Please do not use GitHub Discussions or PRs for security reports. Email contact@hossainemruz.dev with a description of the issue, the Devcroft version (or commit), your OS and platform, steps to reproduce, and what you believe the impact is. Include logs or a proof of concept only if they contain no credentials or personal data.

I maintain Devcroft solo, so I cannot promise a fixed response time, but I will acknowledge your report and keep you updated on assessment and any fix. Please give me a reasonable chance to address the issue before disclosing it publicly.

This policy covers the Devcroft desktop app and CLI in this repository (shell/PTY handling, agent harness launching, portable data sync, and bundled assets). For everything else — bug reports, feature requests, questions, ideas, and support — use GitHub Discussions. GitHub Issues are disabled.