0xdhx 253250580e fix(#2665): wire the live-config guard to strict mode on Linux/macOS CI lanes ...

Review round 4, Major 2, answering the explicit report-only-vs-strict
question: strict now. A future regression of the class this PR closes
should fail CI, not print a warning nobody reads — that is what the PR
title promises.

Scoped deliberately: GSD_STRICT_LIVE_CONFIG_GUARD=1 on the Linux/macOS
lanes of all three test jobs; Windows lanes stay report-only because the
guard's first run found pre-existing USERPROFILE leaks there (~190 test
sites sandbox HOME alone) — flipping them strict today reddens next on a
defect class this PR does not carry. Promote once that sweep lands (the
SEVERITY note in live-config-guard.cjs and the CONTEXT.md seam both now
record that state).

2026-08-08 05:50:49 -05:00

..

changeset

fix(#3001): indent continuation lines in serializeChangelog (#3101)

2026-08-05 22:22:30 -04:00

lib

test(#1074): add additive per-file workflow size baseline guard (PR 1/3) (#1089)

2026-06-11 23:59:56 -04:00

release-notes

fix(#2716): route non-user-facing conventional types to an Internal bucket, omit from release notes (#2838)

2026-07-29 17:06:04 -04:00

affected-tests-lib.cjs

fix: recover silently-excluded test dirs + test-architecture audit hardening (#1195)

2026-06-13 23:35:08 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

build-hooks.js

fix(#3045): fail closed when an executor dispatch drops its resolved isolation (#3069)

2026-08-04 23:42:16 -04:00

check-alias-drift.cjs

enhance(#1579): deterministic gsd-tools query eval.score verb (#1583)

2026-06-24 17:16:13 -04:00

check-coverage-gate.cjs

fix(#2474): gate worktree dispatch on project-level USE_WORKTREES too (#2561)

2026-07-23 09:14:02 -04:00

check-env.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

check-glossary-refs.cjs

enhance(#2778): make the size-ratchet failure name its own remedy (#2780)

2026-07-28 18:26:55 -04:00

check-npm-integrity.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-guard-runner.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-prepare-test-scope.cjs

fix(#1329): existence-filter scoped-CI fallback so a deleted test can't crash the lane

2026-06-16 08:38:55 -04:00

ci-rebase-check.cjs

fix(#2472): cost-balanced test sharding and pinned CI base commit (#2480)

2026-07-21 09:15:59 -04:00

ci-test-scope.cjs

refactor(#2724): delete the committed golden fixtures and size baselines (#2767)

2026-07-28 15:41:43 -04:00

command-contract-helpers.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

diff-touches-shipped-paths.cjs

chore(#1328): remove orphaned root vitest.config.ts left by SDK retirement

2026-06-16 08:24:21 -04:00

fix-slash-commands.cjs

fix(#1223): install scripts/fix-slash-commands.cjs so gsd-tools loads (#1240)

2026-06-14 16:03:26 -04:00

gen-adr-index.cjs

fix(#2691): repair seven dangling references in the ADR corpus and contributor docs (#2692)

2026-07-28 18:02:11 -04:00

gen-capability-matrix.cjs

fix(#2903): use the command form that actually works in reader-facing docs (#3047)

2026-08-04 13:23:44 -04:00

gen-capability-registry.cjs

chore(#2797): federate reviewer config keys off the central schema (#2841)

2026-07-30 08:52:56 -04:00

gen-context-index.cjs

chore(#2928): productionize the CONTEXT.md predicate fact-store and gate it in CI (#2938)

2026-07-31 13:17:01 -04:00

gen-emitted-baseline.cjs

refactor(#2724): delete the committed golden fixtures and size baselines (#2767)

2026-07-28 15:41:43 -04:00

gen-install-tree-fixtures.cjs

refactor(#2267): golden-parity file-set snapshot + anti-staleness CI selection (#2274)

2026-07-14 19:22:13 -04:00

gen-inventory-manifest.cjs

chore(#2996): inventory the workflow fragment tree as its own manifest families (#3061)

2026-08-04 18:51:12 -04:00

gen-loop-host-contract.cjs

fix(#1196): wire discuss loop step for capability hooks (#1199)

2026-06-14 01:39:54 -04:00

gen-plugin-skills.cjs

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gen-prompt-budget-parity-corpus.cjs

chore(#2929): generalize prompt-budget into the shared context-composer seam (#2958)

2026-07-31 23:03:13 -04:00

gen-registry.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

gen-research-agents.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

gen-section-manifest.cjs

chore(#1671): widen the when= grammar and key the section manifest per workflow — Phase 6.1 (#3013)

2026-08-02 22:36:45 -04:00

gen-test-timings.cjs

fix(#2456): weight test chunks by measured cost and pack with LPT (#2463)

2026-07-20 16:51:35 -04:00

generate-package-identity.cjs

fix(#2544): stage the CommonJS marker in GSD-owned dirs, not the config root (#2593)

2026-08-01 21:00:23 -04:00

issue-dedupe.cjs

feat(#836): no-LLM duplicate-issue detection + challenge + 1-day auto-close (#843)

2026-06-07 20:35:43 -04:00

issue-version-gate.cjs

feat(#1180): hard-gate the GSD Version requirement on bug reports (#1181)

2026-06-13 16:13:00 -04:00

lint-allow-test-rule-refs.allowlist.json

test(#3090): normalize the whole reason line, not just the category token

2026-08-05 18:28:04 -04:00

lint-allow-test-rule-refs.cjs

fix: recover silently-excluded test dirs + test-architecture audit hardening (#1195)

2026-06-13 23:35:08 -04:00

lint-command-contract.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-compiled-artifact-sync.cjs

fix(#2657): untrack the nine ADR-457 migration-gap compiled artifacts (#3011)

2026-08-02 21:22:43 -04:00

lint-descriptions.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-docs-command-form.cjs

fix(#2903): use the command form that actually works in reader-facing docs (#3047)

2026-08-04 13:23:44 -04:00

lint-docs-required.cjs

fix(#2988): local changeset/docs lint falls back to next, not main (#3095)

2026-08-05 19:27:07 -04:00

lint-emitted-drift-ack.cjs

fix(#2914): per-PR ack fragments instead of one shared mutable file (#2923)

2026-07-31 13:15:29 -04:00

lint-example-parser-parity.cjs

fix(#2944): remove the catastrophic-backtracking regex from the ADR-1671 example (#2950)

2026-07-31 15:44:19 -04:00

lint-fix-has-regression-test.cjs

fix: add regression-test-presence gate + missing tests for #2429/#2279 (#2563)

2026-07-23 12:13:12 -04:00

lint-legacy-dir-name.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-package-identity-drift.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

lint-phase-id-drift.cjs

fix(#2128): sanctions must be a dedicated // comment line (decoy-proof)

2026-07-10 09:24:49 -04:00

lint-plan-count-drift.cjs

refactor(#3183): route live-plan counting through scanPhasePlans (#3199)

2026-08-08 01:20:55 -04:00

lint-portable-timeout.cjs

fix(#2351): replace hardcoded timeout with portable run-with-timeout (#2426)

2026-07-19 14:37:15 -04:00

lint-pr-check-project-dir.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-regression-test-names.allowlist.json

test(#1975): consolidate 51 CLI + scripts-tooling regression tests into module suites

2026-07-03 10:22:11 -04:00

lint-regression-test-names.cjs

fix(ratchet): add --update drift repair + inherited-drift guidance to regression-name lint (#971)

2026-06-10 01:05:24 -04:00

lint-resolution-provenance.allowlist.json

chore(#1417): add resolution-provenance CI guard (Resolution Provenance P4) (#1428)

2026-06-18 08:50:22 -04:00

lint-resolution-provenance.cjs

fix(#1880): distinguish a corrupt config from an absent one (epic #1879 Phase 1) (#2688)

2026-07-27 00:09:13 -04:00

lint-shell-command-projection-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-skill-deps.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-table-schema-drift.cjs

chore(#2143): prohibition-with-teeth + migrate remaining ad-hoc table sites — Phase 4 (final) (#2253)

2026-07-14 14:25:44 -04:00

lint-test-file-count.allowlist.json

feat(#3149): add dedicated init.debug entry point for /gsd:debug

2026-08-07 09:30:27 -04:00

lint-test-file-count.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

live-config-guard.cjs

fix(#2665): wire the live-config guard to strict mode on Linux/macOS CI lanes

2026-08-08 05:50:49 -05:00

mutation-matrix.cjs

chore(#2929): generalize prompt-budget into the shared context-composer seam (#2958)

2026-07-31 23:03:13 -04:00

pr-target-policy.cjs

refactor(#1190): extract ADR-230 PR-target branch policy into a tested, fork-safe seam (#1246)

2026-06-14 17:16:19 -04:00

pr-template-policy.cjs

fix(ci): replace minimatch with path.matchesGlob in pr-template-policy (#3701)

2026-05-18 12:41:01 -04:00

prompt-injection-scan.sh

fix(#3023): stage pi's shared hook bundle outside pi's reserved hooks/ directory (#3175)

2026-08-07 13:41:21 -04:00

qa-smell-ratchet.cjs

test(#2966): loop QA walk — drive real scenarios across all five loop steps (#2976)

2026-08-01 16:13:28 -04:00

registry-schema.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

release-tarball-smoke.cjs

fix(#2335): normalize volta node image paths to the stable shim (#2375)

2026-07-17 12:38:37 -04:00

research-profiles.cjs

fix(#2017): grant mcp__plugin_context7_context7__* for plugin-marketplace context7 (8 agents) (#2029)

2026-07-05 17:15:48 -04:00

run-affected-tests.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

run-tests.cjs

test(#2665): widen the hermeticity guard to its two blind surfaces, and cover its budget

2026-08-08 05:50:36 -05:00

secret-scan-lint.sh

feat(115): secret-scan exclusion governance + --strict reduced-scan mode (#134)

2026-05-23 10:58:14 -04:00

secret-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

setup-branch-protection.sh

chore(#846): remove unused PR-size labeler (size/S–XL) workflow (#848)

2026-06-07 22:03:48 -04:00

slurm-adapter.cjs

fix(#1164): wire external-job config keys + document wave:post choice (#2006)

2026-07-05 14:04:00 -04:00

strip-prose-atrefs.cjs

chore: clean up clear-cut ESLint warnings (#732) (#734)

2026-06-06 11:24:48 -04:00

sync-manifest-versions.cjs

feat(#1928): remove sunset Gemini CLI runtime, redirect to Antigravity (#1996)

2026-07-04 13:32:51 -04:00

sync-next-version.cjs

ci(#1104): keep next package.json in sync with the last published release (#1109)

2026-06-12 13:29:45 -04:00

sync-rulesets.sh

chore(#518): rename npm package + bin to @opengsd/gsd-core (#519)

2026-05-30 17:25:02 -04:00

sync-runtime-launcher.cjs

fix(#1990): keep onboard resolver delegation in sync with canonical launcher

2026-07-05 19:16:10 +00:00

test-failure-reasons.cjs

test: add typed failure classification module (#333)

2026-05-26 11:23:29 -04:00

validate-registry.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

verify-npm-publish.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

workflow-policy.cjs

feat(#435): expand workflow-policy linter to full Cartesian matrix cross-product (#1050)

2026-06-11 13:36:47 -04:00

workflow-size.cjs

refactor(#2724): delete the committed golden fixtures and size baselines (#2767)

2026-07-28 15:41:43 -04:00