P0 — Critical:
- download: validate URL scheme (https/http only) and reject private/loopback
  hosts before fetching to prevent SSRF from malicious adapter responses
- download: detect 206-not-honored resume corruption — truncate bad file and
  surface a clear FilesystemError rather than silently leaving corrupt data
- execute + registry/types: add setExitCode() to CommandContext so handlers
  can signal partial success; search now emits exit 8 when any source fails
- mcp/server: exclude 'config' from MCP tool surface — exposes mutating set
  action; read-only config access via manifest/file path is the safe path

P1 — Important:
- registry: remove --ndjson from GLOBAL_FLAGS (advertised but unimplemented;
  re-add when streaming output is built)
- sources: throw UsageError (exit 2) for enable/disable instead of silently
  returning ok:true — agents branching on exit code were misled
- catalog: quote FTS5 MATCH term to prevent SQLite parse error on user input
  containing operators (parentheses, colons, etc.)

All changes: build ✓ typecheck ✓ lint ✓ 8/8 tests ✓

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Portable three-layer knowledge graph integration: SessionStart/PostToolUse/
UserPromptSubmit/Stop/PreToolUse hooks, graphify graph (auto-updates on commit),
decisions + bugs ADRs committed, runtime artifacts gitignored. No-ops gracefully
without local CKIS vault — external contributors unaffected.

Registered in Dev Brain (~/Documents/Dev Brain/); graph-report auto-synced to CKIS
02-projects/<slug>/graph-report.md on each commit.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

- Add .npmrc: ignore-scripts=true, registry pin, save-exact=true
- Patch GHSA-5xrq-8626-4rwp: vitest → ^4.1.8 (critical — arbitrary file read/exec)
- Pin all GitHub Actions to commit SHAs (not mutable tags)
- Add --ignore-scripts to all npm ci / pnpm install steps in CI
- Add explicit native module whitelist with npm_config_ignore_scripts=false rebuild
- Add npm audit --audit-level=high gate to all CI and release workflows
- Add permissions: {} (deny-all default) with per-job minimum grants
- Add persist-credentials: false to all checkout steps
- Add weekly security-audit.yml workflow (runs every Monday 09:00 UTC)
- Add SECURITY.md with supply chain security policy and vulnerability disclosure

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

…build override

- vitest → ^4.1.8 (critical GHSA-5xrq-8626-4rwp: arbitrary file read/exec)
- pnpm.overrides: esbuild >=0.25.0 (clears esbuild moderate)
- Remaining moderate: vite path traversal (dev-server only, not triggered in CI or
  published package; vite override deferred — would break tsup which requires vite 5)
- CodeQL workflow: pinned to SHA d77b13a0, permissions: {}, persist-credentials: false

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

…og, import pipeline

Take the monorepo from architecture-only v0.1.0 to a working v1.0.0:

- Standard Ebooks adapter rewritten: OPDS (now 401-gated) → anonymous HTML
  catalog scrape; EPUB download requires ?source=download to get the binary
  instead of the interstitial page.
- Gutenberg + Standard Ebooks throttle to >=1 req/sec (module-level).
- library --import <dir>: recursive scan, filename+dir-as-category metadata,
  SHA-256 dedup, skips unsupported/unreadable, stderr progress.
- Catalog now returns authors (group_concat in list/search; rowToBook no longer
  hardcodes []). First catalog + import unit tests added.
- CLI flag fix: normalizeFlags() aliases Commander's camelCased keys back to the
  declared hyphenated names (--to-catalog / --output-dir were silently no-ops).
- doctor self-heals (mkdir) and checks writability; search ranks standard-ebooks
  above Gutenberg.
- Build/security: typescript devDep added per-package (.npmrc no-hoist); vite
  pinned ^6.4.2 (devDep + override) for vitest 4 + path-traversal CVE.

Verified: build (4 pkgs), 24 tests, typecheck 0 errors, audit clean,
real EPUB downloads from both sources land + catalog.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...df4cb1c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>