golem15/msd-core
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(#4132): verify durable runtime surface sources (#4182)

Browse Source 
* fix(#4132): verify durable runtime surface sources

* chore(#4132): record PR number in changeset

* test(#4132): cover rejected commands source alias

* fix(#4132): reject aliased package fallback

* test(#4132): cover rejected agents source alias

* test(#4132): cover partially aliased marker provider

* fix(#4132): reject partially aliased source providers

* test(#4132): cover routed source identity probes

* fix(#4132): route installed source identity probes

* refactor(#4132): tighten installer source metadata

* test(#4132): cover corpus trust boundary attacks

* fix(#4132): close installed corpus trust gaps

* refactor(#4132): keep installer authority private

* fix(#4132): preserve private installer fallback

* test(#4132): preserve fixture source authority

* fix(#4132): reject overlapping source fallback

* fix(#4132): avoid redundant installed corpus reads

* refactor(#4132): simplify provider resolution

* test(#4132): sync install tree fixtures after rebase

---------

Co-authored-by: Tom Boucher <trekkie@nomorestars.com>
This commit is contained in:
Zy Deng
2026-09-05 21:32:52 +02:00
committed by GitHub
parent 1017898cb9
commit 4c60879b5d
49 changed files with 3956 additions and 307 deletions
Download Patch File Download Diff File Expand all files Collapse all files

107
tests/fixtures/install-tree/opencode.json vendored
View File

@@ -109,6 +109,41 @@
"commands/gsd-workstreams.md",
"gsd-core/.gsd-runtime",
"gsd-core/VERSION",
"gsd-core/agents/gsd-advisor-researcher.md",
"gsd-core/agents/gsd-ai-researcher.md",
"gsd-core/agents/gsd-assumptions-analyzer.md",
"gsd-core/agents/gsd-code-fixer.md",
"gsd-core/agents/gsd-code-reviewer.md",
"gsd-core/agents/gsd-codebase-mapper.md",
"gsd-core/agents/gsd-debug-session-manager.md",
"gsd-core/agents/gsd-debugger.md",
"gsd-core/agents/gsd-doc-classifier.md",
"gsd-core/agents/gsd-doc-synthesizer.md",
"gsd-core/agents/gsd-doc-verifier.md",
"gsd-core/agents/gsd-doc-writer.md",
"gsd-core/agents/gsd-dom-verifier.md",
"gsd-core/agents/gsd-domain-researcher.md",
"gsd-core/agents/gsd-eval-auditor.md",
"gsd-core/agents/gsd-eval-planner.md",
"gsd-core/agents/gsd-executor.md",
"gsd-core/agents/gsd-framework-selector.md",
"gsd-core/agents/gsd-integration-checker.md",
"gsd-core/agents/gsd-intel-updater.md",
"gsd-core/agents/gsd-mempalace-curator.md",
"gsd-core/agents/gsd-nyquist-auditor.md",
"gsd-core/agents/gsd-pattern-mapper.md",
"gsd-core/agents/gsd-phase-researcher.md",
"gsd-core/agents/gsd-plan-checker.md",
"gsd-core/agents/gsd-planner.md",
"gsd-core/agents/gsd-project-researcher.md",
"gsd-core/agents/gsd-research-synthesizer.md",
"gsd-core/agents/gsd-roadmapper.md",
"gsd-core/agents/gsd-security-auditor.md",
"gsd-core/agents/gsd-ui-auditor.md",
"gsd-core/agents/gsd-ui-checker.md",
"gsd-core/agents/gsd-ui-researcher.md",
"gsd-core/agents/gsd-user-profiler.md",
"gsd-core/agents/gsd-verifier.md",
"gsd-core/bin/check-latest-version.cjs",
"gsd-core/bin/ensure-runtime-build.cjs",
"gsd-core/bin/gsd-tools.cjs",
@@ -120,6 +155,78 @@
"gsd-core/bin/shared/model-catalog.json",
"gsd-core/bin/shared/runtime-aliases.manifest.json",
"gsd-core/bin/verify-reapply-patches.cjs",
"gsd-core/commands/gsd/add-tests.md",
"gsd-core/commands/gsd/ai-integration-phase.md",
"gsd-core/commands/gsd/audit-fix.md",
"gsd-core/commands/gsd/audit-milestone.md",
"gsd-core/commands/gsd/audit-uat.md",
"gsd-core/commands/gsd/autonomous.md",
"gsd-core/commands/gsd/capture.md",
"gsd-core/commands/gsd/cleanup.md",
"gsd-core/commands/gsd/code-review.md",
"gsd-core/commands/gsd/complete-milestone.md",
"gsd-core/commands/gsd/config.md",
"gsd-core/commands/gsd/debug.md",
"gsd-core/commands/gsd/discuss-phase.md",
"gsd-core/commands/gsd/docs-update.md",
"gsd-core/commands/gsd/eval-review.md",
"gsd-core/commands/gsd/execute-phase.md",
"gsd-core/commands/gsd/explore.md",
"gsd-core/commands/gsd/extract-learnings.md",
"gsd-core/commands/gsd/fast.md",
"gsd-core/commands/gsd/forensics.md",
"gsd-core/commands/gsd/graphify.md",
"gsd-core/commands/gsd/health.md",
"gsd-core/commands/gsd/help.md",
"gsd-core/commands/gsd/import.md",
"gsd-core/commands/gsd/inbox.md",
"gsd-core/commands/gsd/ingest-docs.md",
"gsd-core/commands/gsd/manager.md",
"gsd-core/commands/gsd/map-codebase.md",
"gsd-core/commands/gsd/mempalace-capture.md",
"gsd-core/commands/gsd/mempalace-recall.md",
"gsd-core/commands/gsd/milestone-summary.md",
"gsd-core/commands/gsd/mvp-phase.md",
"gsd-core/commands/gsd/new-milestone.md",
"gsd-core/commands/gsd/new-project.md",
"gsd-core/commands/gsd/next.md",
"gsd-core/commands/gsd/ns-context.md",
"gsd-core/commands/gsd/ns-ideate.md",
"gsd-core/commands/gsd/ns-manage.md",
"gsd-core/commands/gsd/ns-project.md",
"gsd-core/commands/gsd/ns-review.md",
"gsd-core/commands/gsd/ns-workflow.md",
"gsd-core/commands/gsd/onboard.md",
"gsd-core/commands/gsd/pause-work.md",
"gsd-core/commands/gsd/phase.md",
"gsd-core/commands/gsd/plan-phase.md",
"gsd-core/commands/gsd/plan-review-convergence.md",
"gsd-core/commands/gsd/pr-branch.md",
"gsd-core/commands/gsd/profile-user.md",
"gsd-core/commands/gsd/progress.md",
"gsd-core/commands/gsd/quick-batch.md",
"gsd-core/commands/gsd/quick.md",
"gsd-core/commands/gsd/resume-work.md",
"gsd-core/commands/gsd/review-backlog.md",
"gsd-core/commands/gsd/review.md",
"gsd-core/commands/gsd/secure-phase.md",
"gsd-core/commands/gsd/settings.md",
"gsd-core/commands/gsd/ship.md",
"gsd-core/commands/gsd/sketch.md",
"gsd-core/commands/gsd/spec-phase.md",
"gsd-core/commands/gsd/spike.md",
"gsd-core/commands/gsd/stats.md",
"gsd-core/commands/gsd/surface.md",
"gsd-core/commands/gsd/thread.md",
"gsd-core/commands/gsd/ui-phase.md",
"gsd-core/commands/gsd/ui-review.md",
"gsd-core/commands/gsd/ultraplan-phase.md",
"gsd-core/commands/gsd/undo.md",
"gsd-core/commands/gsd/update.md",
"gsd-core/commands/gsd/validate-phase.md",
"gsd-core/commands/gsd/verify-work.md",
"gsd-core/commands/gsd/workspace.md",
"gsd-core/commands/gsd/workstreams.md",
"gsd-core/contexts/dev.md",
"gsd-core/contexts/research.md",
"gsd-core/contexts/review.md",