Tom Boucher a1de52d71b fix(#2128): sanctions must be a dedicated // comment line (decoy-proof) ...

Re-review found the `// phase-id-owner:` suppression treated a `//` embedded in a
string literal as a comment — help/doc text quoting the sanction syntax (the exact
string the scanner's own main() prints) would silently suppress a real
re-derivation. Require the marker to LEAD its own comment line (`^\s*//…`), so a
`//` inside a string or trailing a code line never counts. All 5 real sanctions
are already dedicated lines (scanRepo stays green); trailing same-line sanctions
are no longer honored — put the comment on the line directly above.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-10 09:24:49 -04:00

..

changeset

fix(#1224): accept --pr 0 placeholder at changeset creation (#1231)

2026-06-14 15:02:54 -04:00

lib

test(#1074): add additive per-file workflow size baseline guard (PR 1/3) (#1089)

2026-06-11 23:59:56 -04:00

release-notes

enhance(#1549): validate PR-title issue-ref convention at open time (#1576)

2026-06-22 22:44:44 -04:00

affected-tests-lib.cjs

fix: recover silently-excluded test dirs + test-architecture audit hardening (#1195)

2026-06-13 23:35:08 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

build-hooks.js

fix(#2089): register 4 new cursor hook scripts in build + managed-hooks whitelists

2026-07-09 00:58:09 -04:00

check-alias-drift.cjs

enhance(#1579): deterministic gsd-tools query eval.score verb (#1583)

2026-06-24 17:16:13 -04:00

check-env.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

check-npm-integrity.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-guard-runner.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-prepare-test-scope.cjs

fix(#1329): existence-filter scoped-CI fallback so a deleted test can't crash the lane

2026-06-16 08:38:55 -04:00

ci-rebase-check.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-test-scope.cjs

ci(#1975): exclude release-tarball-smoke from scoped lane (fixes Windows chunk timeout)

2026-07-03 10:22:11 -04:00

command-contract-helpers.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

diff-touches-shipped-paths.cjs

chore(#1328): remove orphaned root vitest.config.ts left by SDK retirement

2026-06-16 08:24:21 -04:00

fix-slash-commands.cjs

fix(#1223): install scripts/fix-slash-commands.cjs so gsd-tools loads (#1240)

2026-06-14 16:03:26 -04:00

gen-capability-matrix.cjs

feat(#1435): capability matrix (generated + drift-guarded) + trust-model doc consolidation (#1458)

2026-06-19 12:45:26 -04:00

gen-capability-registry.cjs

feat(#1431): runtime capability registry overlay (ADR-1244 Phase 2) (#1440)

2026-06-18 14:41:20 -04:00

gen-golden-install-parity-zcode.cjs

chore(#1925): generalize golden-install-parity generator to all runtimes + args

2026-07-06 08:31:52 -04:00

gen-inventory-manifest.cjs

refactor(#1170): remove hand-maintained INVENTORY count scalars (#1179)

2026-06-13 21:30:03 -04:00

gen-loop-host-contract.cjs

fix(#1196): wire discuss loop step for capability hooks (#1199)

2026-06-14 01:39:54 -04:00

gen-plugin-skills.cjs

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gen-research-agents.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

generate-package-identity.cjs

chore: move committed-generated-artifact freshness checks to lint:ci (#2000)

2026-07-03 19:37:14 -04:00

issue-dedupe.cjs

feat(#836): no-LLM duplicate-issue detection + challenge + 1-day auto-close (#843)

2026-06-07 20:35:43 -04:00

issue-version-gate.cjs

feat(#1180): hard-gate the GSD Version requirement on bug reports (#1181)

2026-06-13 16:13:00 -04:00

lint-allow-test-rule-refs.allowlist.json

chore: move committed-generated-artifact freshness checks to lint:ci (#2000)

2026-07-03 19:37:14 -04:00

lint-allow-test-rule-refs.cjs

fix: recover silently-excluded test dirs + test-architecture audit hardening (#1195)

2026-06-13 23:35:08 -04:00

lint-command-contract.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-descriptions.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-docs-required.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-legacy-dir-name.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-package-identity-drift.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

lint-phase-id-drift.cjs

fix(#2128): sanctions must be a dedicated // comment line (decoy-proof)

2026-07-10 09:24:49 -04:00

lint-pr-check-project-dir.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-regression-test-names.allowlist.json

test(#1975): consolidate 51 CLI + scripts-tooling regression tests into module suites

2026-07-03 10:22:11 -04:00

lint-regression-test-names.cjs

fix(ratchet): add --update drift repair + inherited-drift guidance to regression-name lint (#971)

2026-06-10 01:05:24 -04:00

lint-resolution-provenance.allowlist.json

chore(#1417): add resolution-provenance CI guard (Resolution Provenance P4) (#1428)

2026-06-18 08:50:22 -04:00

lint-resolution-provenance.cjs

chore(#1417): add resolution-provenance CI guard (Resolution Provenance P4) (#1428)

2026-06-18 08:50:22 -04:00

lint-shell-command-projection-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-skill-deps.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-test-file-count.allowlist.json

feat(#1825): configurable graphify graph location (graphify.graph_path) (#2013)

2026-07-05 14:50:01 -04:00

lint-test-file-count.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

mutation-matrix.cjs

feat(#1733): normalize-path-in-content production AST rule + fix Windows agent-skills content leak (Phase 5) (#1736)

2026-06-25 21:49:22 -04:00

pr-target-policy.cjs

refactor(#1190): extract ADR-230 PR-target branch policy into a tested, fork-safe seam (#1246)

2026-06-14 17:16:19 -04:00

pr-template-policy.cjs

fix(ci): replace minimatch with path.matchesGlob in pr-template-policy (#3701)

2026-05-18 12:41:01 -04:00

prompt-injection-scan.sh

feat(#1726): G1-G6 portability AST rules; fix all offenders; delete the ratchet (Phase 4) (#1731)

2026-06-25 18:24:39 -04:00

release-tarball-smoke.cjs

feat(#1138): make runtime descriptors authoritative (#1157)

2026-06-13 01:49:25 -04:00

research-profiles.cjs

fix(#2017): grant mcp__plugin_context7_context7__* for plugin-marketplace context7 (8 agents) (#2029)

2026-07-05 17:15:48 -04:00

run-affected-tests.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

run-tests.cjs

fix(#2088): weight install-heavy test files so they spread across chunks

2026-07-08 22:49:25 -04:00

secret-scan-lint.sh

feat(115): secret-scan exclusion governance + --strict reduced-scan mode (#134)

2026-05-23 10:58:14 -04:00

secret-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

setup-branch-protection.sh

chore(#846): remove unused PR-size labeler (size/S–XL) workflow (#848)

2026-06-07 22:03:48 -04:00

slurm-adapter.cjs

fix(#1164): wire external-job config keys + document wave:post choice (#2006)

2026-07-05 14:04:00 -04:00

strip-prose-atrefs.cjs

chore: clean up clear-cut ESLint warnings (#732) (#734)

2026-06-06 11:24:48 -04:00

sync-manifest-versions.cjs

feat(#1928): remove sunset Gemini CLI runtime, redirect to Antigravity (#1996)

2026-07-04 13:32:51 -04:00

sync-next-version.cjs

ci(#1104): keep next package.json in sync with the last published release (#1109)

2026-06-12 13:29:45 -04:00

sync-rulesets.sh

chore(#518): rename npm package + bin to @opengsd/gsd-core (#519)

2026-05-30 17:25:02 -04:00

sync-runtime-launcher.cjs

fix(#1990): keep onboard resolver delegation in sync with canonical launcher

2026-07-05 19:16:10 +00:00

test-failure-reasons.cjs

test: add typed failure classification module (#333)

2026-05-26 11:23:29 -04:00

update-size-baseline.cjs

test(#1074): agent-size-budget per-file baseline + line→byte rebase (PR 3/3) (#1097)

2026-06-12 09:58:44 -04:00

verify-npm-publish.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

workflow-policy.cjs

feat(#435): expand workflow-policy linter to full Cartesian matrix cross-product (#1050)

2026-06-11 13:36:47 -04:00

workflow-size.cjs

test(#1074): agent-size-budget per-file baseline + line→byte rebase (PR 3/3) (#1097)

2026-06-12 09:58:44 -04:00