@opengsd/gsd-core 1.15.0 → 1.16.0

package/gsd-core/bin/lib/broken-windows.cjs

@@ -7,10 +7,10 @@
  * When `workflow.windows_enforce` is true, `/gsd-ship` blocks while any entry is
  * `open`; an entry can be `waived` only with a recorded reason or `fixed`.
  *
- * LEAF MODULE — imports node:fs + node:path, plus two compiled sibling lib
- * modules require()d at runtime: workstream-inventory.cjs (the #4487
- * milestone stamp) and capability-lock.cjs (the #3780 cross-process ledger
- * lock). No other src/ imports.
+ * LEAF MODULE — imports node:fs + node:path, the leaf frontmatter-fence.cjs (the one
+ * frontmatter fence owner), plus two compiled sibling lib modules require()d at runtime:
+ * workstream-inventory.cjs (the #4487 milestone stamp) and capability-lock.cjs (the #3780
+ * cross-process ledger lock). No other src/ imports.
  *
  * Storage format (`.planning/WINDOWS.md`):
  *   ---
@@ -68,6 +68,7 @@ exports.cmdWindowsWaive = cmdWindowsWaive;
 exports.cmdWindowsMarkFixed = cmdWindowsMarkFixed;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const frontmatter_fence_cjs_1 = require("./frontmatter-fence.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const workstreamInventory = require("./workstream-inventory.cjs");
 // ─── Constants ─────────────────────────────────────────────────────────────
@@ -385,21 +386,20 @@ function locateJsonBlock(raw, expectedTotal) {
  * structural deviation — fail-closed on drift.
  */
 function parseFrontmatterStrict(raw) {
-    if (!raw.startsWith('---\n') && !raw.startsWith('---\r\n')) {
+    // The block is the one the one fence owner finds (`locateFrontmatterFence`).
+    const fence = (0, frontmatter_fence_cjs_1.locateFrontmatterFence)(raw);
+    if (!fence) {
         throw new WindowsError(exports.REASON.WINDOWS_LEDGER_MALFORMED, 'Ledger missing frontmatter opening ---');
     }
-    const headerEnd = raw.startsWith('---\r\n') ? 5 : 4;
-    const closeIdx = raw.indexOf('\n---', headerEnd);
-    if (closeIdx === -1) {
+    if (!fence.closed) {
         throw new WindowsError(exports.REASON.WINDOWS_LEDGER_MALFORMED, 'Ledger missing frontmatter closing ---');
     }
-    const yamlBody = raw.slice(headerEnd, closeIdx);
+    const yamlBody = raw.slice(fence.openEnd, fence.bodyEnd);
     const out = {};
     for (const rawLine of yamlBody.split(/\r?\n/)) {
-        // #3116: the `\n---` scan leaves the final line's CR attached on a CRLF
-        // ledger, and `.` never matches CR, so the key: value regex below fails on
-        // it. Strip the trailing CR per line so the rest of `raw` (which
-        // parseJsonBlock also slices by byte offset) is unaffected.
+        // #3116: strip a trailing CR per line (`.` never matches CR, so the key: value regex
+        // below would fail on it) without touching the rest of `raw`, which parseJsonBlock also
+        // slices by byte offset.
         const line = rawLine.replace(/\r$/, '');
         if (line.trim() === '')
             continue;

package/gsd-core/bin/lib/capability-activation.cjs

@@ -32,7 +32,7 @@ function _getNestedConfigValue(config, dotKey) {
     return { found: true, value: current };
 }
 const _warnedRawConfigPaths = new Set();
-function _readRawConfigKey(filePath, dotKey) {
+function _readRawConfigKey(filePath, dotKey, quiet = false) {
     try {
         const raw = node_fs_1.default.readFileSync(filePath, 'utf8');
         let parsed;
@@ -40,7 +40,7 @@ function _readRawConfigKey(filePath, dotKey) {
             parsed = JSON.parse(raw);
         }
         catch {
-            if (!_warnedRawConfigPaths.has(filePath)) {
+            if (!quiet && !_warnedRawConfigPaths.has(filePath)) {
                 _warnedRawConfigPaths.add(filePath);
                 try {
                     process.stderr.write(`gsd-tools: warning: failed to parse ${filePath} as JSON — skipping for activation resolution\n`);
@@ -67,9 +67,14 @@ function _readRawConfigKey(filePath, dotKey) {
  *   3. Root config.json at planningRoot(cwd)/config.json (only if path differs).
  *   4. registry.configSchema[dotKey].default — schema default.
  *   5. Absent → { found: false, value: undefined }.
+ *
+ * `quiet: true` (default false) suppresses the one-time stderr warning for a config.json that is
+ * not valid JSON: a gate reads its switch quietly (a malformed config is simply "key absent"), it
+ * never writes to stderr (#5139).
  */
 function resolveConfigKey(dotKey, opts) {
     const { config, cwd, registry } = opts;
+    const quiet = opts.quiet === true;
     // Level 1: loadConfig result
     const fromConfig = _getNestedConfigValue(config, dotKey);
     if (fromConfig.found)
@@ -78,11 +83,11 @@ function resolveConfigKey(dotKey, opts) {
     if (cwd) {
         const wsConfigPath = node_path_1.default.join(planningDir(cwd), 'config.json');
         const rootConfigPath = node_path_1.default.join(planningRoot(cwd), 'config.json');
-        const fromWs = _readRawConfigKey(wsConfigPath, dotKey);
+        const fromWs = _readRawConfigKey(wsConfigPath, dotKey, quiet);
         if (fromWs.found)
             return { found: true, value: fromWs.value };
         if (wsConfigPath !== rootConfigPath) {
-            const fromRoot = _readRawConfigKey(rootConfigPath, dotKey);
+            const fromRoot = _readRawConfigKey(rootConfigPath, dotKey, quiet);
             if (fromRoot.found)
                 return { found: true, value: fromRoot.value };
         }