Tibsfox 5371622021 fix(manager): validate flag tokens to prevent injection via config (#1410) ...

Address review feedback: sanitize manager.flags values to allow only
CLI-safe tokens (--flag patterns and alphanumeric values). Invalid
tokens are dropped with a stderr warning. Prevents prompt injection
via compromised config.json.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-02 16:02:53 -07:00

..

agent-frontmatter.test.cjs

fix(agents): remove permissionMode that breaks Gemini CLI agent loading (#1522)

2026-04-01 14:37:41 -07:00

agent-install-validation.test.cjs

fix: detect missing GSD agents and warn when subagent_type falls back to general-purpose

2026-03-24 21:10:25 -04:00

agent-skills.test.cjs

feat: agent skill injection via config (#1355)

2026-03-24 16:47:40 -04:00

antigravity-install.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

augment-conversion.test.cjs

feat: add Augment Code runtime support

2026-04-01 22:24:33 +01:00

autonomous-interactive.test.cjs

feat(autonomous): add --interactive flag for lean context with user input

2026-04-01 14:58:52 -07:00

autonomous-ui-steps.test.cjs

fix: add ui-phase and ui-review steps to autonomous workflow

2026-03-25 15:02:06 -04:00

claude-md.test.cjs

fix: list all supported skill directories in fallback text

2026-03-31 16:24:59 -03:00

claude-skills-migration.test.cjs

fix: migrate Claude Code commands/ to skills/ format for 2.1.88+ compatibility

2026-04-01 17:04:53 -04:00

codex-config.test.cjs

fix(install): add .claude path replacement for Codex runtime

2026-03-27 17:41:03 -07:00

commands.test.cjs

feat(hooks): add check-commit guard for commit_docs enforcement (#1395)

2026-04-01 16:11:00 -07:00

concurrency-safety.test.cjs

fix(core): add concurrency safety and atomic state writes

2026-04-02 04:28:06 -07:00

config.test.cjs

test(config): add config-get tests for git.base_branch

2026-04-01 14:56:55 -07:00

context-enrichment.test.cjs

feat(workflows): adaptive context enrichment for 1M models

2026-04-02 04:16:24 -07:00

copilot-install.test.cjs

Merge pull request #1428 from Tibsfox/fix/preserve-profile-on-update-1423

2026-04-02 18:01:30 -04:00

core.test.cjs

Merge pull request #1484 from NedMalki-Chief/feature/multi-project-workspace

2026-04-02 18:03:20 -04:00

cursor-conversion.test.cjs

refactor: adopt planningPaths() across 4 modules — eliminate 34 inline path constructions

2026-03-18 23:39:47 -04:00

discuss-checkpoint.test.cjs

fix(discuss): incremental checkpoint saves to prevent answer loss on interrupt

2026-03-30 13:55:33 -07:00

discuss-mode.test.cjs

fix: add text_mode support to plan-phase workflow

2026-03-22 11:21:43 -04:00

dispatcher.test.cjs

Harden verify-work checkpoint rendering

2026-03-23 14:05:33 -04:00

docs-update.test.cjs

feat: add /gsd:docs-update command for verified documentation generation (#1532)

2026-04-01 08:47:31 -06:00

execute-phase-active-flags.test.cjs

Merge branch 'main' into Solvely/execute-phase-active-flags

2026-03-20 13:52:26 -04:00

execute-phase-wave.test.cjs

test(config): add config-get/set roundtrip and cross-workflow structural tests for use_worktrees

2026-03-29 14:42:08 -07:00

forensics.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

frontmatter-cli.test.cjs

fix(windows): cross-platform path separators, JSON quoting, and dollar signs

2026-02-27 11:34:36 -06:00

frontmatter.test.cjs

fix: parseMustHavesBlock now handles any YAML indentation width

2026-03-24 13:16:10 -04:00

health-validation.test.cjs

fix(health): STATE/ROADMAP cross-validation and config checks

2026-04-02 04:20:02 -07:00

helpers.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

hook-validation.test.cjs

fix: validate hook field requirements to prevent silent settings.json rejection

2026-03-23 22:11:54 -04:00

hooks-opt-in.test.cjs

feat(hooks): add opt-in community hooks for GSD projects

2026-04-02 04:23:44 -07:00

init-manager.test.cjs

fix(manager): validate flag tokens to prevent injection via config (#1410)

2026-04-02 16:02:53 -07:00

init.test.cjs

fix: update map-codebase test for refactored workflow

2026-03-23 14:10:07 -04:00

milestone-summary.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

milestone.test.cjs

fix: add verification gate before writing PROJECT.md in new-milestone

2026-03-20 22:07:57 -04:00

model-profiles.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

multi-runtime-select.test.cjs

feat: add Augment Code runtime support

2026-04-01 22:24:33 +01:00

opencode-permissions.test.cjs

test(opencode): align regression test with contributing guide

2026-04-02 11:57:54 -05:00

path-replacement.test.cjs

fix: use $HOME instead of ~ in installed shell command paths (#1284)

2026-03-21 09:24:31 -04:00

phase.test.cjs

Merge pull request #1447 from rahuljordashe/fix/phase-complete-roadmap-rollup

2026-04-01 17:20:14 -04:00

pick-flag.test.cjs

fix: remove jq as undocumented hard dependency (#1300)

2026-03-21 17:52:59 -04:00

profile-output.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

profile-pipeline.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

prompt-injection-scan.test.cjs

security: add prompt injection guards, path traversal prevention, and input validation

2026-03-20 11:38:26 -04:00

quick-branching.test.cjs

feat(quick): add quick-task branch support

2026-03-17 12:04:02 -04:00

quick-commit-boundary.test.cjs

fix(quick): enforce commit boundary between executor and orchestrator

2026-03-30 20:23:29 -07:00

quick-research.test.cjs

feat(quick): make --full include all phases, add --validate flag

2026-03-31 09:07:08 -04:00

reapply-patches.test.cjs

fix(reapply-patches): three-way merge and never-skip invariant for backed-up files

2026-03-29 10:04:22 -07:00

roadmap.test.cjs

fix(roadmap): handle 5-column progress tables with Milestone column

2026-03-19 21:30:41 +05:00

runtime-converters.test.cjs

fix: universal agent name replacement for non-Claude runtimes (#766) (#1195)

2026-03-18 19:20:58 -04:00

schema-drift.test.cjs

feat: add schema drift detection to prevent false-positive verification

2026-04-01 16:53:20 -04:00

secure-phase.test.cjs

test: add secure-phase validation suite (42 tests)

2026-03-25 16:25:32 +02:00

security-scan.test.cjs

fix: skip bash script behavioral tests on Windows

2026-03-24 13:33:58 -04:00

security.test.cjs

Harden verify-work checkpoint rendering

2026-03-23 14:05:33 -04:00

settings-jsonc.test.cjs

fix(install): handle JSONC (comments) in settings.json without data loss

2026-03-30 13:52:51 -07:00

state.test.cjs

fix: preserve Status/LastActivity/Progress in Current Position during begin-phase

2026-03-24 19:25:14 -04:00

subagent-timeout.test.cjs

test(config): add automated tests for context_window and subagent_timeout

2026-04-01 14:57:25 -07:00

template.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

uat.test.cjs

fix: replace invalid \Z regex anchor and remove redundant pattern

2026-03-23 22:19:49 -04:00

verify-health.test.cjs

fix(health): preserve state on phase mismatch repair

2026-03-17 11:08:32 -04:00

verify.test.cjs

test(03-03): add 20 tests for verify references, commits, artifacts, key-links

2026-02-26 05:47:19 +10:00

windows-robustness.test.cjs

fix: Windows shell robustness, project_root detection, and hook stdin safety (#1343)

2026-03-23 20:20:15 -04:00

windsurf-conversion.test.cjs

fix(windsurf): remove trailing slash from .windsurf/rules path

2026-03-26 01:13:46 -07:00

workspace.test.cjs

refactor: replace try/finally with beforeEach/afterEach + add CONTRIBUTING.md

2026-03-24 15:45:39 -04:00

workstream.test.cjs

fix(workstream): require name arg for set, add --clear flag (#1527)

2026-04-01 14:35:00 -07:00

worktree-cleanup.test.cjs

fix(worktree): add post-execution cleanup for orphan worktrees

2026-03-30 13:57:56 -07:00