From 2ce019c470c2f459af1896dfb03f5167bd610f91 Mon Sep 17 00:00:00 2001 From: Josh Knapp Date: Sun, 27 Sep 2026 13:22:48 -0700 Subject: [PATCH] CLAUDE.md: imports skip both the hook and the plugin confirm steps (PR re-review) Co-Authored-By: Claude Opus 5.5 --- CLAUDE.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index 3b97fd9..013460a 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -732,9 +732,11 @@ a project's Docker volumes are deliberately out of scope — this is not a proje (`validate_imported_marketplace_state`) — an import is untrusted input, not a trusted restore. The preview warns whenever the import carries one or more **global hook installs or global plugin installs**, in addition to the base-URL and custom-image warnings above: a hook runs - commands in every project container, and a plugin can carry its own hooks and MCP servers into - one — and an imported install skips the hook-confirm step an install from the Marketplace tab - shows, so this is the only place that confirmation happens for an import. + commands in every project container, and a plugin can carry its own hooks, MCP/LSP servers and + commands into one. In the Marketplace tab both kinds have a confirm step before they install + (`HookConfirmModal` lists a hook's commands, `PluginConfirmModal` lists everything a plugin + brings that runs); an import installs them without either, so the preview warning is the only + place that confirmation happens for an import. - **Encrypted because it can carry live credentials, not for appearance's sake.** Argon2id derives a 256-bit key from the user's password (memory-hard — meaningfully resistant to GPU/ASIC brute-forcing, unlike PBKDF2 at any reasonable iteration count), AES-256-GCM does the actual