Zy Deng 4c60879b5d fix(#4132): verify durable runtime surface sources (#4182) ...

* fix(#4132): verify durable runtime surface sources

* chore(#4132): record PR number in changeset

* test(#4132): cover rejected commands source alias

* fix(#4132): reject aliased package fallback

* test(#4132): cover rejected agents source alias

* test(#4132): cover partially aliased marker provider

* fix(#4132): reject partially aliased source providers

* test(#4132): cover routed source identity probes

* fix(#4132): route installed source identity probes

* refactor(#4132): tighten installer source metadata

* test(#4132): cover corpus trust boundary attacks

* fix(#4132): close installed corpus trust gaps

* refactor(#4132): keep installer authority private

* fix(#4132): preserve private installer fallback

* test(#4132): preserve fixture source authority

* fix(#4132): reject overlapping source fallback

* fix(#4132): avoid redundant installed corpus reads

* refactor(#4132): simplify provider resolution

* test(#4132): sync install tree fixtures after rebase

---------

Co-authored-by: Tom Boucher <trekkie@nomorestars.com>

2026-09-05 15:32:52 -04:00

..

gsd-add-tests

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ai-integration-phase

fix(#2390): warn on goal-shaped phase.add titles, correct auto-detect docs (#2425)

2026-07-19 07:53:04 -04:00

gsd-audit-fix

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-audit-milestone

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-audit-uat

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-autonomous

fix(#3151): stop emitting effort: into skill frontmatter (cache invalidation) (#3425)

2026-08-13 22:00:26 -04:00

gsd-capture

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-cleanup

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-code-review

fix(#3423): standardize on <required_reading>, retire the files_to_read emit tag (#3432)

2026-08-14 16:03:48 -04:00

gsd-complete-milestone

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-config

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-debug

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-discuss-phase

fix(#3763): pass --raw at every shipped config-get bash call site (#3961)

2026-08-27 19:55:34 -04:00

gsd-docs-update

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-eval-review

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-execute-phase

fix(#4051): route specific intents first and confirm before dispatch in --do (#4289)

2026-09-04 17:19:16 -04:00

gsd-explore

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-extract-learnings

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-fast

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-forensics

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-graphify

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-health

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-help

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-import

fix(#3809): route runtime-loaded markdown through the gsd_run launcher (#3815)

2026-08-24 11:47:37 -04:00

gsd-inbox

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ingest-docs

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-manager

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-map-codebase

fix(#3561): route /gsd-map-codebase --fast to a scan.md path the runtime can resolve (#3562)

2026-08-15 22:18:50 -04:00

gsd-mempalace-capture

fix(#3479): treat absent default-true mempalace keys as enabled in every prose gate (#3527)

2026-08-14 23:01:15 -04:00

gsd-mempalace-recall

fix(#3479): treat absent default-true mempalace keys as enabled in every prose gate (#3527)

2026-08-14 23:01:15 -04:00

gsd-milestone-summary

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-mvp-phase

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-new-milestone

fix(#3423): standardize on <required_reading>, retire the files_to_read emit tag (#3432)

2026-08-14 16:03:48 -04:00

gsd-new-project

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-next

fix(#3151): stop emitting effort: into skill frontmatter (cache invalidation) (#3425)

2026-08-13 22:00:26 -04:00

gsd-ns-context

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ns-ideate

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ns-manage

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ns-project

fix(onboard): refresh generated project skills

2026-07-05 19:16:09 +00:00

gsd-ns-review

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ns-workflow

feat(#3676): quick-batch command, workflow, and isolation integration (#4212)

2026-09-02 22:38:31 -04:00

gsd-onboard

no-mistakes(document): Sync onboarding docs

2026-07-05 19:16:09 +00:00

gsd-pause-work

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-phase

fix(#4051): route specific intents first and confirm before dispatch in --do (#4289)

2026-09-04 17:19:16 -04:00

gsd-plan-phase

fix(#3151): stop emitting effort: into skill frontmatter (cache invalidation) (#3425)

2026-08-13 22:00:26 -04:00

gsd-plan-review-convergence

enhance(#2800): derive reviewer flag lists and gate reviewer lane docs across locales (#2882)

2026-07-30 19:14:13 -04:00

gsd-pr-branch

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-profile-user

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-progress

fix(#3151): stop emitting effort: into skill frontmatter (cache invalidation) (#3425)

2026-08-13 22:00:26 -04:00

gsd-quick

enhance(#3028): responsive Markdown separators instead of fixed-width rules (#3789)

2026-08-23 22:38:12 -04:00

gsd-quick-batch

feat(#3676): quick-batch command, workflow, and isolation integration (#4212)

2026-09-02 22:38:31 -04:00

gsd-resume-work

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-review

chore: regenerate stale gsd-review SKILL.md (pre-existing next drift)

2026-06-30 22:21:18 -04:00

gsd-review-backlog

feat(#3409): reject shell guards that cannot observe their own failure arm (#3558)

2026-08-15 21:09:05 -04:00

gsd-secure-phase

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-settings

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ship

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-sketch

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-spec-phase

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-spike

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-stats

fix(#3151): stop emitting effort: into skill frontmatter (cache invalidation) (#3425)

2026-08-13 22:00:26 -04:00

gsd-surface

fix(#4132): verify durable runtime surface sources (#4182)

2026-09-05 15:32:52 -04:00

gsd-thread

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ui-phase

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ui-review

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-ultraplan-phase

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-undo

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-update

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-validate-phase

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-verify-work

fix(#3423): standardize on <required_reading>, retire the files_to_read emit tag (#3432)

2026-08-14 16:03:48 -04:00

gsd-workspace

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gsd-workstreams

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00