@opengsd/gsd-core 1.17.0 → 1.19.0

package/scripts/lib/macos-conformance-tier.generated.cjs

@@ -6,6 +6,7 @@
 
 module.exports = {
   MACOS_CONFORMANCE_TIER_FILES: [
+  "tests/5100-win32-bare-bash-sentinel.property.test.cjs",
   "tests/active-workstream-store.unit.test.cjs",
   "tests/adr-612-bracket-phase-counting.test.cjs",
   "tests/adr-index-gate.test.cjs",
@@ -16,6 +17,7 @@ module.exports = {
   "tests/agent-skills.test.cjs",
   "tests/api-coverage-gate-e2e.test.cjs",
   "tests/api-coverage.test.cjs",
+  "tests/args-terminator-nonce.test.cjs",
   "tests/ask-user-questions-fallback.test.cjs",
   "tests/audit-command-cutover.test.cjs",
   "tests/broken-windows.test.cjs",
@@ -38,6 +40,7 @@ module.exports = {
   "tests/check-ui-safety-gate.test.cjs",
   "tests/check-update-config-dir.test.cjs",
   "tests/chunked-planning-parallel.test.cjs",
+  "tests/ci-conformance-pr-gating.test.cjs",
   "tests/ci-docs-guard-registry.test.cjs",
   "tests/ci-test-scope.test.cjs",
   "tests/cline-install.test.cjs",
@@ -46,6 +49,7 @@ module.exports = {
   "tests/codex-config-hooks.test.cjs",
   "tests/codex-config-install.test.cjs",
   "tests/codex-config.test.cjs",
+  "tests/command-arguments-block.test.cjs",
   "tests/commands.platform.test.cjs",
   "tests/commit-docs-bypass.test.cjs",
   "tests/commit-files-deletion.test.cjs",
@@ -71,6 +75,7 @@ module.exports = {
   "tests/execute-phase-decimal-arithmetic.test.cjs",
   "tests/executed-plan.test.cjs",
   "tests/executor-mvp-tdd-section.test.cjs",
+  "tests/executor-sequential-linked-worktree.test.cjs",
   "tests/external-job.test.cjs",
   "tests/failing-direction.test.cjs",
   "tests/fallow-runner.test.cjs",
@@ -80,6 +85,8 @@ module.exports = {
   "tests/gap-checker.property.test.cjs",
   "tests/gate-api-coverage-verify-pre-escape.test.cjs",
   "tests/gate-codebase-drift.unit.test.cjs",
+  "tests/gate-evaluation-scope.test.cjs",
+  "tests/gate-predicate.unit.test.cjs",
   "tests/gate-tdd-red-evidence-containment.test.cjs",
   "tests/gate-ui-plan.unit.test.cjs",
   "tests/gate-verify-command-paths.unit.test.cjs",
@@ -90,6 +97,7 @@ module.exports = {
   "tests/graphify-query.test.cjs",
   "tests/graphify-visualization.test.cjs",
   "tests/gsd-agent-isolation-guard.test.cjs",
+  "tests/gsd-path-export-hook.test.cjs",
   "tests/gsd-secret-read-guard.test.cjs",
   "tests/gsd-settings-advanced.test.cjs",
   "tests/gsd-statusline.test.cjs",
@@ -131,6 +139,7 @@ module.exports = {
   "tests/markdown-sectionizer.test.cjs",
   "tests/mcp-catalog.test.cjs",
   "tests/milestone-archive.test.cjs",
+  "tests/milestone-release-tags.test.cjs",
   "tests/milestone-window-single-owner.test.cjs",
   "tests/model-catalog.unit.test.cjs",
   "tests/model-resolver.test.cjs",
@@ -159,6 +168,9 @@ module.exports = {
   "tests/phase-status.test.cjs",
   "tests/phase.platform.test.cjs",
   "tests/phase.test.cjs",
+  "tests/pi-dispatch.test.cjs",
+  "tests/pi-package.test.cjs",
+  "tests/plan-authoring-verification-gaps.test.cjs",
   "tests/plan-count-single-owner.test.cjs",
   "tests/plan-document.test.cjs",
   "tests/plan-phase-stall-detection.test.cjs",
@@ -181,6 +193,7 @@ module.exports = {
   "tests/quick-batch-command-router.stdin.test.cjs",
   "tests/quick-batch.test.cjs",
   "tests/quick-branching.test.cjs",
+  "tests/quick-commit-boundary.test.cjs",
   "tests/quick-research.test.cjs",
   "tests/reapply-verify-hunks.test.cjs",
   "tests/refactor-1390-t3-characterization.test.cjs",
@@ -188,11 +201,13 @@ module.exports = {
   "tests/response-language-coverage.test.cjs",
   "tests/retired-artifact-cleanup.test.cjs",
   "tests/review-build-prompt-optional-sections.test.cjs",
+  "tests/review-lane-invocation.test.cjs",
   "tests/review-lane-runner.test.cjs",
   "tests/review-lane-windows-spawn-resolution.test.cjs",
   "tests/review-parallel-lanes.test.cjs",
   "tests/review-plan-coverage-manifest.test.cjs",
   "tests/review-reviewer-selection.test.cjs",
+  "tests/reviewed-or-maintainer-policy.test.cjs",
   "tests/reviewer-manifest-body.test.cjs",
   "tests/reviewer-step-dispatch.test.cjs",
   "tests/roadmap-mode-field.test.cjs",
@@ -207,15 +222,19 @@ module.exports = {
   "tests/runtime-launcher-parity.test.cjs",
   "tests/runtime-name-policy.test.cjs",
   "tests/security.test.cjs",
+  "tests/self-test-report-policy.test.cjs",
   "tests/settings-jsonc.test.cjs",
   "tests/shared-hooks-dir-resolution.test.cjs",
   "tests/shell-command-projection-dispatch.test.cjs",
+  "tests/shell-command-projection-md-normalize.test.cjs",
   "tests/shipped-reference-cites.test.cjs",
+  "tests/skill-manifest.test.cjs",
   "tests/spawn-liveness-banner.test.cjs",
   "tests/state-document.test.cjs",
   "tests/state-transition.test.cjs",
   "tests/state.platform.test.cjs",
   "tests/state.test.cjs",
+  "tests/tdd-mode.platform.test.cjs",
   "tests/todos-workstream-scope.test.cjs",
   "tests/tracer-bullet.test.cjs",
   "tests/uat-complete-session.test.cjs",

package/scripts/lib/platform-conformance-tier.generated.cjs

@@ -3,6 +3,7 @@
 
 module.exports = {
   CONFORMANCE_TIER_FILES: [
+  "tests/5100-win32-bare-bash-sentinel.property.test.cjs",
   "tests/adr-index-gate.test.cjs",
   "tests/adr857-core-without-capabilities.test.cjs",
   "tests/agent-install-check.test.cjs",
@@ -11,6 +12,7 @@ module.exports = {
   "tests/antigravity-upgrades.test.cjs",
   "tests/api-coverage-gate-e2e.test.cjs",
   "tests/api-coverage.test.cjs",
+  "tests/args-terminator-nonce.test.cjs",
   "tests/assumption-delta-checkpoint-e2e.test.cjs",
   "tests/assumption-delta.test.cjs",
   "tests/audit-command-cutover.test.cjs",
@@ -24,6 +26,7 @@ module.exports = {
   "tests/capability-ledger.test.cjs",
   "tests/capability-lifecycle.test.cjs",
   "tests/capability-loader.test.cjs",
+  "tests/capability-lock-lazy-self-probe-5327.test.cjs",
   "tests/capability-lock-mkdir-failure-3987.test.cjs",
   "tests/capability-probe-fallback.test.cjs",
   "tests/capability-source.test.cjs",
@@ -41,6 +44,7 @@ module.exports = {
   "tests/check-update-config-dir.test.cjs",
   "tests/check-update-fail-open.test.cjs",
   "tests/chunked-planning-parallel.test.cjs",
+  "tests/ci-conformance-pr-gating.test.cjs",
   "tests/ci-docs-guard-registry.test.cjs",
   "tests/ci-rebase-check.test.cjs",
   "tests/ci-test-scope.test.cjs",
@@ -59,12 +63,14 @@ module.exports = {
   "tests/codex-config.test.cjs",
   "tests/codex-inherit-smoke.test.cjs",
   "tests/codex-windows-shim-node-resolution.test.cjs",
+  "tests/command-arguments-block.test.cjs",
   "tests/command-routing-hub.test.cjs",
   "tests/commands.platform.test.cjs",
   "tests/commit-files-deletion.test.cjs",
   "tests/commit-files-pathspec.test.cjs",
   "tests/commonjs-marker.test.cjs",
   "tests/compact-content-4139.test.cjs",
+  "tests/complete-milestone-release-map-routing.test.cjs",
   "tests/completion-ratio-scope-withholding.test.cjs",
   "tests/config-defaults-runtime-exclusion.test.cjs",
   "tests/config-get-default.test.cjs",
@@ -81,6 +87,8 @@ module.exports = {
   "tests/cursor-hooks.test.cjs",
   "tests/cursor-subagent-isolation.test.cjs",
   "tests/debug-session-management.test.cjs",
+  "tests/defaults-json-fallback.test.cjs",
+  "tests/diagnose-windows-spawn-watcher.test.cjs",
   "tests/dispatch-identity.test.cjs",
   "tests/dispatcher.test.cjs",
   "tests/drift-detection.test.cjs",
@@ -93,12 +101,14 @@ module.exports = {
   "tests/emitted-provenance.test.cjs",
   "tests/ensure-runtime-build.test.cjs",
   "tests/eslint-rules.test.cjs",
+  "tests/execute-phase-cross-block-state.test.cjs",
   "tests/execute-phase-decimal-arithmetic.test.cjs",
   "tests/execute-phase-worktree-guard.test.cjs",
   "tests/execute-plan-update-codebase-map-diff-base.test.cjs",
   "tests/execute-wave-post-gate-pipeline-e2e.test.cjs",
   "tests/executed-plan.test.cjs",
   "tests/executor-mvp-tdd-section.test.cjs",
+  "tests/executor-sequential-linked-worktree.test.cjs",
   "tests/external-descriptor-confinement.test.cjs",
   "tests/failing-direction.test.cjs",
   "tests/fallow-runner.test.cjs",
@@ -111,9 +121,11 @@ module.exports = {
   "tests/gate-consumer-exit-awareness.test.cjs",
   "tests/gate-decision-coverage-verify-stderr.test.cjs",
   "tests/gate-exit.test.cjs",
+  "tests/gate-predicate.unit.test.cjs",
   "tests/gate-tdd-red-evidence-containment.test.cjs",
   "tests/gate-tdd-review-checkpoint-hardening.test.cjs",
   "tests/gate-tdd-review-checkpoint.unit.test.cjs",
+  "tests/gate-tdd-review-order-5275.test.cjs",
   "tests/gate-ui-plan.unit.test.cjs",
   "tests/gate-ui-safety.unit.test.cjs",
   "tests/gate-verify-command-paths.unit.test.cjs",
@@ -122,6 +134,7 @@ module.exports = {
   "tests/gen-health-docs.test.cjs",
   "tests/gen-section-manifest.test.cjs",
   "tests/git-base-branch.test.cjs",
+  "tests/git-optional-locks-parity.test.cjs",
   "tests/golden-install-tree.test.cjs",
   "tests/graphify-graph-path.test.cjs",
   "tests/graphify-visualization.test.cjs",
@@ -130,6 +143,7 @@ module.exports = {
   "tests/gsd-check-update-worker-atomic-cache.test.cjs",
   "tests/gsd-check-update-worker-platform-gate.test.cjs",
   "tests/gsd-mcp-server-bin.test.cjs",
+  "tests/gsd-path-export-hook.test.cjs",
   "tests/gsd-statusline.test.cjs",
   "tests/gsd-validate-commit-crash-policy.test.cjs",
   "tests/gsd-validate-commit-sigpipe.test.cjs",
@@ -145,6 +159,8 @@ module.exports = {
   "tests/hooks-crash-policy.test.cjs",
   "tests/hooks-opt-in.test.cjs",
   "tests/host-integration.test.cjs",
+  "tests/in-tier-msys-fork-stress.test.cjs",
+  "tests/in-tier-sh-pipeline-timing.test.cjs",
   "tests/init-manager.test.cjs",
   "tests/install-minimal-hooks.test.cjs",
   "tests/install-nested-layout.test.cjs",
@@ -153,6 +169,7 @@ module.exports = {
   "tests/install-runtime-artifacts.test.cjs",
   "tests/install-write-confinement.test.cjs",
   "tests/install.test.cjs",
+  "tests/installer-first-install-user-skill-5522.test.cjs",
   "tests/installer-migration-antigravity-retire-confighome-artifacts.test.cjs",
   "tests/installer-migration-config-root-marker.test.cjs",
   "tests/installer-migration-pi-retire-hooks-dir.test.cjs",
@@ -162,6 +179,7 @@ module.exports = {
   "tests/intel.test.cjs",
   "tests/inventory-nested-families.test.cjs",
   "tests/io.test.cjs",
+  "tests/isolation-aged-none-sentinel.test.cjs",
   "tests/isolation-sentinel.test.cjs",
   "tests/kilo-upgrades.test.cjs",
   "tests/kimi-agent-converter.test.cjs",
@@ -179,7 +197,11 @@ module.exports = {
   "tests/mcp-catalog.property.test.cjs",
   "tests/mcp-catalog.test.cjs",
   "tests/milestone-archive.test.cjs",
+  "tests/milestone-lock.test.cjs",
+  "tests/milestone-release-map-archive.test.cjs",
+  "tests/milestone-release-tags.test.cjs",
   "tests/milestone-window-single-owner.test.cjs",
+  "tests/milestone.test.cjs",
   "tests/model-resolver.test.cjs",
   "tests/mutation-workflow-base-ref.test.cjs",
   "tests/new-milestone-clear-phases.test.cjs",
@@ -194,10 +216,12 @@ module.exports = {
   "tests/no-unbounded-spawn.test.cjs",
   "tests/no-unguarded-nonportable-exec.rule.test.cjs",
   "tests/node-compile-cache.test.cjs",
+  "tests/npm-audit-baseline-safe-directory-5659.test.cjs",
   "tests/npm-audit-baseline.test.cjs",
   "tests/npm-integrity-gate.test.cjs",
   "tests/nsegment-phase-grammar.test.cjs",
   "tests/onboard-command.test.cjs",
+  "tests/opencode-advisory-stderr.test.cjs",
   "tests/opencode-command-dir-plural.test.cjs",
   "tests/opencode-config-jsonc.test.cjs",
   "tests/opencode-generations.smoke.test.cjs",
@@ -218,6 +242,10 @@ module.exports = {
   "tests/phase.platform.test.cjs",
   "tests/phase6-capstone-conformance.test.cjs",
   "tests/pi-config-dir-env-override.test.cjs",
+  "tests/pi-dispatch-install.test.cjs",
+  "tests/pi-dispatch.test.cjs",
+  "tests/pi-hook-bridge.test.cjs",
+  "tests/pi-package.test.cjs",
   "tests/plan-count-single-owner.test.cjs",
   "tests/plan-phase-stall-detection.test.cjs",
   "tests/plan-pre-hook-e2e.test.cjs",
@@ -245,6 +273,7 @@ module.exports = {
   "tests/quick-batch-command-router.stdin.test.cjs",
   "tests/quick-batch.test.cjs",
   "tests/quick-branching.test.cjs",
+  "tests/quick-commit-boundary.test.cjs",
   "tests/quick-research.test.cjs",
   "tests/quick-review-scope-tip-bound.test.cjs",
   "tests/read-guard.test.cjs",
@@ -258,6 +287,9 @@ module.exports = {
   "tests/retired-artifact-cleanup.test.cjs",
   "tests/review-build-prompt-optional-sections.test.cjs",
   "tests/review-default-reviewers-config.test.cjs",
+  "tests/review-lane-availability.test.cjs",
+  "tests/review-lane-invocation.test.cjs",
+  "tests/review-lane-no-redirect-5433.test.cjs",
   "tests/review-lane-runner.test.cjs",
   "tests/review-lane-windows-spawn-resolution.test.cjs",
   "tests/review-model-config.test.cjs",
@@ -268,6 +300,7 @@ module.exports = {
   "tests/revision-remediation-binding.test.cjs",
   "tests/roadmap-parser.test.cjs",
   "tests/roadmap-upgrade-bracket.test.cjs",
+  "tests/roadmap-upgrade.test.cjs",
   "tests/roadmap.test.cjs",
   "tests/run-tests-accounting.test.cjs",
   "tests/run-tests-harness.test.cjs",
@@ -281,11 +314,14 @@ module.exports = {
   "tests/runtime-identity.test.cjs",
   "tests/runtime-launcher-parity.test.cjs",
   "tests/schema-drift.test.cjs",
+  "tests/section-manifest-init-facts.test.cjs",
   "tests/security.test.cjs",
+  "tests/self-test-report-policy.test.cjs",
   "tests/settings-jsonc.test.cjs",
   "tests/sh-hook-paths.test.cjs",
   "tests/shared-hooks-dir-resolution.test.cjs",
   "tests/shell-command-projection-dispatch.test.cjs",
+  "tests/shell-command-projection-md-normalize.test.cjs",
   "tests/shell-command-projection-path-sep.test.cjs",
   "tests/ship-notes-wedged-pr.test.cjs",
   "tests/shipped-reference-cites.test.cjs",
@@ -293,6 +329,9 @@ module.exports = {
   "tests/slug-derivation-drift-guard.test.cjs",
   "tests/state-todos-render.test.cjs",
   "tests/state.platform.test.cjs",
+  "tests/subject-first-line.platform.test.cjs",
+  "tests/tdd-mode.platform.test.cjs",
+  "tests/tdd-review-checkpoint-cross-plan.test.cjs",
   "tests/teams-status.test.cjs",
   "tests/test-gate-watch-mode.test.cjs",
   "tests/todos-workstream-scope.test.cjs",
@@ -306,6 +345,7 @@ module.exports = {
   "tests/unusable-input.test.cjs",
   "tests/update-custom-backup.test.cjs",
   "tests/user-artifact-staging.test.cjs",
+  "tests/user-home-isolation-5594.test.cjs",
   "tests/verification-append-audit.test.cjs",
   "tests/verification-status.test.cjs",
   "tests/verify-archive-dirs-live-path.test.cjs",
@@ -321,6 +361,7 @@ module.exports = {
   "tests/workstream.test.cjs",
   "tests/worktree-cleanup.test.cjs",
   "tests/worktree-safety.test.cjs",
+  "tests/worktree-subdir-effective-root-4885.test.cjs",
   "tests/worktree.test.cjs",
   ],
 };

package/scripts/lint-docs-guard-registration.exempt-baseline.cjs

@@ -122,10 +122,10 @@ const DOCS_GUARD_EXEMPT_DOCS_PATHS = {
   // reads that (or any) docs/ file.
   'capability-validator-task-content-resolver.test.cjs': ['docs/adr/3646-per-task-content-resolution-seam.md'],
   'ci-docs-guard-registry.test.cjs': [
-    'docs/AGENTS.md', 'docs/COMMANDS.md', 'docs/INVENTORY.md', 'docs/a.md', 'docs/adr',
+    'docs/COMMANDS.md', 'docs/INVENTORY.md', 'docs/a.md', 'docs/adr',
     'docs/adr/0001-example.md', 'docs/adrenaline.md', 'docs/bar.md', 'docs/foo.md', 'docs/how-to/foo.md',
-    'docs/how-to/some-unrelated-guide.md', 'docs/how-to/x.md', 'docs/some-unrelated-file.md',
-    'docs/totally-unrelated.md',
+    'docs/how-to/some-unrelated-guide.md', 'docs/how-to/x.md', 'docs/reference/agents.md',
+    'docs/some-unrelated-file.md', 'docs/totally-unrelated.md',
   ],
   // #4641: cites docs/adr/4641-windows-selector-consolidation.md in an
   // explanatory comment describing why the retired `windows` scope must not

package/scripts/lint-phase-arg-assignment.cjs

@@ -93,10 +93,10 @@ const SHELL_INFO_STRINGS = new Set(['bash', 'sh', 'shell']);
 const CANONICAL_FORMS = Object.freeze({
   /** `/gsd:secure-phase 4` — the phase is the whole argument string, minus a `--ws <name>` pair. */
   positional:
-    'PHASE_ARG=$(echo "$ARGUMENTS" | sed -E \'s/--ws[[:space:]]+[A-Za-z0-9._-]+//g\' | xargs)',
+    'PHASE_ARG=$(echo "$GSD_ARGS" | sed -E \'s/--ws[[:space:]]+[A-Za-z0-9._-]+//g\' | xargs)',
   /** `/gsd:review --phase 4 --codex` — the phase is the value of a named flag. */
   phaseFlag:
-    'PHASE_ARG=$(echo "$ARGUMENTS" | sed -nE \'s/.*--phase[[:space:]]+([A-Za-z0-9._-]+).*/\\1/p\')',
+    'PHASE_ARG=$(echo "$GSD_ARGS" | sed -nE \'s/.*--phase[[:space:]]+([A-Za-z0-9._-]+).*/\\1/p\')',
   /** Skill dispatch passes the phase as `$1` (`Skill(skill="gsd-code-review", args="4")`). */
   firstPositional: 'PHASE_ARG="${1}"',
 });

package/scripts/lint-retired-runtime-name.cjs

@@ -234,6 +234,11 @@ const ALLOWLIST_OCCURRENCES = new Map([
     { snippet: 'Google (Gemini)', reason: 'model-provider choice, not a GSD runtime' },
     { snippet: 'Committed to Gemini / Google Cloud / Vertex AI', reason: 'the same menu entry\'s description' },
   ]],
+  ['pi/package-agents/gsd-framework-selector.md', [
+    // Generated copy of agents/gsd-framework-selector.md for the Pi package (#5569).
+    { snippet: 'Google (Gemini)', reason: 'model-provider choice, not a GSD runtime' },
+    { snippet: 'Committed to Gemini / Google Cloud / Vertex AI', reason: 'the same menu entry\'s description' },
+  ]],
   ['agents/gsd-framework-selector.compact.md', [
     { snippet: 'Google (Gemini)', reason: 'model-provider choice, not a GSD runtime' },
   ]],

package/scripts/lint-workflow-shellcheck-baseline.json

@@ -384,6 +384,21 @@
     "code": "2086",
     "message": "Double quote to prevent globbing and word splitting."
   },
+  {
+    "file": "gsd-core/workflows/execute-phase/steps/code-review-disposition.md",
+    "code": "2317",
+    "message": "Command appears to be unreachable. Check usage (or ignore if invoked indirectly)."
+  },
+  {
+    "file": "gsd-core/workflows/execute-phase/steps/code-review-disposition.md",
+    "code": "2317",
+    "message": "Command appears to be unreachable. Check usage (or ignore if invoked indirectly)."
+  },
+  {
+    "file": "gsd-core/workflows/execute-phase/steps/code-review-disposition.md",
+    "code": "2317",
+    "message": "Command appears to be unreachable. Check usage (or ignore if invoked indirectly)."
+  },
   {
     "file": "gsd-core/workflows/execute-phase/steps/executor-isolation-dispatch.md",
     "code": "2016",
@@ -690,7 +705,7 @@
     "message": "Double quote to prevent globbing and word splitting."
   },
   {
-    "file": "gsd-core/workflows/plan-phase.md",
+    "file": "gsd-core/workflows/plan-phase/steps/auto-advance-check.md",
     "code": "2235",
     "message": "Use { ..; } instead of (..) to avoid subshell overhead."
   },
@@ -1108,20 +1123,5 @@
     "file": "gsd-core/workflows/verify-work/steps/mvp-uat-framing.md",
     "code": "2086",
     "message": "Double quote to prevent globbing and word splitting."
-  },
-  {
-    "file": "gsd-core/workflows/execute-phase/steps/code-review-disposition.md",
-    "code": "2317",
-    "message": "Command appears to be unreachable. Check usage (or ignore if invoked indirectly)."
-  },
-  {
-    "file": "gsd-core/workflows/execute-phase/steps/code-review-disposition.md",
-    "code": "2317",
-    "message": "Command appears to be unreachable. Check usage (or ignore if invoked indirectly)."
-  },
-  {
-    "file": "gsd-core/workflows/execute-phase/steps/code-review-disposition.md",
-    "code": "2317",
-    "message": "Command appears to be unreachable. Check usage (or ignore if invoked indirectly)."
   }
 ]

package/scripts/npm-audit-baseline.cjs

@@ -252,6 +252,39 @@ function runInstalledTreeAudit(cwd, opts = {}) {
   return runNpmAuditWithRetry(cwd, ['audit', '--omit=dev', '--json'], opts);
 }
 
+/**
+ * `-c safe.directory=<repoRoot>` for the baseline's git calls (#5659). On the gsd-test bench the
+ * checkout is owned by a different uid than the one running the tests, so git refuses every command
+ * ("detected dubious ownership") and the baseline silently resolved to nothing, which sent the
+ * integrity tests to their zero-tolerance fallback. git honors `safe.directory` from the command line
+ * only; scoping it to the audited repo root (never `*`, never global config) trusts exactly the
+ * checkout being audited. Same precedent as scripts/lint-compiled-artifact-sync.cjs.
+ */
+function safeDirectoryArgs(repoRoot) {
+  // git compares safe.directory against its forward-slash path, also on Windows.
+  return ['-c', `safe.directory=${String(repoRoot).replace(/\\/g, '/')}`];
+}
+
+/**
+ * One line saying why no baseline resolved (#5659), for the integrity gate's zero-tolerance message.
+ * Without it a git refusal (ownership, a missing git, a broken checkout) is indistinguishable from a
+ * checkout that simply has no `origin/next`, which is how the ownership problem hid. Only the first
+ * line git printed is kept.
+ */
+function explainNoBaseline(repoRoot, { execFileSyncImpl = execFileSync } = {}) {
+  try {
+    execFileSyncImpl('git', [...safeDirectoryArgs(repoRoot), 'rev-parse', '--git-dir'], {
+      cwd: repoRoot,
+      encoding: 'utf-8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+  } catch (error) {
+    const detail = String((error && (error.stderr || error.message)) || '').trim().split(/\r?\n/)[0];
+    return `git could not read ${repoRoot}${detail ? `: ${detail}` : ''}`;
+  }
+  return 'no baseline ref (origin/next, next) resolved, or it lacks package.json / package-lock.json';
+}
+
 /**
  * Extracts package.json + package-lock.json (optionally under `subdir`,
  * e.g. 'sdk') from `ref` at git object level into a fresh temp directory --
@@ -260,17 +293,17 @@ function runInstalledTreeAudit(cwd, opts = {}) {
  * clone that never fetched it) or either file is absent at that ref --
  * callers treat `null` as "no baseline available", not an error.
  */
-function extractBaselineTree(ref, repoRoot, subdir = '') {
+function extractBaselineTree(ref, repoRoot, subdir = '', { execFileSyncImpl = execFileSync } = {}) {
   const rel = (name) => (subdir ? path.posix.join(subdir, name) : name);
   let pkgJson;
   let lockJson;
   try {
-    pkgJson = execFileSync('git', ['show', `${ref}:${rel('package.json')}`], {
+    pkgJson = execFileSyncImpl('git', [...safeDirectoryArgs(repoRoot), 'show', `${ref}:${rel('package.json')}`], {
       cwd: repoRoot,
       encoding: 'utf-8',
       stdio: ['ignore', 'pipe', 'ignore'],
     });
-    lockJson = execFileSync('git', ['show', `${ref}:${rel('package-lock.json')}`], {
+    lockJson = execFileSyncImpl('git', [...safeDirectoryArgs(repoRoot), 'show', `${ref}:${rel('package-lock.json')}`], {
       cwd: repoRoot,
       encoding: 'utf-8',
       stdio: ['ignore', 'pipe', 'ignore'],
@@ -322,12 +355,12 @@ const NULL_SHA = '0000000000000000000000000000000000000000';
  * Returns '' if none resolve -- callers fall back to strict zero-tolerance
  * rather than silently skipping the gate.
  */
-function resolveBaselineRef(repoRoot) {
+function resolveBaselineRef(repoRoot, { execFileSyncImpl = execFileSync } = {}) {
   if (process.env.AUDIT_BASELINE_REF) return process.env.AUDIT_BASELINE_REF;
   if (process.env.GITHUB_BASE_REF) return `origin/${process.env.GITHUB_BASE_REF}`;
   if (process.env.GITHUB_EVENT_NAME === 'push') {
     try {
-      const parent = execFileSync('git', ['rev-parse', '--verify', 'HEAD~1'], {
+      const parent = execFileSyncImpl('git', [...safeDirectoryArgs(repoRoot), 'rev-parse', '--verify', 'HEAD~1'], {
         cwd: repoRoot,
         encoding: 'utf-8',
         stdio: ['ignore', 'pipe', 'ignore'],
@@ -338,7 +371,7 @@ function resolveBaselineRef(repoRoot) {
     }
   }
   try {
-    execFileSync('git', ['rev-parse', '--verify', 'origin/next'], {
+    execFileSyncImpl('git', [...safeDirectoryArgs(repoRoot), 'rev-parse', '--verify', 'origin/next'], {
       cwd: repoRoot,
       stdio: 'ignore',
     });
@@ -347,7 +380,7 @@ function resolveBaselineRef(repoRoot) {
     // fall through to a plain local branch
   }
   try {
-    execFileSync('git', ['rev-parse', '--verify', 'next'], {
+    execFileSyncImpl('git', [...safeDirectoryArgs(repoRoot), 'rev-parse', '--verify', 'next'], {
       cwd: repoRoot,
       stdio: 'ignore',
     });
@@ -366,6 +399,7 @@ module.exports = {
   runNpmAuditWithRetry,
   extractBaselineTree,
   resolveBaselineRef,
+  explainNoBaseline,
   isTimeoutKill,
   buildTimeoutKillError,
   sleepSyncMs,

package/scripts/release-tarball-smoke.cjs

@@ -703,6 +703,7 @@ function runSmoke({
             ...effectiveNpmEnv,
             HOME: runtimeHome,
             USERPROFILE: runtimeHome,
+            GSD_HOME: runtimeHome, // #5017: the defaults store root follows HOME
             // Same reason as the init check above: install.js skips its main()
             // block when GSD_TEST_MODE is set and would exit 0 writing nothing.
             GSD_TEST_MODE: '',