Tom Boucher f0a1745e29 fix(#4639): exempt the container --env-file value from the secret-read guard (#4789) ...

* fix(#4639): exempt the container --env-file value from the secret-read guard

* test(#4639): adopt the suite assertions and pin the reclassified row

* docs(#4639): document and pin the container-env printenv residual

* docs(#4639): backfill changeset PR number

---------

Co-authored-by: sim <sim@local>

2026-09-16 06:44:55 -04:00

..

lib

fix(#4594): one canonical dispatch-identity owner — the emitted format and the parser that reads it back (#4693)

2026-09-13 15:36:08 -04:00

gsd-agent-isolation-guard.js

fix(#4594): one canonical dispatch-identity owner — the emitted format and the parser that reads it back (#4693)

2026-09-13 15:36:08 -04:00

gsd-check-update-worker.js

fix(#4091): publish update-check cache via atomic temp+rename (#4313)

2026-09-05 09:22:10 -04:00

gsd-check-update.js

fix(#3582): route every hook's compiled-module require through the self-heal build seam (#3629)

2026-08-18 14:11:23 -04:00

gsd-config-reload.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-context-monitor.js

enhance(#4285): resolve context-monitor fire-points from .planning/config.json (#4366)

2026-09-09 04:31:14 +00:00

gsd-cursor-post-tool.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-cursor-pre-tool.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-cursor-session-start.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-cursor-stop.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-cursor-subagent-start.js

fix(#4594): one canonical dispatch-identity owner — the emitted format and the parser that reads it back (#4693)

2026-09-13 15:36:08 -04:00

gsd-cursor-subagent-stop.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-ensure-canonical-path.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-graphify-update.sh

fix(#3729): hoist the .planning and CI gates above the graphify hook's node parse (#3935)

2026-08-27 12:15:21 -04:00

gsd-node-runner.sh

fix(#4076): add missing gsd-hook-version header to gsd-node-runner.sh (#4092)

2026-09-02 08:04:37 -04:00

gsd-phase-boundary.sh

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-prompt-guard.js

fix(#4016): imperative-override injection patterns tolerate filler words (#4061)

2026-09-05 06:58:45 -04:00

gsd-read-guard.js

chore(#3546): migrate hook advisory assertions onto typed output surfaces (#4167)

2026-09-01 22:32:54 -04:00

gsd-read-injection-scanner.js

fix(#4016): imperative-override injection patterns tolerate filler words (#4061)

2026-09-05 06:58:45 -04:00

gsd-secret-read-guard.js

fix(#4639): exempt the container --env-file value from the secret-read guard (#4789)

2026-09-16 06:44:55 -04:00

gsd-session-state.sh

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-statusline.js

enhance(#3638): render bracket phase IDs on progress, stats, manager and statusline surfaces (epic #612 PR-5) (#4111)

2026-09-15 04:47:47 -04:00

gsd-update-banner.js

fix(#3582): route every hook's compiled-module require through the self-heal build seam (#3629)

2026-08-18 14:11:23 -04:00

gsd-validate-commit.sh

fix(#4429): stop a large commit_types config blocking or bypassing the gate (#4723)

2026-09-14 05:43:59 -04:00

gsd-windsurf-pre-command.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-windsurf-pre-write.js

enhance(#3911): hooks declare their crash policy (#3960)

2026-08-27 22:21:10 -04:00

gsd-workflow-guard.js

chore(#3546): migrate hook advisory assertions onto typed output surfaces (#4167)

2026-09-01 22:32:54 -04:00

gsd-worktree-path-guard.js

test(#4515): migrate installer-runs batch to named timeout constants (#4575)

2026-09-09 11:45:44 -04:00

gsd-write-guard.js

fix(#4455): autonomous.md and complete-milestone.md resolve STATE/ROADMAP/MILESTONES/PROJECT/REQUIREMENTS through the workstream-scoped init fields (#4542)

2026-09-08 04:56:11 -04:00

hooks.json

enhance(#4221): replace installer Read() deny rules with a managed secret-read guard hook (#4236)

2026-09-05 04:00:08 -04:00

managed-hooks-registry.cjs

enhance(#4221): replace installer Read() deny rules with a managed secret-read guard hook (#4236)

2026-09-05 04:00:08 -04:00