Jakub Zych c8ec304684 fix: build hooks before private install

2026-09-24 12:55:35 +02:00

..

baselines

feat(#3409): reject shell guards that cannot observe their own failure arm (#3558)

2026-08-15 21:09:05 -04:00

changeset

fix(#3620): point the docs at files that actually exist (#3658)

2026-08-19 01:54:01 -04:00

lib

enhance(#3829): report code review severity counts and record a per-finding disposition (#3861)

2026-09-22 21:04:09 -04:00

release-notes

fix(#2716): route non-user-facing conventional types to an Internal bucket, omit from release notes (#2838)

2026-07-29 17:06:04 -04:00

affected-tests-lib.cjs

chore(#4654): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674)

2026-09-12 22:17:46 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

enhance(#3908): the scanners distinguish an empty diff from one they could not compute (#3937)

2026-08-27 13:11:13 -04:00

benchmark-compact-content-variants.cjs

enhance(#4139): Phase 7 — the agent-skill seam picks the payload in code (#4553)

2026-09-09 12:38:59 -04:00

benchmark-compact-content.cjs

enhance(#4139): Phase 4 — measure the window instead of asserting it (#4502)

2026-09-07 19:19:03 -04:00

build-hooks.js

enhance(#4221): replace installer Read() deny rules with a managed secret-read guard hook (#4236)

2026-09-05 04:00:08 -04:00

check-alias-drift.cjs

fix(#2725): repoint the pre-commit alias guard at sources git can actually stage, drop nine dead ones (#3273)

2026-08-09 18:29:16 -04:00

check-contract-drift.cjs

enhance(#4139): Phase 7 — the agent-skill seam picks the payload in code (#4553)

2026-09-09 12:38:59 -04:00

check-coverage-gate.cjs

fix(#2474): gate worktree dispatch on project-level USE_WORKTREES too (#2561)

2026-07-23 09:14:02 -04:00

check-env.cjs

fix(#4460): correct two stale changesets left by an admin-merge race (#4572)

2026-09-09 16:26:25 -04:00

check-glossary-refs.cjs

fix(#4636,#4653): close the symlink hole, revert a wrong collapse, fix six review findings

2026-09-12 13:59:52 -04:00

check-mutation-score-ratchet.cjs

enhance(#3881): one YAML parser — vendored js-yaml replaces the hand-rolled dialect (#3888)

2026-08-26 19:29:32 -04:00

check-npm-integrity.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-check-job-near-cap.cjs

enhance(#4036): persist CI shard/job timeout-vs-cap trending, warn at 90% (#4043)

2026-08-29 16:13:15 -04:00

ci-guard-runner.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-next-health.cjs

feat(#4422): block merging into next/main while the base branch's Tests run is red (#4428)

2026-09-06 17:29:54 -04:00

ci-pr-mergeability.cjs

chore(#3833): gate every PR compute lane behind a mergeability preflight (#3843)

2026-08-24 21:13:55 -04:00

ci-prepare-test-scope.cjs

fix(#4641): make test-conformance the sole Windows selector and narrow the tier to 28.5% (#4643)

2026-09-11 17:00:11 -04:00

ci-rebase-check.cjs

fix(#2472): cost-balanced test sharding and pinned CI base commit (#2480)

2026-07-21 09:15:59 -04:00

ci-test-scope.cjs

fix(#4641): make test-conformance the sole Windows selector and narrow the tier to 28.5% (#4643)

2026-09-11 17:00:11 -04:00

ci-timeout-report.cjs

chore(#4603): retire the test-full CI job (#4604)

2026-09-10 12:46:04 -04:00

command-contract-helpers.cjs

enh(#3565): sentinel/contract registry + check:contract-drift lint (#3571)

2026-08-16 12:59:08 -04:00

diff-touches-shipped-paths.cjs

chore(#4654): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674)

2026-09-12 22:17:46 -04:00

docs-guard-registry.cjs

enhance(#4095): checkpoint:decision auto-selection is opt-in via auto_select (#4912)

2026-09-20 23:47:01 -04:00

fix-slash-commands.cjs

fix(#1223): install scripts/fix-slash-commands.cjs so gsd-tools loads (#1240)

2026-06-14 16:03:26 -04:00

gen-adr-index.cjs

chore(#4654): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674)

2026-09-12 22:17:46 -04:00

gen-capability-matrix.cjs

fix(#2903): use the command form that actually works in reader-facing docs (#3047)

2026-08-04 13:23:44 -04:00

gen-capability-registry.cjs

fix(#3606): validate hook-kind coverage at call sites and dispatch generically (#3687)

2026-08-19 16:41:27 -04:00

gen-context-index.cjs

chore(#3212): src/text-lines.cts is the sole owner of line-terminator handling — Phase 2 (#3420)

2026-08-13 20:27:48 -04:00

gen-emitted-baseline.cjs

refactor(#2724): delete the committed golden fixtures and size baselines (#2767)

2026-07-28 15:41:43 -04:00

gen-exit-code-docs.cjs

enhance(#3913): docs, and the guards come down (#3994)

2026-08-28 13:10:20 -04:00

gen-exit-code-registry.cjs

enhance(#3913): docs, and the guards come down (#3994)

2026-08-28 13:10:20 -04:00

gen-features.cjs

fix(#3840): reject a malformed feature order instead of coercing it (#3851)

2026-08-25 08:36:33 -04:00

gen-health-docs.cjs

feat(#3309): generate health.md's error-code and repair-action tables

2026-08-13 03:13:25 -04:00

gen-hooks-cli-exit.cjs

enhance(#3987): guard slug re-derivation and the swallowed-precondition shape — §8.5 was guardable after all (#3999)

2026-08-28 14:40:02 -04:00

gen-install-tree-fixtures.cjs

fix(#3738): antigravity global skills/agents install to ~/.gemini/config (#3921)

2026-08-27 02:24:03 -04:00

gen-inventory-manifest.cjs

enhance(#4139): Phase 3 — partition rules + the five checks (#4497)

2026-09-07 16:44:53 -04:00

gen-loop-host-contract.cjs

feat(#4740): make the Loop Host Contract role partition normative and enforced (#4742)

2026-09-14 18:30:47 -04:00

gen-platform-conformance-tier.cjs

fix(#4641): make test-conformance the sole Windows selector and narrow the tier to 28.5% (#4643)

2026-09-11 17:00:11 -04:00

gen-plugin-skills.cjs

feat(#1596): ship GSD skills via .claude-plugin/plugin.json

2026-06-22 18:07:35 -04:00

gen-prompt-budget-parity-corpus.cjs

chore(#2929): generalize prompt-budget into the shared context-composer seam (#2958)

2026-07-31 23:03:13 -04:00

gen-registry.cjs

chore(#3212): src/text-lines.cts is the sole owner of line-terminator handling — Phase 2 (#3420)

2026-08-13 20:27:48 -04:00

gen-research-agents.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

gen-scripts-cli-exit.cjs

enhance(#3904): one exit module — generate the scripts-side copy from a single source (#3917)

2026-08-26 21:24:34 -04:00

gen-section-manifest.cjs

chore(#1671): widen the when= grammar and key the section manifest per workflow — Phase 6.1 (#3013)

2026-08-02 22:36:45 -04:00

gen-state-md-docs.cjs

enhance(#3873): the STATE.md schema — one owner, generated artifacts (#3880)

2026-08-26 01:57:47 -04:00

gen-test-timings.cjs

fix(#2456): weight test chunks by measured cost and pack with LPT (#2463)

2026-07-20 16:51:35 -04:00

generate-package-identity.cjs

fix(#2544): stage the CommonJS marker in GSD-owned dirs, not the config root (#2593)

2026-08-01 21:00:23 -04:00

gsd-test-gate-reasons.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

install-golem15.sh

fix: build hooks before private install

2026-09-24 12:55:35 +02:00

issue-dedupe.cjs

feat(#836): no-LLM duplicate-issue detection + challenge + 1-day auto-close (#843)

2026-06-07 20:35:43 -04:00

issue-version-gate.cjs

feat(#1180): hard-gate the GSD Version requirement on bug reports (#1181)

2026-06-13 16:13:00 -04:00

lint-allow-test-rule-refs.allowlist.json

enhance(#3464): exec() detection widening, citation-debt cleanup — Phase 8 (#4171)

2026-09-02 08:11:23 -04:00

lint-allow-test-rule-refs.cjs

fix(#4060): drive repo-baseline lint check in-process, not via a subprocess timeout race (#4065)

2026-08-29 18:20:24 -04:00

lint-allow-test-rule-refs.effective-ceiling.json

enhance(#3464): exec() detection widening, citation-debt cleanup — Phase 8 (#4171)

2026-09-02 08:11:23 -04:00

lint-allow-test-rule-refs.unverified-ceiling.json

enhance(#3301): tell reviewers the plan ids and total count, grade coverage (#4084)

2026-08-30 14:25:24 -04:00

lint-allowed-tools-parity.cjs

chore(#4394): lint allowed-tools parity — Bash without Grep (#4431)

2026-09-07 09:44:38 -04:00

lint-canary-version-leak.cjs

chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)

2026-08-10 12:55:52 -04:00

lint-command-contract.cjs

chore(#3560): delete two unreachable workflows, gate workflow reachability in lint (#3564)

2026-08-15 23:29:30 -04:00

lint-compiled-artifact-sync.cjs

fix(#2657): untrack the nine ADR-457 migration-gap compiled artifacts (#3011)

2026-08-02 21:22:43 -04:00

lint-completion-predicate-drift.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

lint-completion-ratio-drift.cjs

refactor(#3180): ADR-3180 behavior contract + cross-surface drift guardrails (#3223)

2026-08-08 16:05:17 -04:00

lint-default-flip-documentation.cjs

chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)

2026-08-10 12:55:52 -04:00

lint-descriptions.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-docs-command-form.cjs

fix(#2903): use the command form that actually works in reader-facing docs (#3047)

2026-08-04 13:23:44 -04:00

lint-docs-guard-registration.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-docs-guard-registration.exempt-baseline.cjs

chore(#4729): guard the retired-runtime name, and finish the locale residue (#4753)

2026-09-14 20:50:26 -04:00

lint-docs-required.cjs

fix(#2988): local changeset/docs lint falls back to next, not main (#3095)

2026-08-05 19:27:07 -04:00

lint-eslint-glob-coverage.allowlist.json

enhance(#3881): one YAML parser — vendored js-yaml replaces the hand-rolled dialect (#3888)

2026-08-26 19:29:32 -04:00

lint-eslint-glob-coverage.cjs

chore(#3059): close the ESLint glob-coverage escape and guard it (#3277)

2026-08-09 19:35:34 -04:00

lint-example-parser-parity.cjs

fix(#2944): remove the catastrophic-backtracking regex from the ADR-1671 example (#2950)

2026-07-31 15:44:19 -04:00

lint-fix-has-regression-tests.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

lint-frontmatter-scalar-broad-grep.cjs

chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)

2026-08-10 12:55:52 -04:00

lint-health-diagnostic-rule-table.cjs

fix(#3696): report the last_activity invariant and make the verdict gateable with --strict (#3844)

2026-08-24 21:33:48 -04:00

lint-hooks-runtime-build-seam.cjs

fix(#3582): route every hook's compiled-module require through the self-heal build seam (#3629)

2026-08-18 14:11:23 -04:00

lint-legacy-dir-name.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-milestone-window-drift.cjs

refactor(#3309): migrate cmdValidateHealth onto the rule table

2026-08-13 02:28:49 -04:00

lint-mutation-test-derivation-drift.cjs

enhance(#3881): one YAML parser — vendored js-yaml replaces the hand-rolled dialect (#3888)

2026-08-26 19:29:32 -04:00

lint-no-adhoc-regex-escape.cjs

chore(#3212): src/pattern.cts is the sole owner of runtime-value regex construction — Phase 1 (#3416)

2026-08-13 16:19:57 -04:00

lint-package-identity-drift.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

lint-phase-enumeration-drift.cjs

enhance(#3348): add a context-drift pre-check gate to plan-phase (#4147)

2026-09-01 21:39:37 -04:00

lint-phase-id-drift.cjs

fix(#4830): re-land #4768's letter-suffix phase-id fix and its lint-phase-id-drift ratchets on current next (#4873)

2026-09-20 00:01:21 -04:00

lint-plan-count-drift.cjs

fix(#3458): scan archived milestone phases, and make [A] Acknowledge actually suppress (#3555)

2026-08-15 17:00:52 -04:00

lint-planning-artifact-writer-drift.cjs

enhance(#3180): the sibling validators share one envelope and one owner — Phase 12 (#3407)

2026-08-13 11:31:16 -04:00

lint-planning-prompt-drift.cjs

fix(#3640): isolate the drift cli e2e fixture via a --root override (#3722)

2026-08-20 16:15:22 -04:00

lint-planning-snapshot-bypass-drift.cjs

refactor(#3308): add planning-snapshot.cts parsed projection per ADR-3180 §8.1

2026-08-12 21:43:39 -04:00

lint-portable-grep.cjs

fix(#4112): portable grep in workflow markdown + submodule commit fix under diff.ignoreSubmodules (#4149)

2026-09-01 17:31:01 -04:00

lint-portable-timeout.cjs

fix(#2351): replace hardcoded timeout with portable run-with-timeout (#2426)

2026-07-19 14:37:15 -04:00

lint-pr-check-project-dir.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-regression-test-names.allowlist.json

test(#1975): consolidate 51 CLI + scripts-tooling regression tests into module suites

2026-07-03 10:22:11 -04:00

lint-regression-test-names.cjs

chore(#3339): extend BUG_FILE_RE to fix-/issue- prefixes, close H3 (#3315)

2026-08-12 08:28:17 -04:00

lint-removed-but-needed.cjs

enhance(#3942): the emitted-drift ack is PR-lifetime data — move it to a commit trailer (#3954)

2026-08-27 17:28:39 -04:00

lint-resolution-provenance.allowlist.json

chore(#1417): add resolution-provenance CI guard (Resolution Provenance P4) (#1428)

2026-06-18 08:50:22 -04:00

lint-resolution-provenance.cjs

fix(#1880): distinguish a corrupt config from an absent one (epic #1879 Phase 1) (#2688)

2026-07-27 00:09:13 -04:00

lint-response-language-coverage.cjs

enhance(#4139): Phase 3 — partition rules + the five checks (#4497)

2026-09-07 16:44:53 -04:00

lint-retired-runtime-name.cjs

fix(#4709): a retired runtime id must not resolve to Claude Code (#4756)

2026-09-14 22:22:16 -04:00

lint-seam-enforcement.cjs

enhance(#3626): make CONTEXT.md seam claims checkable via a SEAM.*.enforced-by gate (#3975)

2026-08-28 08:06:41 -04:00

lint-shell-command-projection-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-skill-deps.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-slug-derivation-drift.cjs

enhance(#3987): guard slug re-derivation and the swallowed-precondition shape — §8.5 was guardable after all (#3999)

2026-08-28 14:40:02 -04:00

lint-source-test-name-collision.cjs

chore(#4654): add local/no-unconfined-path-join and drain it to zero — Phase 4 of #4636 (#4674)

2026-09-12 22:17:46 -04:00

lint-state-field-drift.cjs

refactor(#3187): give state field extraction one canonical owner (#3283)

2026-08-09 22:49:39 -04:00

lint-state-write-path-drift.cjs

feat(#4668): add StateWriteIntent type surface and opaque-transform guard recognition (ADR-4629 C1) (#4676)

2026-09-14 21:43:49 -04:00

lint-table-schema-drift.cjs

chore(#2143): prohibition-with-teeth + migrate remaining ad-hoc table sites — Phase 4 (final) (#2253)

2026-07-14 14:25:44 -04:00

lint-test-file-count.allowlist.json

fix(#4657): give the ui consideration probe a text_en language channel (#4804)

2026-09-16 13:46:40 -04:00

lint-test-file-count.cjs

feat(#3227): publish machine-readable state contract at step boundaries (#3824)

2026-08-24 17:56:02 -04:00

lint-unreachable-guard-drift.cjs

enhance(#3884): failure is a value — strict argv, and --pick that signals absence (#3922)

2026-08-27 00:12:13 -04:00

lint-vendored-deps.cjs

fix(#4282): register PATTERNS.md as a canonical .planning/ artifact (#4618)

2026-09-10 22:46:18 -04:00

lint-workflow-shellcheck-baseline.json

enhance(#3829): report code review severity counts and record a per-finding disposition (#3861)

2026-09-22 21:04:09 -04:00

lint-workflow-shellcheck.cjs

fix(#4120): replace shellcheck npm dep with dependency-free downloader (#4121)

2026-08-31 22:31:23 -04:00

live-config-guard.cjs

fix(#2665): stop watching shared ground, and derive the artifact prefix too

2026-08-08 05:50:49 -05:00

mutation-matrix.cjs

enhance(#3915): stryker on the official tap runner, 29m to 12m on the critical path (#3919)

2026-08-26 22:43:14 -04:00

npm-audit-baseline.cjs

fix(#4250, #4260): distinguish a timed-out npm audit from a JSON parse failure, retry with backoff (#4251)

2026-09-04 10:02:17 -04:00

pr-changed-files.cjs

chore(#3211): accept a non-closing issue reference for docs/test-only PRs (#3289)

2026-08-09 21:38:53 -04:00

pr-target-policy.cjs

refactor(#1190): extract ADR-230 PR-target branch policy into a tested, fork-safe seam (#1246)

2026-06-14 17:16:19 -04:00

pr-template-policy.cjs

chore(#3211): accept a non-closing issue reference for docs/test-only PRs (#3289)

2026-08-09 21:38:53 -04:00

prompt-injection-scan.sh

enhance(#4209): optional external source reviewer lanes for /gsd:code-review (#4323)

2026-09-07 22:52:33 -04:00

qa-smell-ratchet.cjs

enhance(#3987): guard slug re-derivation and the swallowed-precondition shape — §8.5 was guardable after all (#3999)

2026-08-28 14:40:02 -04:00

registry-schema.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

release-tarball-smoke.cjs

enhance(#4154): validate configured entrypoints before reporting install success (#4249)

2026-09-16 04:23:53 -04:00

require-issue-link-policy.cjs

ci(#4196): exempt dependabot[bot] from issue-link, title, and unsolicited-PR gates (#4203)

2026-09-02 15:56:43 -04:00

research-profiles.cjs

fix(#2017): grant mcp__plugin_context7_context7__* for plugin-marketplace context7 (8 agents) (#2029)

2026-07-05 17:15:48 -04:00

run-affected-tests.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

run-tests.cjs

fix(#4949): cap unmeasured files per Windows conformance chunk (#4950)

2026-09-23 15:26:20 -04:00

secret-scan-lint.sh

feat(115): secret-scan exclusion governance + --strict reduced-scan mode (#134)

2026-05-23 10:58:14 -04:00

secret-scan.sh

enhance(#3908): the scanners distinguish an empty diff from one they could not compute (#3937)

2026-08-27 13:11:13 -04:00

select-docs-guards.cjs

feat(#3753): run docs guards on the PR that changes the docs they read (#3787)

2026-08-23 21:21:21 -04:00

setup-branch-protection.sh

chore(#846): remove unused PR-size labeler (size/S–XL) workflow (#848)

2026-06-07 22:03:48 -04:00

slurm-adapter.cjs

fix(#1164): wire external-job config keys + document wave:post choice (#2006)

2026-07-05 14:04:00 -04:00

strip-prose-atrefs.cjs

chore: clean up clear-cut ESLint warnings (#732) (#734)

2026-06-06 11:24:48 -04:00

sync-manifest-versions.cjs

feat(#1928): remove sunset Gemini CLI runtime, redirect to Antigravity (#1996)

2026-07-04 13:32:51 -04:00

sync-next-version.cjs

ci(#1104): keep next package.json in sync with the last published release (#1109)

2026-06-12 13:29:45 -04:00

sync-rulesets.sh

chore(#518): rename npm package + bin to @opengsd/gsd-core (#519)

2026-05-30 17:25:02 -04:00

sync-runtime-launcher.cjs

feat(#3146): resolve gsd_run so workflows cannot reach a foreign gsd-tools (#3831)

2026-08-24 20:57:16 -04:00

validate-registry.cjs

enh(#2904): add a reviewer entry type so third-party reviewer lanes are discoverable (#2912)

2026-07-31 08:11:57 -04:00

verify-npm-publish.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

workflow-policy.cjs

feat(#435): expand workflow-policy linter to full Cartesian matrix cross-product (#1050)

2026-06-11 13:36:47 -04:00

workflow-size.cjs

enhance(#4261): report size-cap headroom on every run, with a reserved margin (#4418)

2026-09-07 22:04:48 -04:00