msd-core

baselines

feat(#3409 ): reject shell guards that cannot observe their own failure arm (#3558 )

2026-08-15 21:09:05 -04:00

changeset

fix(#3620 ): point the docs at files that actually exist (#3658 )

2026-08-19 01:54:01 -04:00

lib

fix(#4683 ): detect cross-plan threat-ID duplicates before execution (#4828 )

2026-09-17 19:06:55 -04:00

release-notes

fix(#2716 ): route non-user-facing conventional types to an Internal bucket, omit from release notes (#2838 )

2026-07-29 17:06:04 -04:00

affected-tests-lib.cjs

chore(#4654 ): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674 )

2026-09-12 22:17:46 -04:00

audit-workflow-script-paths.cjs

feat(#2995 ): post-install path audit for workflow-invoked scripts (#2996 )

2026-05-01 21:13:45 -04:00

base64-scan.sh

enhance(#3908 ): the scanners distinguish an empty diff from one they could not compute (#3937 )

2026-08-27 13:11:13 -04:00

benchmark-compact-content-variants.cjs

enhance(#4139 ): Phase 7 — the agent-skill seam picks the payload in code (#4553 )

2026-09-09 12:38:59 -04:00

benchmark-compact-content.cjs

enhance(#4139 ): Phase 4 — measure the window instead of asserting it (#4502 )

2026-09-07 19:19:03 -04:00

build-hooks.js

enhance(#4221 ): replace installer Read() deny rules with a managed secret-read guard hook (#4236 )

2026-09-05 04:00:08 -04:00

check-alias-drift.cjs

fix(#2725 ): repoint the pre-commit alias guard at sources git can actually stage, drop nine dead ones (#3273 )

2026-08-09 18:29:16 -04:00

check-contract-drift.cjs

enhance(#4139 ): Phase 7 — the agent-skill seam picks the payload in code (#4553 )

2026-09-09 12:38:59 -04:00

check-coverage-gate.cjs

fix(#2474 ): gate worktree dispatch on project-level USE_WORKTREES too (#2561 )

2026-07-23 09:14:02 -04:00

check-env.cjs

fix(#4460 ): correct two stale changesets left by an admin-merge race (#4572 )

2026-09-09 16:26:25 -04:00

check-glossary-refs.cjs

fix(#4636,#4653): close the symlink hole, revert a wrong collapse, fix six review findings

2026-09-12 13:59:52 -04:00

check-mutation-score-ratchet.cjs

enhance(#3881 ): one YAML parser — vendored js-yaml replaces the hand-rolled dialect (#3888 )

2026-08-26 19:29:32 -04:00

check-npm-integrity.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

ci-check-job-near-cap.cjs

enhance(#4036 ): persist CI shard/job timeout-vs-cap trending, warn at 90% (#4043 )

2026-08-29 16:13:15 -04:00

ci-guard-runner.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

ci-next-health.cjs

feat(#4422 ): block merging into next/main while the base branch's Tests run is red (#4428 )

2026-09-06 17:29:54 -04:00

ci-pr-mergeability.cjs

chore(#3833 ): gate every PR compute lane behind a mergeability preflight (#3843 )

2026-08-24 21:13:55 -04:00

ci-prepare-test-scope.cjs

fix(#4641 ): make test-conformance the sole Windows selector and narrow the tier to 28.5% (#4643 )

2026-09-11 17:00:11 -04:00

ci-rebase-check.cjs

fix(#2472 ): cost-balanced test sharding and pinned CI base commit (#2480 )

2026-07-21 09:15:59 -04:00

ci-test-scope.cjs

fix(#4641 ): make test-conformance the sole Windows selector and narrow the tier to 28.5% (#4643 )

2026-09-11 17:00:11 -04:00

ci-timeout-report.cjs

chore(#4603 ): retire the test-full CI job (#4604 )

2026-09-10 12:46:04 -04:00

command-contract-helpers.cjs

enh(#3565 ): sentinel/contract registry + check:contract-drift lint (#3571 )

2026-08-16 12:59:08 -04:00

diff-touches-shipped-paths.cjs

chore(#4654 ): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674 )

2026-09-12 22:17:46 -04:00

docs-guard-registry.cjs

fix(#4728 ): stop presenting the retired Gemini CLI as a supported runtime (#4743 )

2026-09-14 16:49:52 -04:00

fix-slash-commands.cjs

fix(#1223 ): install scripts/fix-slash-commands.cjs so gsd-tools loads (#1240 )

2026-06-14 16:03:26 -04:00

gen-adr-index.cjs

chore(#4654 ): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674 )

2026-09-12 22:17:46 -04:00

gen-capability-matrix.cjs

fix(#2903 ): use the command form that actually works in reader-facing docs (#3047 )

2026-08-04 13:23:44 -04:00

gen-capability-registry.cjs

fix(#3606 ): validate hook-kind coverage at call sites and dispatch generically (#3687 )

2026-08-19 16:41:27 -04:00

gen-context-index.cjs

chore(#3212 ): src/text-lines.cts is the sole owner of line-terminator handling — Phase 2 (#3420 )

2026-08-13 20:27:48 -04:00

gen-emitted-baseline.cjs

refactor(#2724 ): delete the committed golden fixtures and size baselines (#2767 )

2026-07-28 15:41:43 -04:00

gen-exit-code-docs.cjs

enhance(#3913 ): docs, and the guards come down (#3994 )

2026-08-28 13:10:20 -04:00

gen-exit-code-registry.cjs

enhance(#3913 ): docs, and the guards come down (#3994 )

2026-08-28 13:10:20 -04:00

gen-features.cjs

fix(#3840 ): reject a malformed feature order instead of coercing it (#3851 )

2026-08-25 08:36:33 -04:00

gen-health-docs.cjs

feat(#3309 ): generate health.md's error-code and repair-action tables

2026-08-13 03:13:25 -04:00

gen-hooks-cli-exit.cjs

enhance(#3987 ): guard slug re-derivation and the swallowed-precondition shape — §8.5 was guardable after all (#3999 )

2026-08-28 14:40:02 -04:00

gen-install-tree-fixtures.cjs

fix(#3738 ): antigravity global skills/agents install to ~/.gemini/config (#3921 )

2026-08-27 02:24:03 -04:00

gen-inventory-manifest.cjs

enhance(#4139 ): Phase 3 — partition rules + the five checks (#4497 )

2026-09-07 16:44:53 -04:00

gen-loop-host-contract.cjs

feat(#4740 ): make the Loop Host Contract role partition normative and enforced (#4742 )

2026-09-14 18:30:47 -04:00

gen-platform-conformance-tier.cjs

fix(#4641 ): make test-conformance the sole Windows selector and narrow the tier to 28.5% (#4643 )

2026-09-11 17:00:11 -04:00

gen-plugin-skills.cjs

feat(#1596 ): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gen-prompt-budget-parity-corpus.cjs

chore(#2929 ): generalize prompt-budget into the shared context-composer seam (#2958 )

2026-07-31 23:03:13 -04:00

gen-registry.cjs

chore(#3212 ): src/text-lines.cts is the sole owner of line-terminator handling — Phase 2 (#3420 )

2026-08-13 20:27:48 -04:00

gen-research-agents.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

gen-scripts-cli-exit.cjs

enhance(#3904 ): one exit module — generate the scripts-side copy from a single source (#3917 )

2026-08-26 21:24:34 -04:00

gen-section-manifest.cjs

chore(#1671 ): widen the when= grammar and key the section manifest per workflow — Phase 6.1 (#3013 )

2026-08-02 22:36:45 -04:00

gen-state-md-docs.cjs

enhance(#3873 ): the STATE.md schema — one owner, generated artifacts (#3880 )

2026-08-26 01:57:47 -04:00

gen-test-timings.cjs

fix(#2456 ): weight test chunks by measured cost and pack with LPT (#2463 )

2026-07-20 16:51:35 -04:00

generate-package-identity.cjs

fix(#2544 ): stage the CommonJS marker in GSD-owned dirs, not the config root (#2593 )

2026-08-01 21:00:23 -04:00

gsd-test-gate-reasons.cjs

feat(#3753 ): run docs guards on the PR that changes the docs they read (#3787 )

2026-08-23 21:21:21 -04:00

issue-dedupe.cjs

feat(#836 ): no-LLM duplicate-issue detection + challenge + 1-day auto-close (#843 )

2026-06-07 20:35:43 -04:00

issue-version-gate.cjs

feat(#1180 ): hard-gate the GSD Version requirement on bug reports (#1181 )

2026-06-13 16:13:00 -04:00

lint-allow-test-rule-refs.allowlist.json

enhance(#3464 ): exec() detection widening, citation-debt cleanup — Phase 8 (#4171 )

2026-09-02 08:11:23 -04:00

lint-allow-test-rule-refs.cjs

fix(#4060 ): drive repo-baseline lint check in-process, not via a subprocess timeout race (#4065 )

2026-08-29 18:20:24 -04:00

lint-allow-test-rule-refs.effective-ceiling.json

enhance(#3464 ): exec() detection widening, citation-debt cleanup — Phase 8 (#4171 )

2026-09-02 08:11:23 -04:00

lint-allow-test-rule-refs.unverified-ceiling.json

enhance(#3301 ): tell reviewers the plan ids and total count, grade coverage (#4084 )

2026-08-30 14:25:24 -04:00

lint-allowed-tools-parity.cjs

chore(#4394 ): lint allowed-tools parity — Bash without Grep (#4431 )

2026-09-07 09:44:38 -04:00

lint-canary-version-leak.cjs

chore(#2896 ): convert CONTEXT.md prose defect registry into enforced gates (#3325 )

2026-08-10 12:55:52 -04:00

lint-command-contract.cjs

chore(#3560 ): delete two unreachable workflows, gate workflow reachability in lint (#3564 )

2026-08-15 23:29:30 -04:00

lint-compiled-artifact-sync.cjs

fix(#2657 ): untrack the nine ADR-457 migration-gap compiled artifacts (#3011 )

2026-08-02 21:22:43 -04:00

lint-completion-predicate-drift.cjs

chore(#3212 ): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416 )

2026-08-13 16:19:57 -04:00

lint-completion-ratio-drift.cjs

refactor(#3180 ): ADR-3180 behavior contract + cross-surface drift guardrails (#3223 )

2026-08-08 16:05:17 -04:00

lint-default-flip-documentation.cjs

chore(#2896 ): convert CONTEXT.md prose defect registry into enforced gates (#3325 )

2026-08-10 12:55:52 -04:00

lint-descriptions.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

lint-docs-command-form.cjs

fix(#2903 ): use the command form that actually works in reader-facing docs (#3047 )

2026-08-04 13:23:44 -04:00

lint-docs-guard-registration.cjs

feat(#3753 ): run docs guards on the PR that changes the docs they read (#3787 )

2026-08-23 21:21:21 -04:00

lint-docs-guard-registration.exempt-baseline.cjs

chore(#4729 ): guard the retired-runtime name, and finish the locale residue (#4753 )

2026-09-14 20:50:26 -04:00

lint-docs-required.cjs

fix(#2988 ): local changeset/docs lint falls back to next, not main (#3095 )

2026-08-05 19:27:07 -04:00

lint-eslint-glob-coverage.allowlist.json

enhance(#3881 ): one YAML parser — vendored js-yaml replaces the hand-rolled dialect (#3888 )

2026-08-26 19:29:32 -04:00

lint-eslint-glob-coverage.cjs

chore(#3059 ): close the ESLint glob-coverage escape and guard it (#3277 )

2026-08-09 19:35:34 -04:00

lint-example-parser-parity.cjs

fix(#2944 ): remove the catastrophic-backtracking regex from the ADR-1671 example (#2950 )

2026-07-31 15:44:19 -04:00

lint-fix-has-regression-tests.cjs

feat(#3753 ): run docs guards on the PR that changes the docs they read (#3787 )

2026-08-23 21:21:21 -04:00

lint-frontmatter-scalar-broad-grep.cjs

chore(#2896 ): convert CONTEXT.md prose defect registry into enforced gates (#3325 )

2026-08-10 12:55:52 -04:00

lint-health-diagnostic-rule-table.cjs

fix(#3696 ): report the last_activity invariant and make the verdict gateable with --strict (#3844 )

2026-08-24 21:33:48 -04:00

lint-hooks-runtime-build-seam.cjs

fix(#3582 ): route every hook's compiled-module require through the self-heal build seam (#3629 )

2026-08-18 14:11:23 -04:00

lint-legacy-dir-name.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

lint-milestone-window-drift.cjs

refactor(#3309 ): migrate cmdValidateHealth onto the rule table

2026-08-13 02:28:49 -04:00

lint-mutation-test-derivation-drift.cjs

enhance(#3881 ): one YAML parser — vendored js-yaml replaces the hand-rolled dialect (#3888 )

2026-08-26 19:29:32 -04:00

lint-no-adhoc-regex-escape.cjs

chore(#3212 ): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416 )

2026-08-13 16:19:57 -04:00

lint-package-identity-drift.cjs

chore(#604 ): rename get-shit-done/ runtime directory to gsd-core/ (#615 )

2026-06-02 18:35:29 -04:00

lint-phase-enumeration-drift.cjs

enhance(#3348 ): add a context-drift pre-check gate to plan-phase (#4147 )

2026-09-01 21:39:37 -04:00

lint-phase-id-drift.cjs

fix(#4628 ): expose DAG-ready plans and restrict dispatch to them (#4781 )

2026-09-16 02:38:43 -04:00

lint-plan-count-drift.cjs

fix(#3458 ): scan archived milestone phases, and make [A] Acknowledge actually suppress (#3555 )

2026-08-15 17:00:52 -04:00

lint-planning-artifact-writer-drift.cjs

enhance(#3180 ): the sibling validators share one envelope and one owner — Phase 12 (#3407 )

2026-08-13 11:31:16 -04:00

lint-planning-prompt-drift.cjs

fix(#3640 ): isolate the drift cli e2e fixture via a --root override (#3722 )

2026-08-20 16:15:22 -04:00

lint-planning-snapshot-bypass-drift.cjs

refactor(#3308 ): add planning-snapshot.cts parsed projection per ADR-3180 §8.1

2026-08-12 21:43:39 -04:00

lint-portable-grep.cjs

fix(#4112 ): portable grep in workflow markdown + submodule commit fix under diff.ignoreSubmodules (#4149 )

2026-09-01 17:31:01 -04:00

lint-portable-timeout.cjs

fix(#2351 ): replace hardcoded timeout with portable run-with-timeout (#2426 )

2026-07-19 14:37:15 -04:00

lint-pr-check-project-dir.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

lint-regression-test-names.allowlist.json

test(#1975 ): consolidate 51 CLI + scripts-tooling regression tests into module suites

2026-07-03 10:22:11 -04:00

lint-regression-test-names.cjs

chore(#3339 ): extend BUG_FILE_RE to fix-/issue- prefixes, close H3 (#3315 )

2026-08-12 08:28:17 -04:00

lint-removed-but-needed.cjs

enhance(#3942 ): the emitted-drift ack is PR-lifetime data — move it to a commit trailer (#3954 )

2026-08-27 17:28:39 -04:00

lint-resolution-provenance.allowlist.json

chore(#1417 ): add resolution-provenance CI guard (Resolution Provenance P4) (#1428 )

2026-06-18 08:50:22 -04:00

lint-resolution-provenance.cjs

fix(#1880 ): distinguish a corrupt config from an absent one (epic #1879 Phase 1) (#2688 )

2026-07-27 00:09:13 -04:00

lint-response-language-coverage.cjs

enhance(#4139 ): Phase 3 — partition rules + the five checks (#4497 )

2026-09-07 16:44:53 -04:00

lint-retired-runtime-name.cjs

fix(#4709 ): a retired runtime id must not resolve to Claude Code (#4756 )

2026-09-14 22:22:16 -04:00

lint-seam-enforcement.cjs

enhance(#3626 ): make CONTEXT.md seam claims checkable via a SEAM.*.enforced-by gate (#3975 )

2026-08-28 08:06:41 -04:00

lint-shell-command-projection-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

lint-skill-deps.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

lint-slug-derivation-drift.cjs

enhance(#3987 ): guard slug re-derivation and the swallowed-precondition shape — §8.5 was guardable after all (#3999 )

2026-08-28 14:40:02 -04:00

lint-source-test-name-collision.cjs

chore(#4654 ): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674 )

2026-09-12 22:17:46 -04:00

lint-state-field-drift.cjs

refactor(#3187 ): give state field extraction one canonical owner (#3283 )

2026-08-09 22:49:39 -04:00

lint-state-write-path-drift.cjs

feat(#4668 ): add StateWriteIntent type surface and opaque-transform guard recognition (ADR-4629 C1) (#4676 )

2026-09-14 21:43:49 -04:00

lint-table-schema-drift.cjs

chore(#2143 ): prohibition-with-teeth + migrate remaining ad-hoc table sites — Phase 4 (final) (#2253 )

2026-07-14 14:25:44 -04:00

lint-test-file-count.allowlist.json

fix(#4657 ): give the ui consideration probe a text_en language channel (#4804 )

2026-09-16 13:46:40 -04:00

lint-test-file-count.cjs

feat(#3227 ): publish machine-readable state contract at step boundaries (#3824 )

2026-08-24 17:56:02 -04:00

lint-unreachable-guard-drift.cjs

enhance(#3884 ): failure is a value — strict argv, and --pick that signals absence (#3922 )

2026-08-27 00:12:13 -04:00

lint-vendored-deps.cjs

fix(#4282 ): register PATTERNS.md as a canonical .planning/ artifact (#4618 )

2026-09-10 22:46:18 -04:00

lint-workflow-shellcheck-baseline.json

fix(#4456 ): forward --ws to every downstream new-milestone.md call (#4545 )

2026-09-08 09:23:20 -04:00

lint-workflow-shellcheck.cjs

fix(#4120 ): replace shellcheck npm dep with dependency-free downloader (#4121 )

2026-08-31 22:31:23 -04:00

live-config-guard.cjs

fix(#2665 ): stop watching shared ground, and derive the artifact prefix too

2026-08-08 05:50:49 -05:00

mutation-matrix.cjs

enhance(#3915 ): stryker on the official tap runner, 29m to 12m on the critical path (#3919 )

2026-08-26 22:43:14 -04:00

npm-audit-baseline.cjs

fix(#4250 , #4260 ): distinguish a timed-out npm audit from a JSON parse failure, retry with backoff (#4251 )

2026-09-04 10:02:17 -04:00

pr-changed-files.cjs

chore(#3211 ): accept a non-closing issue reference for docs/test-only PRs (#3289 )

2026-08-09 21:38:53 -04:00

pr-target-policy.cjs

refactor(#1190 ): extract ADR-230 PR-target branch policy into a tested, fork-safe seam (#1246 )

2026-06-14 17:16:19 -04:00

pr-template-policy.cjs

chore(#3211 ): accept a non-closing issue reference for docs/test-only PRs (#3289 )

2026-08-09 21:38:53 -04:00

prompt-injection-scan.sh

enhance(#4209 ): optional external source reviewer lanes for /gsd:code-review (#4323 )

2026-09-07 22:52:33 -04:00

qa-smell-ratchet.cjs

enhance(#3987 ): guard slug re-derivation and the swallowed-precondition shape — §8.5 was guardable after all (#3999 )

2026-08-28 14:40:02 -04:00

registry-schema.cjs

enh(#2904 ): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912 )

2026-07-31 08:11:57 -04:00

release-tarball-smoke.cjs

enhance(#4154 ): validate configured entrypoints before reporting install success (#4249 )

2026-09-16 04:23:53 -04:00

require-issue-link-policy.cjs

ci(#4196 ): exempt dependabot[bot] from issue-link, title, and unsolicited-PR gates (#4203 )

2026-09-02 15:56:43 -04:00

research-profiles.cjs

fix(#2017 ): grant mcp__plugin_context7_context7__* for plugin-marketplace context7 (8 agents) (#2029 )

2026-07-05 17:15:48 -04:00

run-affected-tests.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

run-tests.cjs

fix(#4733 ): derive the win32 chunk cap, isolation bar, and unknown-file weight (#4737 )

2026-09-14 12:30:51 -04:00

secret-scan-lint.sh

feat(115): secret-scan exclusion governance + --strict reduced-scan mode (#134 )

2026-05-23 10:58:14 -04:00

secret-scan.sh

enhance(#3908 ): the scanners distinguish an empty diff from one they could not compute (#3937 )

2026-08-27 13:11:13 -04:00

select-docs-guards.cjs

feat(#3753 ): run docs guards on the PR that changes the docs they read (#3787 )

2026-08-23 21:21:21 -04:00

setup-branch-protection.sh

chore(#846 ): remove unused PR-size labeler (size/S–XL) workflow (#848 )

2026-06-07 22:03:48 -04:00

slurm-adapter.cjs

fix(#1164 ): wire external-job config keys + document wave:post choice (#2006 )

2026-07-05 14:04:00 -04:00

strip-prose-atrefs.cjs

chore: clean up clear-cut ESLint warnings (#732 ) (#734 )

2026-06-06 11:24:48 -04:00

sync-manifest-versions.cjs

feat(#1928 ): remove sunset Gemini CLI runtime, redirect to Antigravity (#1996 )

2026-07-04 13:32:51 -04:00

sync-next-version.cjs

ci(#1104 ): keep next package.json in sync with the last published release (#1109 )

2026-06-12 13:29:45 -04:00

sync-rulesets.sh

chore(#518 ): rename npm package + bin to @opengsd/gsd-core (#519 )

2026-05-30 17:25:02 -04:00

sync-runtime-launcher.cjs

feat(#3146 ): resolve gsd_run so workflows cannot reach a foreign gsd-tools (#3831 )

2026-08-24 20:57:16 -04:00

validate-registry.cjs

enh(#2904 ): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912 )

2026-07-31 08:11:57 -04:00

verify-npm-publish.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739 ) (#740 )

2026-06-06 16:13:13 -04:00

workflow-policy.cjs

feat(#435 ): expand workflow-policy linter to full Cartesian matrix cross-product (#1050 )

2026-06-11 13:36:47 -04:00

workflow-size.cjs

enhance(#4261 ): report size-cap headroom on every run, with a reserved margin (#4418 )

2026-09-07 22:04:48 -04:00