Ned Malki 523c7199d0 fix: add path traversal validation and unit tests for planningDir ...

Reject project/workstream names containing path separators or ..
components. Covers both GSD_PROJECT and GSD_WORKSTREAM. Adds 9 tests
for the full resolution matrix and traversal rejection cases.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-02 09:18:39 +07:00

..

agent-frontmatter.test.cjs

fix: add <available_agent_types> to all workflows spawning named agents

2026-03-24 13:17:18 -04:00

agent-install-validation.test.cjs

fix: detect missing GSD agents and warn when subagent_type falls back to general-purpose

2026-03-24 21:10:25 -04:00

agent-skills.test.cjs

feat: agent skill injection via config (#1355)

2026-03-24 16:47:40 -04:00

antigravity-install.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

autonomous-ui-steps.test.cjs

fix: add ui-phase and ui-review steps to autonomous workflow

2026-03-25 15:02:06 -04:00

claude-md.test.cjs

feat(claude-md): add workflow enforcement guidance

2026-03-17 11:41:44 -04:00

codex-config.test.cjs

fix: repair trapped non-boolean keys under [features] on Codex re-install

2026-03-25 14:50:02 -04:00

commands.test.cjs

fix: create strategy branch before first commit, not at execute-phase (#1278)

2026-03-21 01:08:06 -04:00

config.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

copilot-install.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

core.test.cjs

fix: add path traversal validation and unit tests for planningDir

2026-04-02 09:18:39 +07:00

cursor-conversion.test.cjs

refactor: adopt planningPaths() across 4 modules — eliminate 34 inline path constructions

2026-03-18 23:39:47 -04:00

discuss-mode.test.cjs

fix: add text_mode support to plan-phase workflow

2026-03-22 11:21:43 -04:00

dispatcher.test.cjs

Harden verify-work checkpoint rendering

2026-03-23 14:05:33 -04:00

execute-phase-active-flags.test.cjs

Merge branch 'main' into Solvely/execute-phase-active-flags

2026-03-20 13:52:26 -04:00

execute-phase-wave.test.cjs

Merge branch 'main' into Solvely/execute-phase-active-flags

2026-03-20 13:52:26 -04:00

forensics.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

frontmatter-cli.test.cjs

fix(windows): cross-platform path separators, JSON quoting, and dollar signs

2026-02-27 11:34:36 -06:00

frontmatter.test.cjs

fix: parseMustHavesBlock now handles any YAML indentation width

2026-03-24 13:16:10 -04:00

helpers.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

hook-validation.test.cjs

fix: validate hook field requirements to prevent silent settings.json rejection

2026-03-23 22:11:54 -04:00

init-manager.test.cjs

fix(manager): address review — withProjectRoot, milestone filter, planningPaths

2026-03-21 09:13:32 -05:00

init.test.cjs

fix: update map-codebase test for refactored workflow

2026-03-23 14:10:07 -04:00

milestone-summary.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

milestone.test.cjs

fix: add verification gate before writing PROJECT.md in new-milestone

2026-03-20 22:07:57 -04:00

model-profiles.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

multi-runtime-select.test.cjs

feat: add Windsurf runtime support

2026-03-23 13:50:23 -04:00

path-replacement.test.cjs

fix: use $HOME instead of ~ in installed shell command paths (#1284)

2026-03-21 09:24:31 -04:00

phase.test.cjs

refactor: consolidate STATE.md field helpers, fix command injection in isGitIgnored

2026-03-19 15:05:20 -04:00

pick-flag.test.cjs

fix: remove jq as undocumented hard dependency (#1300)

2026-03-21 17:52:59 -04:00

profile-output.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

profile-pipeline.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

prompt-injection-scan.test.cjs

security: add prompt injection guards, path traversal prevention, and input validation

2026-03-20 11:38:26 -04:00

quick-branching.test.cjs

feat(quick): add quick-task branch support

2026-03-17 12:04:02 -04:00

quick-research.test.cjs

feat(quick): add --research flag for focused pre-planning research (#317) (#1063)

2026-03-15 11:45:25 -06:00

roadmap.test.cjs

fix(roadmap): handle 5-column progress tables with Milestone column

2026-03-19 21:30:41 +05:00

runtime-converters.test.cjs

fix: universal agent name replacement for non-Claude runtimes (#766) (#1195)

2026-03-18 19:20:58 -04:00

security-scan.test.cjs

fix: skip bash script behavioral tests on Windows

2026-03-24 13:33:58 -04:00

security.test.cjs

Harden verify-work checkpoint rendering

2026-03-23 14:05:33 -04:00

state.test.cjs

fix: preserve Status/LastActivity/Progress in Current Position during begin-phase

2026-03-24 19:25:14 -04:00

template.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

uat.test.cjs

fix: replace invalid \Z regex anchor and remove redundant pattern

2026-03-23 22:19:49 -04:00

verify-health.test.cjs

fix(health): preserve state on phase mismatch repair

2026-03-17 11:08:32 -04:00

verify.test.cjs

test(03-03): add 20 tests for verify references, commits, artifacts, key-links

2026-02-26 05:47:19 +10:00

windows-robustness.test.cjs

fix: Windows shell robustness, project_root detection, and hook stdin safety (#1343)

2026-03-23 20:20:15 -04:00

windsurf-conversion.test.cjs

feat: add Windsurf runtime support

2026-03-23 13:50:23 -04:00

workspace.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

workstream.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00