Tom Boucher 95eda5845e fix(tests): allowlist execute-phase.md in prompt-injection scan (#1835) ...

execute-phase.md grew to ~51K chars after the code-review gate step
was added in #1630, tripping the 50K size heuristic in the injection
scanner. The limit is calibrated for user-supplied input — trusted
workflow source files that legitimately exceed it are allowlisted
individually, following the same pattern as discuss-phase.md.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-05 20:03:47 -04:00

..

agent-frontmatter.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

agent-install-validation.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

agent-skills.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

analyze-dependencies.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

anti-pattern-enforcement.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

antigravity-install.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

augment-conversion.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

autonomous-interactive.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

autonomous-to-flag.test.cjs

feat(autonomous): add --to N flag to stop after specific phase (#1646)

2026-04-04 07:58:27 -04:00

autonomous-ui-steps.test.cjs

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

bug-1817-sh-hook-guard.test.cjs

fix(installer): guard .sh hook registration with fs.existsSync before writing settings.json (#1823)

2026-04-05 17:49:20 -04:00

bug-1818-unknown-flags.test.cjs

fix(cli): reject help/version flags instead of silently ignoring them (#1822)

2026-04-05 17:32:18 -04:00

bug-1826-phases-clear-confirm.test.cjs

fix(cli): require --confirm flag before phases clear deletes directories (#1832)

2026-04-05 18:05:32 -04:00

bug-1829-inherit-model-profile.test.cjs

fix(core): treat model_profile "inherit" as pass-through instead of falling back to balanced (#1833)

2026-04-05 18:20:11 -04:00

bugs-1656-1657.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

chain-flag-plan-phase.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

claude-md.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

claude-skills-migration.test.cjs

fix(install): apply path replacement in copyCommandsAsClaudeSkills (#1677)

2026-04-04 15:12:58 -04:00

cline-support.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

code-review.test.cjs

feat: add /gsd:code-review and /gsd:code-review-fix commands (#1630)

2026-04-05 19:43:45 -04:00

codex-config.test.cjs

fix(install): comprehensive audit cleanup of hook copy, uninstall, and manifest (#1755) (#1768)

2026-04-05 11:37:27 -04:00

commands.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

commit-docs-bypass.test.cjs

fix(workflows): respect commit_docs:false in worktree merge and quick task commits (#1802)

2026-04-05 17:02:20 -04:00

concurrency-safety.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

config.test.cjs

feat(config): add execution context profiles for mode-specific agent output (#1827)

2026-04-05 19:09:19 -04:00

context-enrichment.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

copilot-install.test.cjs

feat: add /gsd:code-review and /gsd:code-review-fix commands (#1630)

2026-04-05 19:43:45 -04:00

core.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

cursor-conversion.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

defaults-json-fallback.test.cjs

feat(config): apply ~/.gsd/defaults.json as fallback for pre-project commands (#1738)

2026-04-05 09:15:41 -04:00

discuss-checkpoint.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

discuss-mode.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

discuss-phase-power.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

dispatcher.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

docs-update.test.cjs

feat: add /gsd:docs-update command for verified documentation generation (#1532)

2026-04-01 08:47:31 -06:00

execute-phase-active-flags.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

execute-phase-wave.test.cjs

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

execute-phase-worktree-artifacts.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

explore-command.test.cjs

feat(commands): add /gsd-explore for Socratic ideation and idea routing (#1813)

2026-04-05 18:33:27 -04:00

few-shot-calibration.test.cjs

docs(agents): add few-shot calibration examples for plan-checker and verifier (#1792)

2026-04-05 18:33:17 -04:00

forensics.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

frontmatter-cli.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

frontmatter.test.cjs

fix: resolve REG-04 — frontmatter inline array parser now respects quoted commas (#1695)

2026-04-04 15:50:01 -04:00

gsd-tools-path-refs.test.cjs

fix(commands): replace undefined $GSD_TOOLS with resolved path (#1766) (#1769)

2026-04-05 11:30:38 -04:00

hardcoded-paths.test.cjs

ci: drop Windows runner, add static hardcoded-path detection (#1676)

2026-04-04 14:37:54 -04:00

health-validation.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

helpers.cjs

fix: remove marketing text from runtime prompt, fix #1656 and #1657 (#1672)

2026-04-04 14:15:30 -04:00

hook-validation.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

hooks-opt-in.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

import-command.test.cjs

feat(commands): add external plan import command /gsd-import (#1801)

2026-04-05 18:33:24 -04:00

init-manager.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

init.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

install-hooks-copy.test.cjs

fix(install): uninstall hook safety — per-hook granularity, legacy migration, workflow-guard cleanup

2026-04-05 10:46:40 -05:00

intel.test.cjs

feat(intel): add queryable codebase intelligence system (#1728)

2026-04-05 18:33:15 -04:00

kilo-install.test.cjs

fix: remove marketing text from runtime prompt, fix #1656 and #1657 (#1672)

2026-04-04 14:15:30 -04:00

learnings.test.cjs

feat(tools): add global learnings store with CRUD library and CLI support (#1831)

2026-04-05 19:09:14 -04:00

mcp-tool-inheritance.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

methodology-artifact.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

milestone-summary.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

milestone.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

model-alias-map.test.cjs

test: add MODEL_ALIAS_MAP regression test for #1690 (#1698)

2026-04-04 15:52:13 -04:00

model-profiles.test.cjs

feat(model-profiles): add adaptive preset with role-based model assignment (#1806)

2026-04-05 17:03:17 -04:00

multi-runtime-select.test.cjs

fix: remove marketing text from runtime prompt, fix #1656 and #1657 (#1672)

2026-04-04 14:15:30 -04:00

new-milestone-clear-phases.test.cjs

fix(cli): require --confirm flag before phases clear deletes directories (#1832)

2026-04-05 18:05:32 -04:00

next-safety-gates.test.cjs

feat(next): add hard stop safety gates and consecutive-call guard (#1784)

2026-04-05 17:05:06 -04:00

next-up-clear-order.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

opencode-permissions.test.cjs

merge: sync Kilo runtime branch with latest main

2026-04-03 12:47:24 +03:00

orphaned-hooks.test.cjs

fix: stale hooks scanner ignores orphaned files from removed features (#1751)

2026-04-05 09:15:19 -04:00

parallel-dependent-plans.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

path-replacement.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

pause-work-improvements.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

phase.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

pick-flag.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

planner-decomposition.test.cjs

fix(agents): modular decomposition of gsd-planner.md to solve 50K char limit (#1612)

2026-04-03 13:32:05 -04:00

playwright-ui-verify.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

product-name-purity.test.cjs

fix: remove editorial parenthetical descriptions from product names (#1778)

2026-04-05 12:41:17 -04:00

profile-output.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

profile-pipeline.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

prompt-injection-scan.test.cjs

fix(tests): allowlist execute-phase.md in prompt-injection scan (#1835)

2026-04-05 20:03:47 -04:00

quick-branching.test.cjs

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

quick-commit-boundary.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

quick-research.test.cjs

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

reachability-check.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

read-guard.test.cjs

fix(hooks): add read-before-edit guard for non-Claude runtimes (#1645)

2026-04-04 07:35:18 -04:00

reapply-patches.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

roadmap-phase-fallback.test.cjs

fix(roadmap): fall back to full ROADMAP.md for backlog phases (#1640)

2026-04-04 07:14:24 -04:00

roadmap.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

runtime-converters.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

scan-command.test.cjs

feat(commands): add /gsd-scan for rapid single-focus codebase assessment (#1808)

2026-04-05 17:04:33 -04:00

schema-drift.test.cjs

feat: add schema drift detection to prevent false-positive verification

2026-04-01 16:53:20 -04:00

secure-phase.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

security-scan.test.cjs

fix: skip bash script behavioral tests on Windows

2026-03-24 13:33:58 -04:00

security.test.cjs

fix: four bug fixes — bold plan checkboxes, BACKLOG recommendations, executor_model regression tests, session_id path traversal

2026-04-03 11:30:08 -04:00

semver-compare.test.cjs

fix(hooks): use semver comparison for update check instead of inequality (#1617)

2026-04-04 07:10:21 -04:00

settings-jsonc.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

stale-colon-refs.test.cjs

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

state.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

subagent-timeout.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

template.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

thinking-model-guidance.test.cjs

fix(installer): guard .sh hook registration with fs.existsSync before writing settings.json (#1823)

2026-04-05 17:49:20 -04:00

thinking-partner.test.cjs

feat(workflows): add conditional thinking partner at decision points (#1816)

2026-04-05 17:04:08 -04:00

trae-install.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

uat.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

verification-overrides.test.cjs

feat(references): add verification override mechanism reference (#1747) (#1819)

2026-04-05 17:00:30 -04:00

verifier-deferred-items.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

verify-health.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

verify-test-quality.test.cjs

feat: add test quality audit step to verify-phase workflow

2026-04-02 18:55:17 -03:00

verify.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

windows-robustness.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

windsurf-conversion.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

workflow-guard-registration.test.cjs

fix: register gsd-workflow-guard.js in settings.json during install (#1772)

2026-04-05 12:30:24 -04:00

workspace.test.cjs

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

workstream.test.cjs

fix: harden workstream session routing fallback

2026-04-02 21:36:36 -05:00

worktree-cleanup.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

worktree-merge-protection.test.cjs

fix(workflow): protect orchestrator files during worktree merge (#1756) (#1764)

2026-04-05 11:11:38 -04:00

worktree-stagger.test.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00