@opengsd/gsd-core 1.20.0 → 1.21.0

package/scripts/gen-platform-conformance-tier.cjs

@@ -139,11 +139,62 @@ const MACOS_GENERATED_HEADER =
   '// Windows-oriented tier in platform-conformance-tier.generated.cjs — see\n' +
   '// docs/adr/4593-macos-conformance-tier-architecture.md for the full rationale.\n';
 
+// #6002 child_process call-site shapes. First arguments that are node itself:
+// `process.execPath` or the literal 'node' / "node".
+const NODE_FIRST_ARG = "(?:process\\.execPath\\s*[,)]|(['\"])node\\1\\s*[,)])";
+const NOT_NODE_FIRST_ARG = '(?!' + NODE_FIRST_ARG + ')';
+// One source of truth for the call names every shape below matches.
+const CHILD_SYNC_NAMES = 'spawnSync|execSync|execFileSync';
+const CHILD_ASYNC_NAMES = 'spawn|execFile|exec';
+const CHILD_CALL_NAMES = CHILD_SYNC_NAMES + '|' + CHILD_ASYNC_NAMES;
+const CHILD_NON_NODE_CALL = new RegExp(
+  '(?:\\b(?:' + CHILD_SYNC_NAMES + ')|(?<![.\\w$])(?:' + CHILD_ASYNC_NAMES + '))\\(\\s*' + NOT_NODE_FIRST_ARG,
+);
+// Member form `<ident>.spawn(...)` (e.g. `cp.spawn('bash')`, `child_process.execFile('git')`).
+// Heuristic: any `<ident>.(spawn|spawnSync|execFile|execFileSync|exec|execSync)(` whose first
+// argument is not node counts as a non-node call, EXCEPT a regex `.exec(` — the receiver is a
+// regex literal (preceded by `/`) or an identifier ending in re/Re/RE/regex/Regex/REGEX.
+const CHILD_MEMBER_CALL = new RegExp(
+  '([\\w$]+)\\.(?:' + CHILD_CALL_NAMES + ')\\(\\s*' + NOT_NODE_FIRST_ARG,
+  'g',
+);
+const REGEX_RECEIVER_NAME = /(?:re|Re|RE|regex|Regex|REGEX)$/;
+function hasMemberNonNodeCall(content) {
+  CHILD_MEMBER_CALL.lastIndex = 0;
+  let m;
+  while ((m = CHILD_MEMBER_CALL.exec(content)) !== null) {
+    if (content[m.index - 1] === '/') continue; // regex-literal receiver: /x/g.exec(
+    if (/\.exec\(/.test(m[0]) && REGEX_RECEIVER_NAME.test(m[1])) continue;
+    return true;
+  }
+  return false;
+}
+// `promisify(cp.execFile)` hides the call sites from the call-shape scan: an unidentifiable,
+// counted site.
+const CHILD_PROMISIFIED = /\bpromisify\(\s*(?:[\w$]+\.)?(?:execFile|exec|spawn)\b/;
+const CHILD_NODE_ONLY_CALL = new RegExp(
+  '\\b(?:' + CHILD_CALL_NAMES + ')\\(\\s*' + NODE_FIRST_ARG + '|(?<![.\\w$])fork\\(',
+);
+// Code constructs only: a bare `lock` word matches prose, so lock-ness is a lockfile/lock-helper
+// identifier, a `.lock` path suffix, a rename/unlink call, EBUSY/EPERM, the installer or --config-dir.
+const FS_LOCK_OR_INSTALL =
+  /\b(?:lockfile|acquireLock|releaseLock|withLock|lockSync|proper-lockfile)\b|\.lock\b|\b(?:rename|unlink)(?:Sync)?\(|\bE(?:BUSY|PERM)\b|install\.js|--config-dir/;
+const CHILD_SHELL_TRUE = /\bshell\s*:\s*true\b/;
+// Pre-#6002 raw-child-process test, kept for source-file reachability
+// (scripts/ci-test-scope.cjs), whose behavior must not change.
+function preIssue6002RawChildProcess(content) {
+  if (/require\((['"])(?:node:)?child_process\1\)/.test(content)) return true;
+  if (!content.includes('child_process')) return false;
+  return /\bspawnSync\(|\bexecSync\(|\bexecFileSync\(/.test(content);
+}
+
 /**
  * Detection categories (#4591 design doc). Each entry's `test` receives the
  * raw file content string and returns true when that category's signal is
  * present. Order matches the design doc's enumeration; `signals` in
- * `classifyContent`'s return value preserves this order.
+ * `classifyContent`'s return value preserves this order. Optional fields
+ * (the pre-#6002 view used by `classifyUnstrippedContent`): `raw: <fn>`
+ * replaces `test` there; `rawSkip: true` omits the category there.
  */
 const CATEGORIES = [
   {
@@ -172,16 +223,43 @@ const CATEGORIES = [
   },
   {
     name: 'raw-child-process',
-    // Requires BOTH the child_process import/reference token AND one of the
-    // three call names in the same file — this is what keeps a same-named
-    // local identifier (e.g. a variable called `spawnResult`) from false-
-    // positiving: `spawnResult` never forms the substring `spawnSync(`.
+    raw: preIssue6002RawChildProcess, // pre-#6002 test used by classifyUnstrippedContent
+    // #6002: matches a call that can spawn a platform-dependent binary, not
+    // the mere presence of the module. Requires the child_process token AND a
+    // sync or async spawn call (spawnSync/execSync/execFileSync/spawn/execFile/
+    // exec) whose first argument is NOT node itself (`process.execPath` or the
+    // literal 'node' / "node"): a child that only re-runs node behaves
+    // identically on every OS and is no real-OS signal. `fork(` always runs
+    // node, so it is node-only by construction and never a signal on its own.
+    // Any other first argument (another literal, an identifier, a template
+    // literal) matches (over-inclusion, the safe direction), as does
+    // `shell: true` anywhere in a child_process-using file. A file that
+    // requires child_process but whose call sites cannot be identified at all
+    // (aliased or destructured-and-renamed usage) also counts. A same-named
+    // local identifier (e.g. `spawnResult`) never forms the substring
+    // `spawnSync(`; bare `.exec(` member calls (e.g. `re.exec(`) are not
+    // spawn call sites.
     test: (content) => {
-      if (/require\((['"])(?:node:)?child_process\1\)/.test(content)) return true;
       if (!content.includes('child_process')) return false;
-      return /\bspawnSync\(|\bexecSync\(|\bexecFileSync\(/.test(content);
+      if (CHILD_SHELL_TRUE.test(content)) return true;
+      if (CHILD_NON_NODE_CALL.test(content)) return true;
+      if (hasMemberNonNodeCall(content)) return true;
+      if (CHILD_PROMISIFIED.test(content)) return true;
+      return !CHILD_NODE_ONLY_CALL.test(content);
     },
   },
+  {
+    name: 'fs-lock-or-install-child',
+    rawSkip: true, // did not exist pre-#6002; classifyUnstrippedContent omits it
+    // #6002 decision: a node-only child still counts when the file also
+    // exercises Windows-sensitive filesystem behavior (locking, rename/unlink
+    // semantics, EBUSY/EPERM, the installer, --config-dir), because the child
+    // is then driving that behavior in a real process.
+    test: (content) =>
+      content.includes('child_process') &&
+      CHILD_NODE_ONLY_CALL.test(content) &&
+      FS_LOCK_OR_INSTALL.test(content),
+  },
   {
     name: 'shell-interpreter-spawn',
     // Added after an adversarial review (#4641) caught a REAL false negative
@@ -259,15 +337,8 @@ const NOISY_FOR_SOURCE_REACHABILITY = new Set(['symlink-keyword']);
  * expressible as content; reach for this map only when it structurally is
  * not.
  *
- * Current entries:
- * - tests/external-descriptor-confinement.test.cjs: exercises `isPathConfined`
- *   (src/external-descriptor-trust.cts:41-49), which calls the AMBIENT
- *   `path` module directly — `path.resolve(root, target)` and `path.sep` —
- *   with no platform/path injection seam. Its win32 semantics (drive
- *   letters, UNC paths, `\` separator) are therefore only reachable by
- *   actually running on Windows; the win32 branch is unreachable on Linux.
- *   This is a security-relevant write-confinement gate, so a silent gap
- *   here is a security regression, not a coverage nit (#4641).
+ * Entries and their reasons live in the Map below (the single source); each
+ * reason is a required value, so none can be added without one.
  */
 const ALWAYS_REAL_OS = new Map([
   [
@@ -276,6 +347,13 @@ const ALWAYS_REAL_OS = new Map([
       'path module (path.resolve/path.sep) with no platform injection; its win32 branch (drive ' +
       'letters, UNC paths, \\ separator) is unreachable on Linux. Security-relevant write-confinement gate.',
   ],
+  [
+    'tests/state-todos-render.test.cjs',
+    'Exercises renderPendingTodosMarkdown (src/init.cts:2646-2650), which uses the ambient path module ' +
+      '(path.isAbsolute/path.relative) with no platform injection to build repo-relative todo links ' +
+      '(#4384/#4421); its win32 branch (drive letters, \\ separator) is unreachable on Linux. The test ' +
+      "file's only content signal was a node-only spawnSync, which #6002 deliberately ignores.",
+  ],
 ]);
 
 /**
@@ -301,18 +379,157 @@ const MACOS_CATEGORIES = [
   { name: 'case-sensitivity', test: (content) => /case.?insensitiv|case.?sensitiv/i.test(content) },
   { name: 'chmod-mode-bit', test: (content) => /chmodSync|chmod\(/.test(content) || /0o[0-7]{3,4}\b/.test(content) },
   { name: 'symlink-keyword', test: (content) => /\bsymlink/i.test(content) },
+  // #6002: realpath calls normalize the macOS /var -> /private/var tmpdir symlink.
+  { name: 'realpath', test: (content) => /\brealpath(Sync)?\b/.test(content) },
 ];
 
+/** Keywords after which a `/` begins a regex literal rather than a division. */
+const REGEX_AFTER_KEYWORD = new Set([
+  'return', 'typeof', 'case', 'in', 'of', 'delete', 'void', 'throw', 'new', 'else', 'do', 'instanceof', 'yield', 'await',
+]);
+const REGEX_AFTER_CHAR = '(,=:[!&|?{};+-*%<>~^';
+
+function regexAllowedAfter(out) {
+  let j = out.length - 1;
+  while (j >= 0 && /\s/.test(out[j])) j--;
+  if (j < 0) return true;
+  if (REGEX_AFTER_CHAR.includes(out[j])) return true;
+  if (/[A-Za-z0-9_$]/.test(out[j])) {
+    let k = j;
+    while (k >= 0 && /[A-Za-z0-9_$]/.test(out[k])) k--;
+    return REGEX_AFTER_KEYWORD.has(out.slice(k + 1, j + 1));
+  }
+  return false;
+}
+
+/**
+ * #6002 — remove `//` line comments and block comments from source text so
+ * the CATEGORIES / MACOS_CATEGORIES tests match platform BEHAVIOR in code, not
+ * words in prose. A single-pass scanner tracks whether it is inside a '…', "…"
+ * or `…` string literal (honoring backslash escapes), so a `//` inside a
+ * string (e.g. a URL) does not start a comment. A `/` is read as the start of
+ * a regex literal (scanned to its closing unescaped `/`, honoring `[...]`
+ * classes and escapes) when the previous significant character is one of
+ * `( , = : [ ! & | ? { } ; + - * % < > ~ ^`, the start of input, or a keyword
+ * such as return/typeof; the regex body is kept verbatim so quotes or `//`
+ * inside it cannot corrupt string or comment tracking. An unterminated regex
+ * (newline first) falls back to a plain `/`. '…' and "…" strings end at a
+ * newline so an unbalanced quote cannot swallow the rest of the file. A line
+ * comment is dropped up to (not including) its newline; a block comment
+ * becomes one space (its newlines are kept) so adjacent tokens never fuse.
+ *
+ * @param {string} content
+ * @returns {string}
+ */
+function stripComments(content) {
+  const src = typeof content === 'string' ? content : '';
+  const n = src.length;
+  let out = '';
+  let i = 0;
+
+  // Scans code from `i`. When `inExpr` (inside a template `${ … }`), returns at the
+  // matching unnested `}` (not consumed); otherwise runs to end of input.
+  function scanCode(inExpr) {
+    let depth = 0;
+    while (i < n) {
+      const ch = src[i];
+      const next = src[i + 1];
+      if (inExpr && ch === '}' && depth === 0) return;
+      if (inExpr && ch === '{') depth++;
+      else if (inExpr && ch === '}') depth--;
+      if (ch === '/' && next === '/') {
+        while (i < n && src[i] !== '\n') i++;
+      } else if (ch === '/' && next === '*') {
+        i += 2;
+        let newlines = '';
+        while (i < n && !(src[i] === '*' && src[i + 1] === '/')) {
+          if (src[i] === '\n') newlines += '\n';
+          i++;
+        }
+        i += 2;
+        out += ' ' + newlines;
+      } else if (ch === '/' && regexAllowedAfter(out)) {
+        let j = i + 1;
+        let inClass = false;
+        let closed = false;
+        while (j < n && src[j] !== '\n') {
+          const c = src[j];
+          if (c === '\\') {
+            j += 2;
+            continue;
+          }
+          if (c === '[') inClass = true;
+          else if (c === ']') inClass = false;
+          else if (c === '/' && !inClass) {
+            closed = true;
+            break;
+          }
+          j++;
+        }
+        if (closed) {
+          out += src.slice(i, j + 1);
+          i = j + 1;
+        } else {
+          out += ch;
+          i++;
+        }
+      } else if (ch === '`') {
+        out += ch;
+        i++;
+        while (i < n) {
+          const c = src[i];
+          if (c === '\\' && i + 1 < n) {
+            out += c + src[i + 1];
+            i += 2;
+            continue;
+          }
+          if (c === '$' && src[i + 1] === '{') {
+            out += '${';
+            i += 2;
+            scanCode(true);
+            continue;
+          }
+          out += c;
+          i++;
+          if (c === '`') break;
+        }
+      } else if (ch === "'" || ch === '"') {
+        out += ch;
+        i++;
+        while (i < n) {
+          const c = src[i];
+          if (c === '\\' && i + 1 < n) {
+            out += c + src[i + 1];
+            i += 2;
+            continue;
+          }
+          if (c === '\n') break;
+          out += c;
+          i++;
+          if (c === ch) break;
+        }
+      } else {
+        out += ch;
+        i++;
+      }
+    }
+  }
+
+  scanCode(false);
+  return out;
+}
+
 /**
  * Pure classifier: given a test file's raw string content, returns which
  * platform-conformance categories matched and whether the file needs real-OS
- * coverage (true iff at least one category matched).
+ * coverage (true iff at least one category matched). Comments are stripped
+ * first (#6002).
  *
  * @param {string} content
  * @returns {{needsRealOs: boolean, signals: string[]}}
  */
 function classifyContent(content) {
-  const text = typeof content === 'string' ? content : '';
+  const text = stripComments(content);
   const signals = [];
   for (const category of CATEGORIES) {
     if (category.test(text)) signals.push(category.name);
@@ -320,6 +537,26 @@ function classifyContent(content) {
   return { needsRealOs: signals.length > 0, signals };
 }
 
+/**
+ * Pre-#6002 classification: no comment stripping and the legacy
+ * raw-child-process test (any child_process require counts); the
+ * fs-lock-or-install-child category does not exist here. Used by
+ * scripts/ci-test-scope.cjs for src/ reachability, whose behavior #6002 must
+ * not change.
+ *
+ * @param {string} content
+ * @returns {{needsRealOs: boolean, signals: string[]}}
+ */
+function classifyUnstrippedContent(content) {
+  const text = typeof content === 'string' ? content : '';
+  const signals = [];
+  for (const category of CATEGORIES) {
+    if (category.rawSkip) continue;
+    if ((category.raw || category.test)(text)) signals.push(category.name);
+  }
+  return { needsRealOs: signals.length > 0, signals };
+}
+
 /**
  * Pure classifier, macOS-specific signal set (#4593). Same shape as
  * classifyContent, against MACOS_CATEGORIES instead of CATEGORIES.
@@ -328,7 +565,7 @@ function classifyContent(content) {
  * @returns {{needsRealOs: boolean, signals: string[]}}
  */
 function classifyMacosContent(content) {
-  const text = typeof content === 'string' ? content : '';
+  const text = stripComments(content); // #6002
   const signals = [];
   for (const category of MACOS_CATEGORIES) {
     if (category.test(text)) signals.push(category.name);
@@ -728,6 +965,8 @@ if (require.main === module) {
 
 module.exports = {
   classifyContent,
+  classifyUnstrippedContent,
+  stripComments,
   CATEGORIES,
   NOISY_FOR_SOURCE_REACHABILITY,
   ALWAYS_REAL_OS,

package/scripts/lib/macos-conformance-tier.generated.cjs

@@ -8,20 +8,17 @@ module.exports = {
   MACOS_CONFORMANCE_TIER_FILES: [
   "tests/5100-win32-bare-bash-sentinel.property.test.cjs",
   "tests/active-workstream-store.unit.test.cjs",
-  "tests/adr-612-bracket-phase-counting.test.cjs",
   "tests/adr-612-bracket-phase-remove.test.cjs",
   "tests/adr-612-bracket-write-path.test.cjs",
   "tests/adr-index-gate.test.cjs",
   "tests/adr-parser.property.test.cjs",
   "tests/adr-parser.unit.test.cjs",
-  "tests/agent-classification-parity.test.cjs",
   "tests/agent-install-check.test.cjs",
+  "tests/agent-install-validation.test.cjs",
   "tests/agent-skills.test.cjs",
-  "tests/api-coverage-gate-e2e.test.cjs",
   "tests/api-coverage.test.cjs",
   "tests/args-terminator-nonce.test.cjs",
-  "tests/ask-user-questions-fallback.test.cjs",
-  "tests/audit-command-cutover.test.cjs",
+  "tests/blocking-guard-budget-parity.test.cjs",
   "tests/broken-windows.test.cjs",
   "tests/capability-cli.test.cjs",
   "tests/capability-command-dispatch.test.cjs",
@@ -29,11 +26,12 @@ module.exports = {
   "tests/capability-ledger.test.cjs",
   "tests/capability-lifecycle.test.cjs",
   "tests/capability-loader.test.cjs",
-  "tests/capability-lock-mkdir-failure-3987.test.cjs",
   "tests/capability-registry.test.cjs",
   "tests/capability-source.test.cjs",
   "tests/capability-state.test.cjs",
   "tests/capability-trust.test.cjs",
+  "tests/changelog-release-notes.test.cjs",
+  "tests/changeset-lint.test.cjs",
   "tests/changeset-parse.test.cjs",
   "tests/check-contract-drift.test.cjs",
   "tests/check-predicate.test.cjs",
@@ -42,81 +40,90 @@ module.exports = {
   "tests/check-ui-safety-gate.test.cjs",
   "tests/check-update-config-dir.test.cjs",
   "tests/chunked-planning-parallel.test.cjs",
+  "tests/ci-compact-v8-coverage.test.cjs",
   "tests/ci-conformance-pr-gating.test.cjs",
-  "tests/ci-docs-guard-registry.test.cjs",
   "tests/ci-test-scope.test.cjs",
+  "tests/claude-md-path.test.cjs",
+  "tests/claude-md.test.cjs",
+  "tests/claude-orchestration-4747.test.cjs",
   "tests/cline-install.test.cjs",
   "tests/code-review-pipeline-regression.test.cjs",
+  "tests/code-review-tier3-files-override-scoping.test.cjs",
+  "tests/code-review.test.cjs",
   "tests/codex-config-agents.test.cjs",
   "tests/codex-config-hooks.test.cjs",
   "tests/codex-config-install.test.cjs",
-  "tests/codex-config.test.cjs",
   "tests/command-arguments-block.test.cjs",
   "tests/commands.platform.test.cjs",
-  "tests/commit-docs-bypass.test.cjs",
   "tests/commit-files-deletion.test.cjs",
   "tests/commit-files-pathspec.test.cjs",
   "tests/commonjs-marker.test.cjs",
-  "tests/completion-ratio-scope-withholding.test.cjs",
-  "tests/config-loader.test.cjs",
+  "tests/complete-milestone-release-map-routing.test.cjs",
+  "tests/config-loader-bounded-read.platform.test.cjs",
   "tests/config-schema.property.test.cjs",
   "tests/config.test.cjs",
-  "tests/configured-entrypoint-validation.test.cjs",
   "tests/contributor-standards.test.cjs",
   "tests/core-utils.test.cjs",
+  "tests/criterion-replay.test.cjs",
   "tests/cursor-subagent-isolation.test.cjs",
   "tests/custom-phase-readers.test.cjs",
+  "tests/custom-phase-review-round7.test.cjs",
   "tests/debugger-semantic-recall.test.cjs",
   "tests/default-flip-documentation-lint.test.cjs",
-  "tests/discuss-phase-power.test.cjs",
-  "tests/docs-parity-live-registry.test.cjs",
+  "tests/docs-update.test.cjs",
   "tests/drift-whole-change-set.test.cjs",
   "tests/effort-surface-axis.test.cjs",
   "tests/effort-sync-installed-runtime.test.cjs",
   "tests/emitted-attribution.test.cjs",
-  "tests/ensure-runtime-build.test.cjs",
-  "tests/execute-phase-decimal-arithmetic.test.cjs",
+  "tests/eslint-no-verification-status-literal.test.cjs",
+  "tests/execute-plan-update-codebase-map-diff-base.test.cjs",
   "tests/executed-plan.test.cjs",
   "tests/executor-mvp-tdd-section.test.cjs",
   "tests/executor-sequential-linked-worktree.test.cjs",
   "tests/external-job.test.cjs",
   "tests/failing-direction.test.cjs",
-  "tests/fallow-runner.test.cjs",
   "tests/feat-2483-review-claude-mds-guard.test.cjs",
   "tests/features-index-gate.test.cjs",
   "tests/frontmatter.unit.test.cjs",
-  "tests/gap-checker.property.test.cjs",
-  "tests/gate-api-coverage-verify-pre-escape.test.cjs",
+  "tests/gate-api-coverage-verify-pre.unit.test.cjs",
   "tests/gate-codebase-drift.unit.test.cjs",
+  "tests/gate-contained-path-symlinked-planning.test.cjs",
+  "tests/gate-decision-coverage-plan.unit.test.cjs",
+  "tests/gate-decision-coverage-verify-stderr.test.cjs",
+  "tests/gate-decision-coverage-verify.unit.test.cjs",
   "tests/gate-evaluation-scope.test.cjs",
+  "tests/gate-gap-analysis-plan-post.unit.test.cjs",
   "tests/gate-predicate.unit.test.cjs",
   "tests/gate-tdd-red-evidence-containment.test.cjs",
+  "tests/gate-tdd-red-evidence.unit.test.cjs",
+  "tests/gate-tdd-review-checkpoint.unit.test.cjs",
   "tests/gate-ui-plan.unit.test.cjs",
+  "tests/gate-ui-safety.unit.test.cjs",
   "tests/gate-verify-command-paths.unit.test.cjs",
-  "tests/gemini-runtime-removed.test.cjs",
-  "tests/gen-context-index.test.cjs",
-  "tests/gen-section-manifest.test.cjs",
+  "tests/gate-verify-failure-directions.unit.test.cjs",
   "tests/git-base-branch.test.cjs",
+  "tests/git-head-tree.test.cjs",
   "tests/git-location-env-scrub.test.cjs",
   "tests/graphify-query.test.cjs",
   "tests/graphify-visualization.test.cjs",
   "tests/gsd-agent-isolation-guard.test.cjs",
   "tests/gsd-path-export-hook.test.cjs",
   "tests/gsd-secret-read-guard.test.cjs",
-  "tests/gsd-settings-advanced.test.cjs",
   "tests/gsd-statusline.test.cjs",
+  "tests/gsd-tool-dir.platform.test.cjs",
+  "tests/gsd-tool-dir.test.cjs",
   "tests/gsd-tools-path-refs.test.cjs",
   "tests/gsd-validate-commit-crash-policy.test.cjs",
   "tests/gsd-validate-commit-sigpipe.test.cjs",
   "tests/gsd-write-guard.test.cjs",
   "tests/health-diagnostic-rules/worktree-health.test.cjs",
-  "tests/health-diagnostic.test.cjs",
   "tests/helpers-cleanup.test.cjs",
   "tests/helpers-process-isolation.test.cjs",
   "tests/hooks-crash-policy.test.cjs",
   "tests/hooks-opt-in.test.cjs",
-  "tests/host-integration.test.cjs",
   "tests/init-manager.test.cjs",
+  "tests/init.test.cjs",
+  "tests/install-fs-adapter-seam.test.cjs",
   "tests/install-minimal-hooks.test.cjs",
   "tests/install-path-detection.test.cjs",
   "tests/install-regressions.test.cjs",
@@ -131,44 +138,46 @@ module.exports = {
   "tests/installer-migrations.test.cjs",
   "tests/intel.test.cjs",
   "tests/inventory-nested-families.test.cjs",
+  "tests/isolated-env.test.cjs",
+  "tests/isolation-sentinel-read.platform.test.cjs",
   "tests/isolation-sentinel.test.cjs",
   "tests/issue-version-gate.test.cjs",
+  "tests/kilo-upgrades.test.cjs",
   "tests/kimi-upgrades.test.cjs",
+  "tests/launcher-homes-derivation.test.cjs",
   "tests/lint-docs-command-form.test.cjs",
   "tests/lint-frontmatter-scalar-broad-grep.test.cjs",
   "tests/lint-retired-runtime-name.test.cjs",
   "tests/lint-workflow-shellcheck-fetch.test.cjs",
   "tests/list-seeds.test.cjs",
-  "tests/markdown-sectionizer-xml-tags.property.test.cjs",
   "tests/markdown-sectionizer.test.cjs",
   "tests/mcp-catalog.test.cjs",
+  "tests/merge-commit-pr.test.cjs",
   "tests/milestone-archive.test.cjs",
   "tests/milestone-release-tags.test.cjs",
   "tests/milestone-window-single-owner.test.cjs",
-  "tests/model-catalog.unit.test.cjs",
   "tests/model-resolver.test.cjs",
   "tests/no-exact-case-env-access.rule.test.cjs",
-  "tests/no-pending-3212-markers.test.cjs",
   "tests/no-phantom-issue-refs.test.cjs",
   "tests/no-posix-mode-bit-assert.rule.test.cjs",
   "tests/no-private-binary-resolution.rule.test.cjs",
   "tests/no-unguarded-nonportable-exec.rule.test.cjs",
-  "tests/nsegment-phase-grammar.test.cjs",
+  "tests/node-compile-cache.test.cjs",
   "tests/observability/event.test.cjs",
   "tests/onboard-command.test.cjs",
+  "tests/opencode-advisory-stderr.test.cjs",
   "tests/opencode-generations.smoke.test.cjs",
   "tests/opencode-install-notices.test.cjs",
+  "tests/opencode-install-state.test.cjs",
   "tests/opencode-parity-hooks.test.cjs",
   "tests/opencode-plugin-adapter.test.cjs",
+  "tests/opencode-statusline-plugin.test.cjs",
   "tests/opencode-uninstall-roundtrip.test.cjs",
-  "tests/pause-work-context-detection.test.cjs",
+  "tests/path-replacement.test.cjs",
   "tests/pause-work-improvements.test.cjs",
   "tests/perf-317-context-monitor-fs.test.cjs",
-  "tests/phase-completion-single-owner.test.cjs",
-  "tests/phase-estimation.test.cjs",
   "tests/phase-id-drift-guard.test.cjs",
   "tests/phase-id.test.cjs",
-  "tests/phase-locator.test.cjs",
   "tests/phase-status.test.cjs",
   "tests/phase.platform.test.cjs",
   "tests/phase.test.cjs",
@@ -181,26 +190,27 @@ module.exports = {
   "tests/plan-review-convergence.test.cjs",
   "tests/planning-inspect.test.cjs",
   "tests/planning-inspect.unit.test.cjs",
-  "tests/planning-lock-mkdir-failure-1884.test.cjs",
-  "tests/planning-snapshot.test.cjs",
-  "tests/planning-workspace.test.cjs",
   "tests/platform-conformance-tier.test.cjs",
   "tests/plugin-manifest.test.cjs",
   "tests/policy-shell-pinning.test.cjs",
-  "tests/portability-rule-disable-ban.test.cjs",
   "tests/precommit-alias-drift-hook.test.cjs",
   "tests/prepush-enterprise-email-hook.test.cjs",
   "tests/process-seam.test.cjs",
-  "tests/profile-output.test.cjs",
   "tests/profile-pipeline.test.cjs",
+  "tests/project-context-cli.test.cjs",
+  "tests/project-context.test.cjs",
   "tests/project-root.test.cjs",
+  "tests/prune-orphaned-worktrees.test.cjs",
   "tests/quick-batch-command-router.stdin.test.cjs",
   "tests/quick-batch.test.cjs",
   "tests/quick-branching.test.cjs",
   "tests/quick-commit-boundary.test.cjs",
   "tests/quick-research.test.cjs",
+  "tests/quick-review-scope-tip-bound.test.cjs",
   "tests/reapply-verify-hunks.test.cjs",
   "tests/refactor-1390-t3-characterization.test.cjs",
+  "tests/release-notes-real-os-5922.test.cjs",
+  "tests/release-pipeline-pr.test.cjs",
   "tests/require-issue-link-policy.test.cjs",
   "tests/response-language-coverage.test.cjs",
   "tests/retired-artifact-cleanup.test.cjs",
@@ -219,13 +229,13 @@ module.exports = {
   "tests/roadmap-parser.test.cjs",
   "tests/roadmap-phase-fallback.test.cjs",
   "tests/roadmap-upgrade-bracket.test.cjs",
-  "tests/roadmap.test.cjs",
   "tests/run-tests-accounting.test.cjs",
   "tests/run-tests-harness.test.cjs",
+  "tests/run-tests-temp-root.test.cjs",
   "tests/runtime-artifact-layout.test.cjs",
   "tests/runtime-identity.test.cjs",
   "tests/runtime-launcher-parity.test.cjs",
-  "tests/runtime-name-policy.test.cjs",
+  "tests/secret-read-exemptions.test.cjs",
   "tests/security.test.cjs",
   "tests/self-test-report-policy.test.cjs",
   "tests/settings-jsonc.test.cjs",
@@ -235,37 +245,39 @@ module.exports = {
   "tests/shipped-reference-cites.test.cjs",
   "tests/skill-manifest.test.cjs",
   "tests/smart-entry.unit.test.cjs",
-  "tests/spawn-liveness-banner.test.cjs",
   "tests/state-document.test.cjs",
   "tests/state-transition.test.cjs",
   "tests/state.platform.test.cjs",
   "tests/state.test.cjs",
-  "tests/tdd-mode.platform.test.cjs",
+  "tests/sub-repos-evaluation-scope-5867.test.cjs",
+  "tests/timeout-evidence-from-ci.test.cjs",
+  "tests/timeout-evidence.test.cjs",
   "tests/todos-workstream-scope.test.cjs",
+  "tests/traceability-row-existence-5844.test.cjs",
   "tests/tracer-bullet.test.cjs",
   "tests/uat-complete-session.test.cjs",
   "tests/uat-predicate.test.cjs",
-  "tests/uat.test.cjs",
   "tests/ui-auditor-screenshot-block.test.cjs",
   "tests/ui-interaction-capture.test.cjs",
   "tests/ui-safety-gate.test.cjs",
-  "tests/ui-spec-inventory-provenance.test.cjs",
+  "tests/undo-commit-selection-4465.test.cjs",
   "tests/unreachable-guard-drift.test.cjs",
   "tests/unreachable-shell-guard.test.cjs",
-  "tests/unusable-input.test.cjs",
   "tests/update-custom-backup.test.cjs",
   "tests/user-artifact-staging.test.cjs",
   "tests/verification-append-audit.test.cjs",
   "tests/verification-overrides.test.cjs",
   "tests/verification-status.test.cjs",
-  "tests/verify-archive-dirs-live-path.test.cjs",
   "tests/verify-command-grounding.test.cjs",
   "tests/verify.test.cjs",
+  "tests/windows-powershell-hook-runner.test.cjs",
   "tests/workflow-fragments.test.cjs",
-  "tests/workflow-shell-pinning.test.cjs",
   "tests/workstream-inventory.test.cjs",
   "tests/workstream.test.cjs",
+  "tests/worktree-cleanup.test.cjs",
+  "tests/worktree-safety-reap.test.cjs",
   "tests/worktree-safety.test.cjs",
+  "tests/worktree-subdir-effective-root-4885.test.cjs",
   "tests/worktree.test.cjs",
   ],
 };