Tom Boucher 1a1ad2ec87 Merge origin/main into feat/3597-split-suites-node-matrix ...

Resolves conflict in .github/workflows/test.yml: keep the 6 new drift-check
steps from main (plan-scan, secrets, schema-detect, decisions,
workstream-name-policy, Shared Module hand-sync) before the split-lane test
runs from this PR. PR's dedicated `coverage` job replaces main's per-matrix
`Run tests with coverage` step.

Other conflicting files (CONTRIBUTING.md, get-shit-done/bin/lib/init.cjs,
package.json) auto-merged cleanly. Changeset files (.changeset/*) brought in
from main as adds.

2026-05-16 13:22:07 -04:00

..

changeset

Enforce documentation updates via lint:docs + PR templates (#3651)

2026-05-16 13:09:54 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

ci(security): add prompt injection, base64, and secret scanning

2026-03-24 13:23:51 -04:00

build-hooks.js

fix(3579): ship graphify hook + lib/ helper through build-hooks + install (#3640)

2026-05-16 13:14:19 -04:00

command-contract-helpers.cjs

fix(3597): windows test parity batch — CRLF parsers, ESM file URLs, posix-tmp, bash-only skips, retry bump

2026-05-16 12:03:44 -04:00

diff-touches-shipped-paths.cjs

fix(3621): release-sdk hotfix cherry-picks test-fixture commits (#3623)

2026-05-15 22:43:21 -04:00

fix-slash-commands.cjs

fix(3583): normalize retired colon-form commands in generated Claude/Qwen/Hermes SKILL.md bodies (#3629)

2026-05-16 13:09:58 -04:00

gen-inventory-manifest.cjs

docs: close doc drift vectors — bidirectional parity, manifest, schema-driven config (#2479)

2026-04-20 09:39:05 -04:00

lint-command-contract.cjs

fix: apply CodeRabbit auto-fixes

2026-05-05 22:36:38 +00:00

lint-descriptions.cjs

feat(#2789): trim skill description anti-patterns; enforce 100-char budget (#2823)

2026-04-29 08:14:11 -04:00

lint-docs-required.cjs

Enforce documentation updates via lint:docs + PR templates (#3651)

2026-05-16 13:09:54 -04:00

lint-no-source-grep-extras.cjs

feat(#2982): extend no-source-grep lint to catch var-binding readFileSync.includes() (#2985)

2026-05-01 19:50:10 -04:00

lint-no-source-grep.cjs

feat(#2982): extend no-source-grep lint to catch var-binding readFileSync.includes() (#2985)

2026-05-01 19:50:10 -04:00

lint-pr-check-project-dir.cjs

test: forbid cwd in PR checkers

2026-05-15 20:00:29 -04:00

lint-shared-module-handsync.cjs

feat(3575): Phase 6 — CJS↔SDK seam migration end-to-end complete (#3524) (#3577)

2026-05-16 13:14:24 -04:00

lint-shell-command-projection-drift.cjs

feat(shell-projection): add shim wrapper drift guard (#3448)

2026-05-12 20:49:43 -04:00

lint-skill-deps.cjs

feat(skill-surface): install-time profiles + runtime /gsd:surface (#3408) (#3456)

2026-05-13 12:45:16 -04:00

pr-template-policy.cjs

fix(pr-template-policy): avoid false positive on valid enhancement template banner (#3423)

2026-05-11 22:45:33 -04:00

prompt-injection-scan.sh

feat(hooks): add gsd-read-injection-scanner PostToolUse hook (#2201) (#2328)

2026-04-16 17:22:31 -04:00

run-tests.cjs

fix(3597): resolve CR threads — drop substring-assertion guidance, use $testDir

2026-05-16 10:44:51 -04:00

secret-scan.sh

ci(security): add prompt injection, base64, and secret scanning

2026-03-24 13:23:51 -04:00

shared-module-handsync-allowlist.json

feat(3575): Phase 6 — CJS↔SDK seam migration end-to-end complete (#3524) (#3577)

2026-05-16 13:14:24 -04:00

strip-prose-atrefs.cjs

fix(coderabbit): resolve all 12 findings on PR #3152

2026-05-05 16:06:29 -04:00

verify-tarball-sdk-dist.sh

fix(#2647): guard tarball ships sdk/dist so gsd-sdk query works (#2671)

2026-04-24 18:05:18 -04:00