Tom Boucher 4af59f8dd3 fix(#3662): resolve managed hook node runners at hook-fire time (#3790) ...

* test(#3662): failing-first suite for runtime-resolving hook runners

* fix(#3662): resolve managed hook node runners at hook-fire time

* fix(#3662): close review findings and document the resolver

* fix(#3662): close adversarial and security review findings

* chore(#3662): backfill changeset pr number

* test(#3662): honor win32 skip return and platform-aware sh runner pin

* test(#3662): pin the bare win32-claude sh-hook shape omitting the bash runner

---------

Co-authored-by: sim <sim@local>

2026-08-24 00:07:06 -04:00

..

baselines

feat(#3409): reject shell guards that cannot observe their own failure arm (#3558)

2026-08-15 21:09:05 -04:00

changeset

fix(#3620): point the docs at files that actually exist (#3658)

2026-08-19 01:54:01 -04:00

lib

fix(#2725): repoint the pre-commit alias guard at sources git can actually stage, drop nine dead ones (#3273)

2026-08-09 18:29:16 -04:00

release-notes

fix(#2716): route non-user-facing conventional types to an Internal bucket, omit from release notes (#2838)

2026-07-29 17:06:04 -04:00

affected-tests-lib.cjs

fix: recover silently-excluded test dirs + test-architecture audit hardening (#1195)

2026-06-13 23:35:08 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

build-hooks.js

fix(#3662): resolve managed hook node runners at hook-fire time (#3790)

2026-08-24 00:07:06 -04:00

check-alias-drift.cjs

fix(#2725): repoint the pre-commit alias guard at sources git can actually stage, drop nine dead ones (#3273)

2026-08-09 18:29:16 -04:00

check-contract-drift.cjs

enh(#3565): sentinel/contract registry + check:contract-drift lint (#3571)

2026-08-16 12:59:08 -04:00

check-coverage-gate.cjs

fix(#2474): gate worktree dispatch on project-level USE_WORKTREES too (#2561)

2026-07-23 09:14:02 -04:00

check-env.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

check-glossary-refs.cjs

fix(#3604): make glossary ref visibility independent of backtick parity (#3680)

2026-08-19 13:51:40 -04:00

check-npm-integrity.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-guard-runner.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-prepare-test-scope.cjs

fix(#1329): existence-filter scoped-CI fallback so a deleted test can't crash the lane

2026-06-16 08:38:55 -04:00

ci-rebase-check.cjs

fix(#2472): cost-balanced test sharding and pinned CI base commit (#2480)

2026-07-21 09:15:59 -04:00

ci-test-scope.cjs

chore(#3212): bounded quantifiers over document content — prohibition with teeth — Phase 4 (#3441)

2026-08-14 10:02:28 -04:00

command-contract-helpers.cjs

enh(#3565): sentinel/contract registry + check:contract-drift lint (#3571)

2026-08-16 12:59:08 -04:00

diff-touches-shipped-paths.cjs

chore(#1328): remove orphaned root vitest.config.ts left by SDK retirement

2026-06-16 08:24:21 -04:00

docs-guard-registry.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

fix-slash-commands.cjs

fix(#1223): install scripts/fix-slash-commands.cjs so gsd-tools loads (#1240)

2026-06-14 16:03:26 -04:00

gen-adr-index.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

gen-capability-matrix.cjs

fix(#2903): use the command form that actually works in reader-facing docs (#3047)

2026-08-04 13:23:44 -04:00

gen-capability-registry.cjs

fix(#3606): validate hook-kind coverage at call sites and dispatch generically (#3687)

2026-08-19 16:41:27 -04:00

gen-context-index.cjs

chore(#3212): src/text-lines.cts is the sole owner of line-terminator handling — Phase 2 (#3420)

2026-08-13 20:27:48 -04:00

gen-emitted-baseline.cjs

refactor(#2724): delete the committed golden fixtures and size baselines (#2767)

2026-07-28 15:41:43 -04:00

gen-health-docs.cjs

feat(#3309): generate health.md's error-code and repair-action tables

2026-08-13 03:13:25 -04:00

gen-install-tree-fixtures.cjs

refactor(#2267): golden-parity file-set snapshot + anti-staleness CI selection (#2274)

2026-07-14 19:22:13 -04:00

gen-inventory-manifest.cjs

fix: scan bin/lib subdirectories in the inventory-manifest generator

2026-08-13 02:56:12 -04:00

gen-loop-host-contract.cjs

fix(#3606): validate hook-kind coverage at call sites and dispatch generically (#3687)

2026-08-19 16:41:27 -04:00

gen-plugin-skills.cjs

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gen-prompt-budget-parity-corpus.cjs

chore(#2929): generalize prompt-budget into the shared context-composer seam (#2958)

2026-07-31 23:03:13 -04:00

gen-registry.cjs

chore(#3212): src/text-lines.cts is the sole owner of line-terminator handling — Phase 2 (#3420)

2026-08-13 20:27:48 -04:00

gen-research-agents.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

gen-section-manifest.cjs

chore(#1671): widen the when= grammar and key the section manifest per workflow — Phase 6.1 (#3013)

2026-08-02 22:36:45 -04:00

gen-test-timings.cjs

fix(#2456): weight test chunks by measured cost and pack with LPT (#2463)

2026-07-20 16:51:35 -04:00

generate-package-identity.cjs

fix(#2544): stage the CommonJS marker in GSD-owned dirs, not the config root (#2593)

2026-08-01 21:00:23 -04:00

gsd-test-gate-reasons.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

issue-dedupe.cjs

feat(#836): no-LLM duplicate-issue detection + challenge + 1-day auto-close (#843)

2026-06-07 20:35:43 -04:00

issue-version-gate.cjs

feat(#1180): hard-gate the GSD Version requirement on bug reports (#1181)

2026-06-13 16:13:00 -04:00

lint-allow-test-rule-refs.allowlist.json

test(#3523): rewrite two undetected source-greps as behavioral tests (#3548)

2026-08-15 13:53:18 -04:00

lint-allow-test-rule-refs.cjs

test(#3523): rewrite two undetected source-greps as behavioral tests (#3548)

2026-08-15 13:53:18 -04:00

lint-allow-test-rule-refs.effective-ceiling.json

chore(#3520): ratchet on effective exemptions, track unverified separately (#3529)

2026-08-15 00:33:31 -04:00

lint-allow-test-rule-refs.unverified-ceiling.json

chore(#3520): ratchet on effective exemptions, track unverified separately (#3529)

2026-08-15 00:33:31 -04:00

lint-canary-version-leak.cjs

chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)

2026-08-10 12:55:52 -04:00

lint-command-contract.cjs

chore(#3560): delete two unreachable workflows, gate workflow reachability in lint (#3564)

2026-08-15 23:29:30 -04:00

lint-compiled-artifact-sync.cjs

fix(#2657): untrack the nine ADR-457 migration-gap compiled artifacts (#3011)

2026-08-02 21:22:43 -04:00

lint-completion-predicate-drift.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

lint-completion-ratio-drift.cjs

refactor(#3180): ADR-3180 behavior contract + cross-surface drift guardrails (#3223)

2026-08-08 16:05:17 -04:00

lint-default-flip-documentation.cjs

chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)

2026-08-10 12:55:52 -04:00

lint-descriptions.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-docs-command-form.cjs

fix(#2903): use the command form that actually works in reader-facing docs (#3047)

2026-08-04 13:23:44 -04:00

lint-docs-guard-registration.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-docs-guard-registration.exempt-baseline.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-docs-required.cjs

fix(#2988): local changeset/docs lint falls back to next, not main (#3095)

2026-08-05 19:27:07 -04:00

lint-emitted-drift-ack.cjs

fix(#2914): per-PR ack fragments instead of one shared mutable file (#2923)

2026-07-31 13:15:29 -04:00

lint-eslint-glob-coverage.allowlist.json

fix(#3477): run untrusted key_links patterns on a linear-time engine (#3496)

2026-08-14 14:34:36 -04:00

lint-eslint-glob-coverage.cjs

chore(#3059): close the ESLint glob-coverage escape and guard it (#3277)

2026-08-09 19:35:34 -04:00

lint-example-parser-parity.cjs

fix(#2944): remove the catastrophic-backtracking regex from the ADR-1671 example (#2950)

2026-07-31 15:44:19 -04:00

lint-fix-has-regression-tests.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-frontmatter-scalar-broad-grep.cjs

chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)

2026-08-10 12:55:52 -04:00

lint-health-diagnostic-rule-table.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-hooks-runtime-build-seam.cjs

fix(#3582): route every hook's compiled-module require through the self-heal build seam (#3629)

2026-08-18 14:11:23 -04:00

lint-legacy-dir-name.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-milestone-window-drift.cjs

refactor(#3309): migrate cmdValidateHealth onto the rule table

2026-08-13 02:28:49 -04:00

lint-no-adhoc-regex-escape.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

lint-package-identity-drift.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

lint-phase-enumeration-drift.cjs

fix(#3577): recognize markdown-table phase rows across the roadmap enumeration family (#3599)

2026-08-17 16:50:24 -04:00

lint-phase-id-drift.cjs

fix(#2128): sanctions must be a dedicated // comment line (decoy-proof)

2026-07-10 09:24:49 -04:00

lint-plan-count-drift.cjs

fix(#3458): scan archived milestone phases, and make [A] Acknowledge actually suppress (#3555)

2026-08-15 17:00:52 -04:00

lint-planning-artifact-writer-drift.cjs

enhance(#3180): the sibling validators share one envelope and one owner — Phase 12 (#3407)

2026-08-13 11:31:16 -04:00

lint-planning-prompt-drift.cjs

fix(#3640): isolate the drift cli e2e fixture via a --root override (#3722)

2026-08-20 16:15:22 -04:00

lint-planning-snapshot-bypass-drift.cjs

refactor(#3308): add planning-snapshot.cts parsed projection per ADR-3180 §8.1

2026-08-12 21:43:39 -04:00

lint-portable-timeout.cjs

fix(#2351): replace hardcoded timeout with portable run-with-timeout (#2426)

2026-07-19 14:37:15 -04:00

lint-pr-check-project-dir.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-regression-test-names.allowlist.json

test(#1975): consolidate 51 CLI + scripts-tooling regression tests into module suites

2026-07-03 10:22:11 -04:00

lint-regression-test-names.cjs

chore(#3339): extend BUG_FILE_RE to fix-/issue- prefixes, close H3 (#3315)

2026-08-12 08:28:17 -04:00

lint-removed-but-needed.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-resolution-provenance.allowlist.json

chore(#1417): add resolution-provenance CI guard (Resolution Provenance P4) (#1428)

2026-06-18 08:50:22 -04:00

lint-resolution-provenance.cjs

fix(#1880): distinguish a corrupt config from an absent one (epic #1879 Phase 1) (#2688)

2026-07-27 00:09:13 -04:00

lint-shell-command-projection-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-skill-deps.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-source-test-name-collision.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-state-field-drift.cjs

refactor(#3187): give state field extraction one canonical owner (#3283)

2026-08-09 22:49:39 -04:00

lint-state-write-path-drift.cjs

refactor(#3469): one composition for the STATE.md write seam (#3501)

2026-08-14 16:04:09 -04:00

lint-table-schema-drift.cjs

chore(#2143): prohibition-with-teeth + migrate remaining ad-hoc table sites — Phase 4 (final) (#2253)

2026-07-14 14:25:44 -04:00

lint-test-file-count.allowlist.json

fix(#3606): validate hook-kind coverage at call sites and dispatch generically (#3687)

2026-08-19 16:41:27 -04:00

lint-test-file-count.cjs

enhance(#2401): ground verify-command paths and inherit prior-phase commands (#3678)

2026-08-19 15:21:15 -04:00

lint-unreachable-guard-drift.cjs

feat(#3409): reject shell guards that cannot observe their own failure arm (#3558)

2026-08-15 21:09:05 -04:00

lint-vendored-deps.cjs

fix(#3477): run untrusted key_links patterns on a linear-time engine (#3496)

2026-08-14 14:34:36 -04:00

live-config-guard.cjs

fix(#2665): stop watching shared ground, and derive the artifact prefix too

2026-08-08 05:50:49 -05:00

mutation-matrix.cjs

fix(#3007): resolve Codex reasoning effort per model and make every clamp visible (#3765)

2026-08-22 20:51:55 -04:00

pr-changed-files.cjs

chore(#3211): accept a non-closing issue reference for docs/test-only PRs (#3289)

2026-08-09 21:38:53 -04:00

pr-target-policy.cjs

refactor(#1190): extract ADR-230 PR-target branch policy into a tested, fork-safe seam (#1246)

2026-06-14 17:16:19 -04:00

pr-template-policy.cjs

chore(#3211): accept a non-closing issue reference for docs/test-only PRs (#3289)

2026-08-09 21:38:53 -04:00

prompt-injection-scan.sh

fix(#2528): resolve digit-leading phase directories by bare number (#2559)

2026-08-12 20:45:04 -04:00

qa-smell-ratchet.cjs

fix(#3597): count scenario expectation failures in the QA gate, and fix the workstream scope split it exposed (#3607)

2026-08-18 07:26:28 -04:00

registry-schema.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

release-tarball-smoke.cjs

fix(#2335): normalize volta node image paths to the stable shim (#2375)

2026-07-17 12:38:37 -04:00

require-issue-link-policy.cjs

chore(#3211): accept a non-closing issue reference for docs/test-only PRs (#3289)

2026-08-09 21:38:53 -04:00

research-profiles.cjs

fix(#2017): grant mcp__plugin_context7_context7__* for plugin-marketplace context7 (8 agents) (#2029)

2026-07-05 17:15:48 -04:00

run-affected-tests.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

run-tests.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

secret-scan-lint.sh

feat(115): secret-scan exclusion governance + --strict reduced-scan mode (#134)

2026-05-23 10:58:14 -04:00

secret-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

select-docs-guards.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

setup-branch-protection.sh

chore(#846): remove unused PR-size labeler (size/S–XL) workflow (#848)

2026-06-07 22:03:48 -04:00

slurm-adapter.cjs

fix(#1164): wire external-job config keys + document wave:post choice (#2006)

2026-07-05 14:04:00 -04:00

state-write-path-drift-baseline.json

refactor(#3469): one composition for the STATE.md write seam (#3501)

2026-08-14 16:04:09 -04:00

strip-prose-atrefs.cjs

chore: clean up clear-cut ESLint warnings (#732) (#734)

2026-06-06 11:24:48 -04:00

sync-manifest-versions.cjs

feat(#1928): remove sunset Gemini CLI runtime, redirect to Antigravity (#1996)

2026-07-04 13:32:51 -04:00

sync-next-version.cjs

ci(#1104): keep next package.json in sync with the last published release (#1109)

2026-06-12 13:29:45 -04:00

sync-rulesets.sh

chore(#518): rename npm package + bin to @opengsd/gsd-core (#519)

2026-05-30 17:25:02 -04:00

sync-runtime-launcher.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

validate-registry.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

verify-npm-publish.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

workflow-policy.cjs

feat(#435): expand workflow-policy linter to full Cartesian matrix cross-product (#1050)

2026-06-11 13:36:47 -04:00

workflow-size.cjs

refactor(#2724): delete the committed golden fixtures and size baselines (#2767)

2026-07-28 15:41:43 -04:00