@opengsd/gsd-core 1.14.0 → 1.16.0

package/scripts/lib/platform-conformance-tier.generated.cjs

@@ -14,7 +14,9 @@ module.exports = {
   "tests/assumption-delta-checkpoint-e2e.test.cjs",
   "tests/assumption-delta.test.cjs",
   "tests/audit-command-cutover.test.cjs",
+  "tests/audit-workstream-layouts.test.cjs",
   "tests/augment-upgrades.test.cjs",
+  "tests/blocking-guard-budget-parity.test.cjs",
   "tests/broken-windows.test.cjs",
   "tests/capability-cli.test.cjs",
   "tests/capability-command-dispatch.test.cjs",
@@ -27,10 +29,13 @@ module.exports = {
   "tests/capability-source.test.cjs",
   "tests/capability-state.test.cjs",
   "tests/changeset-new.test.cjs",
+  "tests/check-contract-drift.test.cjs",
   "tests/check-env.test.cjs",
   "tests/check-gap-analysis-plan-post-e2e.test.cjs",
   "tests/check-glossary-refs.test.cjs",
   "tests/check-predicate.test.cjs",
+  "tests/check-router-cutover-equivalence.test.cjs",
+  "tests/check-router-gate-boundaries.test.cjs",
   "tests/check-tdd-review-checkpoint-e2e.test.cjs",
   "tests/check-ui-safety-gate.test.cjs",
   "tests/check-update-config-dir.test.cjs",
@@ -42,6 +47,7 @@ module.exports = {
   "tests/claude-md.test.cjs",
   "tests/cline-install.test.cjs",
   "tests/close-phase-todos-padded-resolves.test.cjs",
+  "tests/code-review-fix-pipeline-regression.test.cjs",
   "tests/code-review-pipeline-regression.test.cjs",
   "tests/code-review-tier3-files-override-scoping.test.cjs",
   "tests/code-review.test.cjs",
@@ -51,7 +57,7 @@ module.exports = {
   "tests/codex-config.test.cjs",
   "tests/codex-inherit-smoke.test.cjs",
   "tests/command-routing-hub.test.cjs",
-  "tests/commands.test.cjs",
+  "tests/commands.platform.test.cjs",
   "tests/commit-files-deletion.test.cjs",
   "tests/commit-files-pathspec.test.cjs",
   "tests/commonjs-marker.test.cjs",
@@ -61,16 +67,21 @@ module.exports = {
   "tests/config-get-default.test.cjs",
   "tests/config-loader.test.cjs",
   "tests/config-schema.property.test.cjs",
-  "tests/config.test.cjs",
+  "tests/config.platform.test.cjs",
+  "tests/configured-entrypoint-validation.test.cjs",
+  "tests/context-drift.test.cjs",
   "tests/copilot-install.test.cjs",
   "tests/copilot-upgrades.test.cjs",
   "tests/core-utils.test.cjs",
   "tests/cursor-hook-workspace-roots.test.cjs",
   "tests/cursor-hooks.test.cjs",
   "tests/cursor-subagent-isolation.test.cjs",
+  "tests/debug-session-management.test.cjs",
   "tests/dispatch-identity.test.cjs",
   "tests/dispatcher.test.cjs",
   "tests/drift-detection.test.cjs",
+  "tests/drift-whole-change-set.test.cjs",
+  "tests/effort-local-install.test.cjs",
   "tests/effort-surface-axis.test.cjs",
   "tests/effort-sync-installed-runtime.test.cjs",
   "tests/emitted-ack-trailer.test.cjs",
@@ -92,6 +103,16 @@ module.exports = {
   "tests/features-index-gate.test.cjs",
   "tests/frontmatter.test.cjs",
   "tests/gap-checker.property.test.cjs",
+  "tests/gate-api-coverage-verify-pre-escape.test.cjs",
+  "tests/gate-consumer-exit-awareness.test.cjs",
+  "tests/gate-decision-coverage-verify-stderr.test.cjs",
+  "tests/gate-exit.test.cjs",
+  "tests/gate-tdd-red-evidence-containment.test.cjs",
+  "tests/gate-tdd-review-checkpoint-hardening.test.cjs",
+  "tests/gate-tdd-review-checkpoint.unit.test.cjs",
+  "tests/gate-ui-plan.unit.test.cjs",
+  "tests/gate-ui-safety.unit.test.cjs",
+  "tests/gate-verify-command-paths.unit.test.cjs",
   "tests/gemini-runtime-removed.test.cjs",
   "tests/gen-context-index.test.cjs",
   "tests/gen-health-docs.test.cjs",
@@ -107,6 +128,7 @@ module.exports = {
   "tests/gsd-mcp-server-bin.test.cjs",
   "tests/gsd-statusline.test.cjs",
   "tests/gsd-validate-commit-crash-policy.test.cjs",
+  "tests/gsd-validate-commit-sigpipe.test.cjs",
   "tests/gsd-write-guard.test.cjs",
   "tests/health-diagnostic-rules/config-validation.test.cjs",
   "tests/health-diagnostic-rules/worktree-health.test.cjs",
@@ -114,12 +136,12 @@ module.exports = {
   "tests/helpers-cleanup.test.cjs",
   "tests/helpers-process-isolation.test.cjs",
   "tests/hermes-skills-migration.test.cjs",
+  "tests/hook-activation-probe.test.cjs",
   "tests/hooks-commonjs-marker.test.cjs",
   "tests/hooks-crash-policy.test.cjs",
   "tests/hooks-opt-in.test.cjs",
   "tests/host-integration.test.cjs",
   "tests/init-manager.test.cjs",
-  "tests/init.test.cjs",
   "tests/install-minimal-hooks.test.cjs",
   "tests/install-nested-layout.test.cjs",
   "tests/install-path-detection.test.cjs",
@@ -141,6 +163,8 @@ module.exports = {
   "tests/kimi-agent-converter.test.cjs",
   "tests/kimi-upgrades.test.cjs",
   "tests/kimi-variant-disambiguation.test.cjs",
+  "tests/launcher-homes-derivation.test.cjs",
+  "tests/lint-phase-arg-assignment.test.cjs",
   "tests/lint-workflow-shellcheck-fetch.test.cjs",
   "tests/live-config-guard.test.cjs",
   "tests/lockfile-cve-audit.test.cjs",
@@ -165,6 +189,7 @@ module.exports = {
   "tests/no-unbounded-dirname-walk.rule.test.cjs",
   "tests/no-unbounded-spawn.test.cjs",
   "tests/no-unguarded-nonportable-exec.rule.test.cjs",
+  "tests/node-compile-cache.test.cjs",
   "tests/npm-audit-baseline.test.cjs",
   "tests/npm-integrity-gate.test.cjs",
   "tests/nsegment-phase-grammar.test.cjs",
@@ -180,7 +205,7 @@ module.exports = {
   "tests/phase-completion-single-owner.test.cjs",
   "tests/phase-estimation.test.cjs",
   "tests/phase-locator.test.cjs",
-  "tests/phase.test.cjs",
+  "tests/phase.platform.test.cjs",
   "tests/phase6-capstone-conformance.test.cjs",
   "tests/pi-config-dir-env-override.test.cjs",
   "tests/plan-count-single-owner.test.cjs",
@@ -207,6 +232,7 @@ module.exports = {
   "tests/profile-pipeline.test.cjs",
   "tests/prohibition-enforcement.test.cjs",
   "tests/project-root.test.cjs",
+  "tests/quick-batch-command-router.stdin.test.cjs",
   "tests/quick-batch.test.cjs",
   "tests/quick-branching.test.cjs",
   "tests/quick-research.test.cjs",
@@ -231,16 +257,20 @@ module.exports = {
   "tests/reviewer-step-dispatch.test.cjs",
   "tests/revision-remediation-binding.test.cjs",
   "tests/roadmap-parser.test.cjs",
+  "tests/roadmap-upgrade-bracket.test.cjs",
   "tests/roadmap.test.cjs",
+  "tests/run-tests-accounting.test.cjs",
   "tests/run-tests-harness.test.cjs",
   "tests/run-tests-temp-root.test.cjs",
   "tests/run-with-timeout.test.cjs",
   "tests/runtime-artifact-layout-surface.test.cjs",
   "tests/runtime-artifact-layout.test.cjs",
   "tests/runtime-converters.test.cjs",
+  "tests/runtime-descriptor-owner.test.cjs",
   "tests/runtime-homes-descriptor-drive.test.cjs",
   "tests/runtime-identity.test.cjs",
   "tests/runtime-launcher-parity.test.cjs",
+  "tests/schema-drift.test.cjs",
   "tests/security.test.cjs",
   "tests/settings-jsonc.test.cjs",
   "tests/sh-hook-paths.test.cjs",
@@ -248,20 +278,30 @@ module.exports = {
   "tests/shell-command-projection-dispatch.test.cjs",
   "tests/shell-command-projection-path-sep.test.cjs",
   "tests/ship-notes-wedged-pr.test.cjs",
+  "tests/shipped-reference-cites.test.cjs",
   "tests/skill-manifest.test.cjs",
   "tests/slug-derivation-drift-guard.test.cjs",
   "tests/state-todos-render.test.cjs",
-  "tests/state.test.cjs",
+  "tests/state.platform.test.cjs",
   "tests/teams-status.test.cjs",
+  "tests/test-gate-watch-mode.test.cjs",
   "tests/todos-workstream-scope.test.cjs",
+  "tests/uat-complete-session.test.cjs",
+  "tests/ui-auditor-screenshot-block.test.cjs",
+  "tests/ui-interaction-capture.test.cjs",
+  "tests/undo-commit-selection-4465.test.cjs",
+  "tests/undo-commit-selection.test.cjs",
   "tests/unreachable-guard-drift.test.cjs",
   "tests/unreachable-shell-guard.test.cjs",
   "tests/unusable-input.test.cjs",
   "tests/update-custom-backup.test.cjs",
   "tests/user-artifact-staging.test.cjs",
+  "tests/verification-append-audit.test.cjs",
   "tests/verification-status.test.cjs",
   "tests/verify-archive-dirs-live-path.test.cjs",
   "tests/verify-command-grounding.test.cjs",
+  "tests/verify-lifecycle-writes-e2e.test.cjs",
+  "tests/verify-work-auto-transition.test.cjs",
   "tests/verify.test.cjs",
   "tests/windsurf-hooks-bridge.test.cjs",
   "tests/workflow-guard.test.cjs",

package/scripts/lib/registration-ledger-preload.cjs

@@ -0,0 +1,155 @@
+'use strict';
+
+// Registration ledger preload for scripts/run-tests.cjs (#4031).
+//
+// Why this exists. The runner passes `--test-force-exit` to every chunk (the
+// Windows post-test hang backstop, #1051/#869). Under process isolation each
+// test file's child streams its results to the `node --test` parent over a
+// pipe, and a force-exit can end the parent while bytes of that pipe are still
+// unread (nodejs/node#64833). The reporters never see the lost tail, so the
+// run printed a smaller pass count and exited 0: a test that executed and
+// passed (or failed) was indistinguishable from one that never existed.
+//
+// The parent cannot know what it did not receive, so the count of results the
+// child produced has to come from the child, over a channel that does not
+// share the pipe: this module is loaded into each test-file child with
+// `--require` (`--test` forwards it to the file children) and counts the leaf
+// `test:pass` / `test:fail` events the child's own reporter hands to the V8
+// serializer that frames them onto that pipe, keyed by the `file` each event
+// carries. When the child exits it appends one line per file to the file named
+// by GSD_RUN_TESTS_LEDGER_FILE. The runner compares that per-file count with
+// the leaf results its ndjson reporter actually received
+// (analyzeChunkAccounting in run-tests.cjs) and fails the chunk when
+// registered > reported.
+//
+// Why it taps the serializer and does NOT wrap `test()` / `it()`. node:test
+// stamps every test with the location of the code that called it
+// (`getCallerLocation()` in lib/internal/test_runner/harness.js) and reports
+// that as the event's `file`. A wrapper around `test` is a JS frame between the
+// test file and node:test, so every event would report THIS file as its
+// location: spec-reporter failure locations would point here and no result
+// could be matched back to its test file. Counting at the serializer adds no
+// frame to the call and counts exactly what is put on the pipe, so the count
+// and the parent's report are compared like for like: a skipped or todo test,
+// a skipped suite and a test name/only filter need no special case
+// (an excluded test emits no event on either side).
+//
+// Blind spots, stated plainly: a child that emits nothing counts 0 (no loss is
+// visible); a SIGKILLed child never runs the `exit` handler below, so it leaves no
+// ledger line; a file the parent reported but the ledger never saw is not flagged
+// per file; and the whole count depends on node:test's child reporter framing its
+// events through v8.DefaultSerializer.prototype.writeValue (true on Node 24). If a
+// Node change moves that, every count becomes 0: the runner then fails a chunk whose
+// ledger counted 0 while its reporter received results (analyzeChunkAccounting,
+// `ledgerCountedNothing`), and tests/run-tests-accounting.test.cjs pins the hook.
+//
+// Inert unless it is inside a test-file child (NODE_TEST_CONTEXT is set by
+// `node --test` for those, not for the runner parent), so requiring it anywhere
+// else is a no-op. There it does two things: it makes the child's stdout pipe
+// blocking (blockChildStdout: this is what stops `--test-force-exit` from
+// discarding queued results, the loss this accounting exists to detect), and,
+// when a ledger path was supplied, counts results. Never throws into the code it
+// observes.
+
+const fs = require('fs');
+const path = require('path');
+const { DefaultSerializer } = require('v8');
+
+const RESULT_TYPES = new Set(['test:pass', 'test:fail']);
+
+/**
+ * The file a reporter event counts toward, or null when the event is not a leaf test result the
+ * runner's ndjson reporter would record (anything but a pass/fail, a suite, an event with no file).
+ * analyzeChunkAccounting applies the same three conditions to the events it reads back.
+ */
+function resultFileOf(item) {
+  if (item === null || typeof item !== 'object' || !RESULT_TYPES.has(item.type)) return null;
+  const data = item.data;
+  if (data === null || typeof data !== 'object' || typeof data.file !== 'string') return null;
+  if (data.details && data.details.type === 'suite') return null;
+  return data.file;
+}
+
+/**
+ * One spelling for every ledger line: the real path. node reports a result's `file` already resolved
+ * through symlinks (macOS /var -> /private/var), while a zero-result child's only name is process.argv[1],
+ * as given, so without this the two kinds of line disagree on the same file. Best-effort: a path that cannot
+ * be resolved keeps its absolute spelling (analyzeChunkAccounting normalizes both sides again regardless).
+ */
+function canonicalPath(file) {
+  const absolute = path.resolve(file);
+  try {
+    return fs.realpathSync.native(absolute);
+  } catch {
+    return absolute;
+  }
+}
+
+function install(ledgerPath,serializerPrototype = DefaultSerializer.prototype) {
+  const counts = new Map(); // file -> leaf results handed to the serializer
+
+  const original = serializerPrototype.writeValue;
+  serializerPrototype.writeValue = function writeValueCountingResults(value) {
+    try {
+      const file = resultFileOf(value);
+      if (file !== null) counts.set(file, (counts.get(file) || 0) + 1);
+    } catch {
+      // Counting must never change what is serialized.
+    }
+    return Reflect.apply(original, this, arguments);
+  };
+
+  process.on('exit', () => {
+    try {
+      // A child that produced no result still records itself (count 0), so the runner can tell
+      // "the preload ran and saw nothing" from "the preload never ran".
+      if (counts.size === 0 && process.argv[1]) counts.set(process.argv[1], 0);
+      const lines = [];
+      for (const [file, count] of counts) {
+        lines.push(JSON.stringify({ type: 'registered', file: canonicalPath(file), count }));
+      }
+      fs.appendFileSync(ledgerPath, `${lines.join('\n')}\n`);
+    } catch {
+      // Best-effort: the ledger is a diagnostic channel and must never change
+      // the exit status of the test file it observes.
+    }
+  });
+}
+
+/**
+ * Make the test-file child's stdout (the pipe its results travel to the `node --test` parent on)
+ * blocking, so every frame it wrote has reached the OS when the child exits.
+ *
+ * Why: the runner passes `--test-force-exit`, and node forwards it to each file child. A forced
+ * child calls process.exit() as soon as its root test ends; its stdout is a non-blocking pipe on
+ * POSIX, so frames still queued in the Socket are discarded and the parent never receives those
+ * results (nodejs/node#64833; the fix proposed there, nodejs/node#64875, does exactly this with
+ * `_handle.setBlocking(true)` at force-exit). Measured on Node 24.18 / Linux with 20 files x 300
+ * tests, `--test-force-exit --test-concurrency=8`: 5039-5139 of 6000 results reported without
+ * this, 6000 of 6000 with it (and 6000 without force-exit). Doing it at load time rather than at
+ * exit means nothing is ever queued. The Windows hang guard that force-exit exists for (#1051)
+ * is untouched. Best-effort: a stdout with no pipe handle (a file, a TTY) is left alone.
+ */
+function blockChildStdout(stdout) {
+  try {
+    const target = stdout === undefined ? process.stdout : stdout;
+    const handle = target && target._handle;
+    if (handle && typeof handle.setBlocking === 'function') {
+      handle.setBlocking(true);
+      return true;
+    }
+  } catch {
+    // Never throw into the test file this observes.
+  }
+  return false;
+}
+
+// Inside a test-file child only (NODE_TEST_CONTEXT is set by `node --test` for those, not for the
+// runner parent): the blocking stdout needs no ledger path; the ledger count needs one.
+if (process.env.NODE_TEST_CONTEXT) {
+  blockChildStdout();
+  const ledgerPath = process.env.GSD_RUN_TESTS_LEDGER_FILE;
+  if (ledgerPath) install(ledgerPath);
+}
+
+module.exports = { install, resultFileOf, blockChildStdout };

package/scripts/lib/vendor-bundle.cjs

@@ -0,0 +1,59 @@
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { isBuiltin } = require('node:module');
+const { buildSync } = require('esbuild');
+
+/** Rebuild locked upstream code without edits; installed trees need no node_modules. */
+function buildVendorBundle(root, entry) {
+  const result = buildSync({
+    absWorkingDir: root,
+    entryPoints: [entry],
+    bundle: true,
+    platform: 'node',
+    format: 'cjs',
+    target: 'node24',
+    write: false,
+    metafile: true,
+    legalComments: 'inline',
+    banner: { js: '// Generated from locked npm dependencies by lint-vendored-deps.cjs --fix. Do not edit.' },
+  });
+  for (const output of Object.values(result.metafile.outputs)) {
+    for (const imported of output.imports) {
+      if (imported.external && !isBuiltin(imported.path)) {
+        throw new Error(`Vendor bundle has an external dependency: ${imported.path}`);
+      }
+    }
+  }
+  const packages = new Map();
+  for (const input of Object.keys(result.metafile.inputs)) {
+    let dir = path.dirname(path.resolve(root, input));
+    while (dir !== root && dir !== path.dirname(dir)) {
+      const manifest = path.join(dir, 'package.json');
+      if (fs.existsSync(manifest)) {
+        const pkg = JSON.parse(fs.readFileSync(manifest, 'utf8'));
+        if (pkg.name && pkg.version) {
+          const licenses = fs.readdirSync(dir).filter((name) => /^(licen[sc]e|copying|notice)(\.|$)/i.test(name)).sort();
+          // saxes 6.0.0 omits its LICENSE from npm; preserve the exact tagged
+          // upstream file (https://github.com/lddubeau/saxes/blob/v6.0.0/LICENSE).
+          const supplemental = path.join(__dirname, 'vendor-licenses', `${pkg.name}-${pkg.version}.txt`);
+          if (licenses.length === 0 && !fs.existsSync(supplemental)) throw new Error(`Missing upstream license: ${pkg.name}`);
+          packages.set(`${pkg.name}@${pkg.version}`, [
+            `${pkg.name}@${pkg.version} (package metadata: ${pkg.license})`,
+            ...licenses.map((name) => `${name}:\n${fs.readFileSync(path.join(dir, name), 'utf8')}`),
+            ...(licenses.length === 0 ? [fs.readFileSync(supplemental, 'utf8')] : []),
+          ].join('\n\n'));
+          break;
+        }
+      }
+      dir = path.dirname(dir);
+    }
+  }
+  return {
+    code: result.outputFiles[0].contents,
+    notices: Buffer.from([...packages.keys()].sort().map((name) => packages.get(name)).join('\n\n---\n\n') + '\n'),
+  };
+}
+
+module.exports = { buildVendorBundle };

package/scripts/lib/vendor-licenses/saxes-6.0.0.txt

@@ -0,0 +1,64 @@
+The ISC License
+
+Copyright (c) Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+====
+
+The following license is the one that governed sax, from which saxes
+was forked. Isaac Schlueter is not *directly* involved with saxes so
+don't go bugging him for saxes issues.
+
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+====
+
+`String.fromCodePoint` by Mathias Bynens is no longer used, but it can
+still be found in old commits. It was once used according to terms of
+MIT License, as follows:
+
+    Copyright Mathias Bynens <https://mathiasbynens.be/>
+
+    Permission is hereby granted, free of charge, to any person obtaining
+    a copy of this software and associated documentation files (the
+    "Software"), to deal in the Software without restriction, including
+    without limitation the rights to use, copy, modify, merge, publish,
+    distribute, sublicense, and/or sell copies of the Software, and to
+    permit persons to whom the Software is furnished to do so, subject to
+    the following conditions:
+
+    The above copyright notice and this permission notice shall be
+    included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+    EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+    MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+    NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+    LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+    OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+    WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/scripts/lint-allow-test-rule-refs.effective-ceiling.json

@@ -1,4 +1,4 @@
 {
-  "maxSites": 84,
+  "maxSites": 64,
   "grace": 2
 }

package/scripts/lint-allow-test-rule-refs.unverified-ceiling.json

@@ -1,3 +1,3 @@
 {
-  "maxFiles": 283
+  "maxFiles": 284
 }

package/scripts/lint-completion-predicate-drift.cjs

@@ -805,17 +805,17 @@ const OWNER_FILE = path.join('src', 'verification.cts');
 //     one (the owner consumes plan counts, never the reverse). Left as its
 //     own, differently-scoped answer, per design's "Rejected" list item 1.
 //
-//   - `buildWorkstreamInventory` (src/workstream-inventory-builder.cts) — a
-//     PURE, I/O-free projection (see the module's own header) over
-//     PRE-COLLECTED `planCount`/`summaryCount`/`verificationStatus` inputs.
-//     `summariesMeetPlans = summaryCount >= planCount && planCount > 0`
-//     answers "are all plans summarized?" (combined with the caller-supplied
-//     verification verdict for its own `status` projection) — it cannot call
+//   - `buildWorkstreamInventory` (src/workstream-inventory-builder.cts) —
+//     formerly exempted here (a PURE, I/O-free projection that hand-rolled
+//     `summaryCount >= planCount && planCount > 0` locally, unable to call
 //     the I/O-bound `isPhaseComplete` without breaking its "No I/O. No
-//     async." contract, and re-plumbing its callers to pass a pre-computed
-//     `complete` boolean instead of raw counts is a larger architectural
-//     change than this phase's declared 6 call sites. Declared deviation —
-//     see the Phase 4 migration PR for the full reasoning.
+//     async." contract). #5060 (Phase Status Module, epic #5056) gave this
+//     exact "pure function over pre-collected facts" shape a real owner —
+//     `phaseStatusFromFacts` (`src/phase-status.cts`) — which is itself
+//     import-free at load time and does no I/O, so this function now calls
+//     it instead of re-deriving the comparison locally. The local textual
+//     shapes this guard matches are gone; the exemption entry was removed
+//     rather than left dead.
 //
 //   - `buildPhaseCompletionProjection` (src/init.cts) — MIGRATED onto
 //     `isPhaseComplete` for `phase_complete`/`verification_status` (shape
@@ -832,17 +832,17 @@ const OWNER_FILE = path.join('src', 'verification.cts');
 //
 // SHAPE (d) reuses this exact map (`findScanPhasePlansCompletedReadDrift`
 // takes the same `exemptFunctions` set every other shape's finder does). The
-// four entries above were entered for shapes (a)/(b)/(c); of them, only
+// entries above were entered for shapes (a)/(b)/(c); of them, only
 // `scanPhasePlans` (src/plan-scan.cts) also legitimately reads its OWN
 // `completed` field for shape (d)'s purposes (building the return value it
 // itself defines — not a call-then-read of another `scanPhasePlans(`
-// invocation). `isPhaseComplete`, `buildWorkstreamInventory`, and
-// `buildPhaseCompletionProjection` do not read `.completed` off a
-// `scanPhasePlans(` call result at all (verified by direct inspection of
-// each function's body as of this guard's shape-(d) addition — they consume
-// `planCount`/`summaryCount`/`summaryFiles`, never `.completed`), so their
-// presence in this map exempts nothing NEW for shape (d); they are listed
-// here only because the map is shared. As of this addition, a whole-repo
+// invocation). `isPhaseComplete` and `buildPhaseCompletionProjection` do not
+// read `.completed` off a `scanPhasePlans(` call result at all (verified by
+// direct inspection of each function's body as of this guard's shape-(d)
+// addition — they consume `planCount`/`summaryCount`/`summaryFiles`, never
+// `.completed`), so their presence in this map exempts nothing NEW for shape
+// (d); they are listed here only because the map is shared. As of this
+// addition, a whole-repo
 // scan found ZERO live shape-(d) sites needing a fresh exemption entry — the
 // one real instance this shape exists to catch (`cmdStateSync`,
 // src/state.cts) was fixed by routing through `isPhaseComplete` rather than
@@ -852,7 +852,6 @@ const OWNER_FILE = path.join('src', 'verification.cts');
 const FUNCTION_SCOPED_EXEMPTIONS = new Map([
   [OWNER_FILE, new Set(['isPhaseComplete'])],
   [path.join('src', 'plan-scan.cts'), new Set(['scanPhasePlans'])],
-  [path.join('src', 'workstream-inventory-builder.cts'), new Set(['buildWorkstreamInventory'])],
   [path.join('src', 'init.cts'), new Set(['buildPhaseCompletionProjection'])],
 ]);
 

package/scripts/lint-descriptions.cjs

@@ -16,6 +16,9 @@
 const fs = require('fs');
 const path = require('path');
 const { ExitError, runMain } = require('./lib/cli-exit.cjs');
+// The one frontmatter fence owner (src/frontmatter-fence.cts, built by build:lib).
+// This dev-time script runs after the build (`npm run lint:descriptions`, the tests).
+const { locateFrontmatterFence } = require('../gsd-core/bin/lib/frontmatter-fence.cjs');
 
 const MAX_LENGTH = 100;
 const COMMANDS_DIR = path.join(__dirname, '..', 'commands', 'gsd');
@@ -25,9 +28,10 @@ const COMMANDS_DIR = path.join(__dirname, '..', 'commands', 'gsd');
  * Returns null if no description is found.
  */
 function parseDescription(content) {
-  const fmMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-  if (!fmMatch) return null;
-  const fm = fmMatch[1];
+  // The block is the one the one fence owner finds (found while implementing #5105).
+  const fence = locateFrontmatterFence(content);
+  if (!fence || !fence.closed) return null;
+  const fm = content.slice(fence.openEnd, fence.bodyEnd);
 
   const quoted = fm.match(/^description:\s+"((?:[^"\\]|\\.)*)"\s*$/m);
   if (quoted) return quoted[1];

package/scripts/lint-docs-guard-registration.exempt-baseline.cjs

@@ -68,6 +68,7 @@ const DOCS_GUARD_EXEMPT_BASELINE = [
   'lint-allow-test-rule-refs.test.cjs',
   'lint-docs-command-form.test.cjs',
   'lint-docs-required.test.cjs',
+  'lint-retired-runtime-name.test.cjs',
   'manifest-version-sync.test.cjs',
   'milestone-archive.test.cjs',
   'model-resolver.test.cjs',
@@ -87,6 +88,7 @@ const DOCS_GUARD_EXEMPT_BASELINE = [
   'security-prompt-injection.security.test.cjs',
   'shipped-reference-cites.test.cjs',
   'state.test.cjs',
+  'verification-status.test.cjs',
   'worktree-safety.test.cjs',
 ];
 
@@ -178,13 +180,39 @@ const DOCS_GUARD_EXEMPT_DOCS_PATHS = {
     'docs/COMMANDS.md', 'docs/USER-GUIDE.md', 'docs/adr', 'docs/adr/0001-foo.md', 'docs/adr/0099-new.md',
     'docs/agents', 'docs/agents/triage-labels.md',
   ],
+  // #4729: `writeFile('docs/...', ...)` calls WRITE fabricated fixture
+  // content into a throwaway mkdtemp repo; the file never reads real shipped
+  // docs/ content — every path here is fixture data for the guard under
+  // test.
+  // Re-confirmed: every path below is WRITTEN as fabricated fixture content
+  // into a throwaway mkdtemp repo; none reads real shipped docs. The a*/b*/c*/
+  // d* entries are the adversarial-regression fixtures (dialect-plus-runtime-
+  // word, adjacency laundering, version laundering, bare-marker abuse).
+  'lint-retired-runtime-name.test.cjs': [
+    'docs/adr', 'docs/adr/999-retired-runtime-record.md', 'docs/filler/note-',
+    'docs/guides/a1.md', 'docs/guides/a2.md', 'docs/guides/b1.md',
+    'docs/guides/b2.md', 'docs/guides/b3.md', 'docs/guides/c3.md',
+    'docs/guides/c4.md', 'docs/guides/config-homes.md', 'docs/guides/d1.md',
+    'docs/guides/hooks.md', 'docs/guides/one.md', 'docs/guides/runtime-claim.md',
+    'docs/guides/setup.md', 'docs/history/migration-note.md',
+    'docs/ja-JP/guides/runtimes.md', 'docs/pt-BR/guides/a3.md',
+    'docs/pt-BR/guides/hooks.md', 'docs/pt-BR/guides/policy.md',
+    'docs/reference/client-models.md', 'docs/reference/models.md',
+    'docs/zh-CN/guides/a4.md', 'docs/zh-CN/reference/models.md',
+  ],
   'manifest-version-sync.test.cjs': [],
   // #3884: re-confirmed — the added docs/CLI-TOOLS.md:458 reference is the
   // same class as the existing docs/TESTING-SUITES.md one (a placement-note
   // / explanatory comment citing documented CLI behavior for context, never
   // a read target); the exemption's premise still holds for both.
   'milestone-archive.test.cjs': ['docs/CLI-TOOLS.md', 'docs/TESTING-SUITES.md'],
-  'model-resolver.test.cjs': ['docs/TESTING-SUITES.md'],
+  // #4505: additionally cites docs/features/dynamic-routing-with-failure-tier-escalation.md
+  // in explanatory comments, quoting the documented first-spawn contract the new rows
+  // assert against; the file never reads that (or any) docs/ file — every read it makes
+  // targets a tmpdir .planning fixture.
+  'model-resolver.test.cjs': [
+    'docs/TESTING-SUITES.md', 'docs/features/dynamic-routing-with-failure-tier-escalation.md',
+  ],
   'new-project-mvp-prompt.test.cjs': ['docs/CONFIGURATION.md'],
   'onboard-command.test.cjs': ['docs/adr/0001-runtime.md'],
   'opencode-command-dir-plural.test.cjs': ['docs/commands'],
@@ -209,6 +237,15 @@ const DOCS_GUARD_EXEMPT_DOCS_PATHS = {
   // #4186: the record-session usage-contract test cites the documented
   // signature in docs/CLI-TOOLS.md in its explanatory comment.
   'state.test.cjs': ['docs/CLI-TOOLS.md', 'docs/CONFIGURATION.md', 'docs/reference/state-md.md'],
+  // #5095: 'docs/VERIFICATION.md' is a tmpdir fixture basename (proving the
+  // report-shaped filter matches basename, not full path); 'docs/planning'
+  // and its two nested PLAN/SUMMARY children are an in-repo `.planning ->
+  // docs/planning` symlink-alias fixture. All are WRITTEN into a throwaway
+  // mkdtemp/createTempGitProject tree; none reads real shipped docs/ content.
+  'verification-status.test.cjs': [
+    'docs/VERIFICATION.md', 'docs/planning', 'docs/planning/phases',
+    'docs/planning/phases/01-foo/01-01-PLAN.md', 'docs/planning/phases/01-foo/01-01-SUMMARY.md',
+  ],
   'worktree-safety.test.cjs': ['docs/SUMMARY.md'],
 };