334a64168e
* chore(npm): rebrand packages to @opengsd scope Rename: - get-shit-done-redux → @opengsd/get-shit-done-redux - @gsd-redux/sdk → @opengsd/gsd-sdk Add publishConfig.access=public for first-time scoped publish. CLI binary names (get-shit-done-redux, gsd-sdk, gsd-tools) unchanged. Sweeps install commands, npx invocations, CI publish/version-check workflows, tests, docs, READMEs (all translations), and the PACKAGE_NAME constant in check-latest-version. Bumps qs 6.15.1 → 6.15.2 to clear a moderate advisory surfaced by the audit-clean test (GHSA-q8mj-m7cp-5q26). Closes #126 * chore: pin 2.0.0 release + remove canary workflow - Bump both packages 1.50.0-canary.0 → 2.0.0 for first @opengsd publish - Remove .github/workflows/canary.yml and canary dist-tag handling in release.yml / release-sdk.yml - Drop canary section from VERSIONING.md Refs #126 * chore: address review findings + harden tarball-smoke timeout - .changeset/opengsd-org-rename.md: match project's custom parse.cjs frontmatter (type: Changed / pr: 127); the scoped @changesets/cli keys were silently rejected. - CONTEXT.md: drop two canary-stream policy lines and a dangling DEFECT.CANARY-VERSION-LEAK.cross-ref now that canary.yml is gone. - tests/release-tarball-smoke.install.test.cjs: pass timeout: 600_000 for npm pack + global install; the 3-minute runNpm default was timing out on slower Docker hosts (cartographer). Refs #126 * fix(sdk): add missing type/runtime devDependencies for build prepublishOnly invokes tsc which couldn't resolve @types/node, @types/ws, or synckit. They had been hoisted from root but were not declared in sdk/'s own package.json — first publish from a clean SDK tree failed. Refs #126 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(ci): use npm pack stdout instead of glob to find tarball `npm pack --silent` for a scoped package (@opengsd/get-shit-done-redux) produces `opengsd-get-shit-done-redux-*.tgz`, not `get-shit-done-redux-*.tgz`. Capture the filename from stdout instead of a hardcoded glob so the step works regardless of package name format. Fixes smoke (ubuntu-latest, 22, false) CI failure. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * ci: treat workflow-file changes as test-skip eligible `.github/workflows/install-smoke.yml` (and other workflow files) were in neither `test.yml` paths nor `test-skip.yml` paths-ignore, so neither workflow ran on a workflow-only commit — leaving the required test-skip check perpetually missing. Refs #126 * chore: reset version to 1.0.0 for first @opengsd publish Nothing has been published yet under the @opengsd scope, so the inaugural release uses 1.0.0 rather than 2.0.0. The "major bump" in the changeset reflects the breaking install-command change for users migrating from the prior unscoped `get-shit-done-redux`, not a numeric continuation from a 1.x line under the new identity. Refs #126 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
5.7 KiB
5.7 KiB
Quick Wins: Confirmed-Bug Fixes
Status: Active
Started: 2026-05-16
Owner: Current session (Grok + user)
Context: Follow-up to /gsd-inbox triage on 2026-05-16
Goal
Land 6 high-signal, confirmed-bug issues that currently have zero open pull requests. These are the cleanest quick-win opportunities available in the public GitHub inbox right now.
All six issues carry the confirmed-bug label, meaning the bug has been verified and a fix is explicitly welcome.
The 6 Issues (Prioritized)
| # | Issue | Short Title | Type | Recommended Flow | Est. Effort | Status | Notes |
|---|---|---|---|---|---|---|---|
| 1 | #3583 | Claude skill install leaves /gsd:<cmd> in SKILL.md body |
Installer / Command namespace | PR 3629 (our branch) + competing 3586 | Small (1 file + test) | PR opened / Review | Leading PR: 3629 (cristianuibar) — reviewed + hardened with CodeRabbit feedback (left-boundary regex + body-scoped guard). Competing PR 3586 has "needs changes" + "ci: failing". Issue still carries confirmed-bug. |
| 2 | #3579 | build-hooks.js + npm publish omit graphify auto-update hook |
Packaging / Build | /gsd-quick |
Small | Not started | Classic "new feature missed in release artifact". Easy local verification. |
| 3 | #3496 | /gsd:update changelog extraction skips intermediate versions |
Workflow / Update logic | /gsd-quick or lightweight plan |
Medium-small | Not started | Needs deterministic version-range helper. |
| 4 | #3588 | Production npm audit has 1 high + 5 moderate advisories |
Security / Dependencies | Direct + careful review | Medium | Not started | Transitive via @anthropic-ai/claude-agent-sdk. May need overrides. |
| 5 | #3584 | Runtime bin/lib/*.cjs still emit /gsd:<cmd> (larger piece deferred from #3583) |
Runtime output / Slash formatter | Short plan first, then execute | Medium-Large | Not started | 16+ files. Design a centralized runtime-aware formatter. Do after #3583. |
| 6 | #3340 | SDK publish lag — agent dir fix never shipped in @opengsd/gsd-sdk@0.1.0 |
Release / SDK publishing | Plan + coordination | Medium (release-focused) | Not started | Oldest. Mostly a publishing/versioning task. |
Execution Rules for This Batch
- Branch naming:
fix/NNNN-short-description(enforced by CI) - PR template: Must use
.github/PULL_REQUEST_TEMPLATE/fix.md - Linking:
Fixes #NNNN(orCloses) in the PR body - Changeset: Required for all user-facing or security fixes
- Testing: All existing tests must pass + new coverage where the issue describes a gap
- Clean context windows: Each fix should preferably be driven from a fresh session using the prepared prompts (see session notes or ask for them)
- GSD self-use: For the small ones (#3583, #3579, #3496), using
/gsd-quick(or/gsd-fast) inside the fix session is encouraged and appropriate. For #3584, a short planning step is recommended.
Status Legend
- Not started — Issue claimed for this batch, no work begun
- In progress — Active work in a clean window
- PR opened — Pull request created and linked
- Review — Awaiting review / CI / merge fixes
- Merged — Landed on main
- Blocked — Needs input from maintainers or upstream
Current Status
- #3583 — PR opened (3629 leading after CodeRabbit review + hardening push; competing 3586 needs changes + CI failing)
- #3579 — Not started (cleanest next target — 0 PRs)
- #3496 — PR 3497 open (changes requested)
- #3588 — Not started
- #3584 — Not started (larger; deferred runtime cjs colon emissions)
- #3340 — Not started
Progress: 0 / 6 merged (1 in active review)
Process Notes
- These issues were identified during a
/gsd-inboxrun on 2026-05-16. - At the time of creation of this file, zero of the six had open PRs.
- 2026-05-16 Grok session: Reviewed PR 3629 (our #3583 fix) for CodeRabbit comments. 1 critical was false-positive (scripts/ is published per package.json "files" + npm pack). Applied the 2 valid suggestions (bidirectional word-boundary lookbehind in
buildColonPattern+ body-only scope for the colon-ref regression guard in the test). Tests pass. Pushed hardening commit to the fork branch. Competing PR 3586 exists but is behind on CI/review status. - Work is intended to be done in parallel clean context windows (one issue per fresh Claude/Codex/Gemini session) using dedicated prompts.
- After each fix is complete in its window, the resulting branch + PR description should be brought back here for final review and opening.
- This file serves as the single source of truth for the current batch while execution is in progress. It can be deleted or moved to
docs/archive/once all six PRs are merged.
Related Artifacts
- Inbox triage report:
/tmp/GSD-INBOX-TRIAGE-2026-05-16.md(from the/gsd-inboxrun) - Full issue list with
confirmed-buglabel:gh issue list --state open --label confirmed-bug
Next action: #3583 now has active PR(s) under review. Next clean quick win (0 PRs, small packaging effort, high value for recently-landed graphify feature): #3579. Validated via GitHub search: no PRs mention 3579. Ready for /gsd-quick or direct fix (update scripts/build-hooks.js HOOKS_TO_COPY + ensure hooks/lib/ copy in installer + fix any publish filter).
This document will be updated as status changes.