it cannot drift from the library. Regenerate it withpnpm demo. The SVG uses plain CSS animation. For viewers who turn off motion, it shows the finished screen. It is not shipped in the npm package.trap 'git push' EXITand apython3 -cone-liner.rm -rf $DIRis denied, allowing a trusted deny reason, supported shells, no side effects, and deny-list vs allow-list. Also adds a roadmap built from the known gaps.This PR is stacked on #1, so its base is #1's branch. Once #1 merges, retarget the base to
main; CI runs on PRs intomainonly.Test plan
pnpm lintandpnpm typecheckpass (scripts/is now type-checked)deniedByoutput