@opengsd/gsd-core 1.20.0 → 1.21.0

package/scripts/lib/platform-conformance-tier.generated.cjs

@@ -8,17 +8,11 @@ module.exports = {
   "tests/adr-612-bracket-phase-remove.test.cjs",
   "tests/adr-612-bracket-write-path.test.cjs",
   "tests/adr-index-gate.test.cjs",
-  "tests/adr857-core-without-capabilities.test.cjs",
   "tests/agent-install-check.test.cjs",
   "tests/agent-install-validation.test.cjs",
   "tests/agent-skills.test.cjs",
   "tests/antigravity-upgrades.test.cjs",
-  "tests/api-coverage-gate-e2e.test.cjs",
-  "tests/api-coverage.test.cjs",
   "tests/args-terminator-nonce.test.cjs",
-  "tests/assumption-delta-checkpoint-e2e.test.cjs",
-  "tests/assumption-delta.test.cjs",
-  "tests/audit-command-cutover.test.cjs",
   "tests/audit-workstream-layouts.test.cjs",
   "tests/augment-upgrades.test.cjs",
   "tests/blocking-guard-budget-parity.test.cjs",
@@ -30,29 +24,25 @@ module.exports = {
   "tests/capability-lifecycle.test.cjs",
   "tests/capability-loader.test.cjs",
   "tests/capability-lock-lazy-self-probe-5327.test.cjs",
-  "tests/capability-lock-mkdir-failure-3987.test.cjs",
   "tests/capability-probe-fallback.test.cjs",
   "tests/capability-source.test.cjs",
   "tests/capability-state.test.cjs",
   "tests/changeset-new.test.cjs",
   "tests/check-contract-drift.test.cjs",
   "tests/check-env.test.cjs",
-  "tests/check-gap-analysis-plan-post-e2e.test.cjs",
   "tests/check-glossary-refs.test.cjs",
   "tests/check-predicate.test.cjs",
-  "tests/check-router-cutover-equivalence.test.cjs",
   "tests/check-router-gate-boundaries.test.cjs",
-  "tests/check-tdd-review-checkpoint-e2e.test.cjs",
   "tests/check-ui-safety-gate.test.cjs",
   "tests/check-update-config-dir.test.cjs",
   "tests/check-update-fail-open.test.cjs",
   "tests/chunked-planning-parallel.test.cjs",
   "tests/ci-conformance-pr-gating.test.cjs",
-  "tests/ci-docs-guard-registry.test.cjs",
   "tests/ci-rebase-check.test.cjs",
   "tests/ci-test-scope.test.cjs",
-  "tests/cjs-command-router-adapter.test.cjs",
   "tests/claude-md.test.cjs",
+  "tests/claude-orchestration-4747.test.cjs",
+  "tests/cli-surface-host-router-locks.test.cjs",
   "tests/cline-install.test.cjs",
   "tests/close-phase-todos-padded-resolves.test.cjs",
   "tests/code-review-cicd.test.cjs",
@@ -76,9 +66,8 @@ module.exports = {
   "tests/commonjs-marker.test.cjs",
   "tests/compact-content-4139.test.cjs",
   "tests/complete-milestone-release-map-routing.test.cjs",
-  "tests/completion-ratio-scope-withholding.test.cjs",
   "tests/config-defaults-runtime-exclusion.test.cjs",
-  "tests/config-get-default.test.cjs",
+  "tests/config-loader-bounded-read.platform.test.cjs",
   "tests/config-loader.test.cjs",
   "tests/config-schema.property.test.cjs",
   "tests/config.platform.test.cjs",
@@ -88,58 +77,44 @@ module.exports = {
   "tests/copilot-install.test.cjs",
   "tests/copilot-upgrades.test.cjs",
   "tests/core-utils.test.cjs",
-  "tests/cursor-hook-workspace-roots.test.cjs",
+  "tests/criterion-replay.test.cjs",
   "tests/cursor-hooks.test.cjs",
   "tests/cursor-subagent-isolation.test.cjs",
   "tests/custom-phase-readers.test.cjs",
   "tests/debug-session-management.test.cjs",
   "tests/defaults-json-fallback.test.cjs",
   "tests/diagnose-windows-spawn-watcher.test.cjs",
-  "tests/dispatch-identity.test.cjs",
-  "tests/dispatcher.test.cjs",
   "tests/drift-detection.test.cjs",
   "tests/drift-whole-change-set.test.cjs",
   "tests/effort-local-install.test.cjs",
   "tests/effort-surface-axis.test.cjs",
   "tests/effort-sync-installed-runtime.test.cjs",
-  "tests/emitted-ack-trailer.test.cjs",
+  "tests/effort-sync-manifest.test.cjs",
   "tests/emitted-attribution.test.cjs",
-  "tests/emitted-provenance.test.cjs",
-  "tests/ensure-runtime-build.test.cjs",
   "tests/eslint-rules.test.cjs",
   "tests/execute-phase-cross-block-state.test.cjs",
   "tests/execute-phase-decimal-arithmetic.test.cjs",
   "tests/execute-phase-worktree-guard.test.cjs",
   "tests/execute-plan-update-codebase-map-diff-base.test.cjs",
-  "tests/execute-wave-post-gate-pipeline-e2e.test.cjs",
   "tests/executed-plan.test.cjs",
   "tests/executor-mvp-tdd-section.test.cjs",
   "tests/executor-sequential-linked-worktree.test.cjs",
   "tests/external-descriptor-confinement.test.cjs",
-  "tests/failing-direction.test.cjs",
   "tests/fallow-runner.test.cjs",
   "tests/faulty-deps.test.cjs",
   "tests/feat-2483-review-claude-mds-guard.test.cjs",
   "tests/features-index-gate.test.cjs",
-  "tests/frontmatter.test.cjs",
-  "tests/gap-checker.property.test.cjs",
-  "tests/gate-api-coverage-verify-pre-escape.test.cjs",
-  "tests/gate-consumer-exit-awareness.test.cjs",
+  "tests/gate-contained-path-symlinked-planning.test.cjs",
   "tests/gate-decision-coverage-verify-stderr.test.cjs",
-  "tests/gate-exit.test.cjs",
   "tests/gate-predicate.unit.test.cjs",
   "tests/gate-tdd-red-evidence-containment.test.cjs",
   "tests/gate-tdd-review-checkpoint-hardening.test.cjs",
   "tests/gate-tdd-review-checkpoint.unit.test.cjs",
   "tests/gate-tdd-review-order-5275.test.cjs",
-  "tests/gate-ui-plan.unit.test.cjs",
   "tests/gate-ui-safety.unit.test.cjs",
-  "tests/gate-verify-command-paths.unit.test.cjs",
   "tests/gemini-runtime-removed.test.cjs",
-  "tests/gen-context-index.test.cjs",
-  "tests/gen-health-docs.test.cjs",
-  "tests/gen-section-manifest.test.cjs",
   "tests/git-base-branch.test.cjs",
+  "tests/git-head-tree.test.cjs",
   "tests/git-location-env-scrub.test.cjs",
   "tests/git-optional-locks-parity.test.cjs",
   "tests/golden-install-tree.test.cjs",
@@ -147,23 +122,20 @@ module.exports = {
   "tests/graphify-visualization.test.cjs",
   "tests/graphify.test.cjs",
   "tests/gsd-agent-isolation-guard.test.cjs",
-  "tests/gsd-check-update-worker-atomic-cache.test.cjs",
   "tests/gsd-check-update-worker-platform-gate.test.cjs",
-  "tests/gsd-mcp-server-bin.test.cjs",
   "tests/gsd-mcp-server.test.cjs",
   "tests/gsd-path-export-hook.test.cjs",
   "tests/gsd-statusline.test.cjs",
+  "tests/gsd-tool-dir.platform.test.cjs",
   "tests/gsd-validate-commit-crash-policy.test.cjs",
   "tests/gsd-validate-commit-sigpipe.test.cjs",
   "tests/gsd-write-guard.test.cjs",
   "tests/health-diagnostic-rules/config-validation.test.cjs",
   "tests/health-diagnostic-rules/worktree-health.test.cjs",
-  "tests/health-diagnostic.test.cjs",
   "tests/helpers-cleanup.test.cjs",
   "tests/helpers-process-isolation.test.cjs",
   "tests/hermes-skills-migration.test.cjs",
   "tests/hook-activation-probe.test.cjs",
-  "tests/hooks-commonjs-marker.test.cjs",
   "tests/hooks-crash-policy.test.cjs",
   "tests/hooks-opt-in.test.cjs",
   "tests/host-integration.test.cjs",
@@ -184,10 +156,10 @@ module.exports = {
   "tests/installer-migration-prune-stale-pristine.test.cjs",
   "tests/installer-migration-rename-gsd-core.test.cjs",
   "tests/installer-migrations.test.cjs",
-  "tests/intel.test.cjs",
   "tests/inventory-nested-families.test.cjs",
-  "tests/io.test.cjs",
+  "tests/isolated-env.test.cjs",
   "tests/isolation-aged-none-sentinel.test.cjs",
+  "tests/isolation-sentinel-read.platform.test.cjs",
   "tests/isolation-sentinel.test.cjs",
   "tests/kilo-upgrades.test.cjs",
   "tests/kimi-agent-converter.test.cjs",
@@ -196,13 +168,8 @@ module.exports = {
   "tests/launcher-homes-derivation.test.cjs",
   "tests/lint-phase-arg-assignment.test.cjs",
   "tests/lint-workflow-shellcheck-fetch.test.cjs",
-  "tests/live-config-guard.test.cjs",
   "tests/lockfile-cve-audit.test.cjs",
   "tests/locking-bugs-1909-1916-1925-1927.test.cjs",
-  "tests/loop-hooks-empty-points-e2e.test.cjs",
-  "tests/loop-hooks-ship-pre-e2e.test.cjs",
-  "tests/loop-hooks-verify-post-e2e.test.cjs",
-  "tests/mcp-catalog.property.test.cjs",
   "tests/mcp-catalog.test.cjs",
   "tests/milestone-archive.test.cjs",
   "tests/milestone-lock.test.cjs",
@@ -216,11 +183,9 @@ module.exports = {
   "tests/no-bare-npm-exec.rule.test.cjs",
   "tests/no-exact-case-env-access.rule.test.cjs",
   "tests/no-path-literal-in-assert.rule.test.cjs",
-  "tests/no-pending-3212-markers.test.cjs",
   "tests/no-phantom-issue-refs.test.cjs",
   "tests/no-posix-mode-bit-assert.rule.test.cjs",
   "tests/no-private-binary-resolution.rule.test.cjs",
-  "tests/no-unbounded-dirname-walk.rule.test.cjs",
   "tests/no-unbounded-spawn.test.cjs",
   "tests/no-unguarded-nonportable-exec.rule.test.cjs",
   "tests/node-compile-cache.test.cjs",
@@ -228,7 +193,6 @@ module.exports = {
   "tests/npm-audit-baseline.test.cjs",
   "tests/npm-integrity-gate.test.cjs",
   "tests/nsegment-phase-grammar.test.cjs",
-  "tests/onboard-command.test.cjs",
   "tests/opencode-advisory-stderr.test.cjs",
   "tests/opencode-command-dir-plural.test.cjs",
   "tests/opencode-config-jsonc.test.cjs",
@@ -244,9 +208,6 @@ module.exports = {
   "tests/pause-work-context-detection.test.cjs",
   "tests/pause-work-improvements.test.cjs",
   "tests/perf-317-context-monitor-fs.test.cjs",
-  "tests/phase-completion-single-owner.test.cjs",
-  "tests/phase-estimation.test.cjs",
-  "tests/phase-locator.test.cjs",
   "tests/phase.platform.test.cjs",
   "tests/phase6-capstone-conformance.test.cjs",
   "tests/pi-config-dir-env-override.test.cjs",
@@ -258,37 +219,35 @@ module.exports = {
   "tests/plan-phase-stall-detection.test.cjs",
   "tests/plan-pre-hook-e2e.test.cjs",
   "tests/plan-review-convergence.test.cjs",
+  "tests/planner-memory-recall-5960.test.cjs",
   "tests/planning-inspect.test.cjs",
   "tests/planning-inspect.unit.test.cjs",
-  "tests/planning-lock-mkdir-failure-1884.test.cjs",
-  "tests/planning-prompt-drift.test.cjs",
   "tests/planning-snapshot.test.cjs",
-  "tests/planning-workspace.test.cjs",
   "tests/platform-conformance-tier.test.cjs",
   "tests/platform-guard.unit.test.cjs",
   "tests/plugin-manifest.test.cjs",
   "tests/policy-160-route0-resume.test.cjs",
   "tests/policy-shell-pinning.test.cjs",
-  "tests/portability-rule-disable-ban.test.cjs",
   "tests/pr-branch-planning-filter.test.cjs",
   "tests/precommit-alias-drift-hook.test.cjs",
   "tests/prepush-enterprise-email-hook.test.cjs",
   "tests/process-seam.test.cjs",
   "tests/profile-output.test.cjs",
-  "tests/profile-pipeline.test.cjs",
-  "tests/progress-drift-guard.test.cjs",
   "tests/prohibition-enforcement.test.cjs",
+  "tests/project-context-cli.test.cjs",
+  "tests/project-context.test.cjs",
   "tests/project-root.test.cjs",
   "tests/quick-batch-command-router.stdin.test.cjs",
   "tests/quick-batch.test.cjs",
   "tests/quick-branching.test.cjs",
   "tests/quick-commit-boundary.test.cjs",
-  "tests/quick-research.test.cjs",
   "tests/quick-review-scope-tip-bound.test.cjs",
   "tests/read-guard.test.cjs",
   "tests/reapply-verify-hunks.test.cjs",
+  "tests/release-ancestry.test.cjs",
+  "tests/release-backmerge-invariants.test.cjs",
+  "tests/release-notes-real-os-5922.test.cjs",
   "tests/repo-layout.test.cjs",
-  "tests/representative-corpus.test.cjs",
   "tests/require-fs-op-fallback.rule.test.cjs",
   "tests/require-full-tmpdir-triad.rule.test.cjs",
   "tests/require-userprofile-with-home.rule.test.cjs",
@@ -300,15 +259,12 @@ module.exports = {
   "tests/review-lane-invocation.test.cjs",
   "tests/review-lane-no-redirect-5433.test.cjs",
   "tests/review-lane-prompt-cap.test.cjs",
-  "tests/review-lane-runner.test.cjs",
   "tests/review-lane-windows-spawn-resolution.test.cjs",
   "tests/review-model-config.test.cjs",
   "tests/review-parallel-lanes.test.cjs",
   "tests/review-plan-coverage-manifest.test.cjs",
-  "tests/reviewer-manifest-body.test.cjs",
   "tests/reviewer-step-dispatch.test.cjs",
   "tests/revision-remediation-binding.test.cjs",
-  "tests/roadmap-parser.test.cjs",
   "tests/roadmap-upgrade-bracket.test.cjs",
   "tests/roadmap-upgrade.test.cjs",
   "tests/roadmap.test.cjs",
@@ -320,10 +276,11 @@ module.exports = {
   "tests/runtime-artifact-layout.test.cjs",
   "tests/runtime-converters.test.cjs",
   "tests/runtime-descriptor-owner.test.cjs",
+  "tests/runtime-home-hermeticity.test.cjs",
   "tests/runtime-homes-descriptor-drive.test.cjs",
   "tests/runtime-identity.test.cjs",
   "tests/runtime-launcher-parity.test.cjs",
-  "tests/schema-drift.test.cjs",
+  "tests/secret-read-exemptions.test.cjs",
   "tests/section-manifest-init-facts.test.cjs",
   "tests/security.test.cjs",
   "tests/self-test-report-policy.test.cjs",
@@ -332,7 +289,6 @@ module.exports = {
   "tests/shared-hooks-dir-resolution.test.cjs",
   "tests/shell-command-projection-dispatch.test.cjs",
   "tests/shell-command-projection-md-normalize.test.cjs",
-  "tests/shell-command-projection-path-sep.test.cjs",
   "tests/ship-notes-wedged-pr.test.cjs",
   "tests/shipped-reference-cites.test.cjs",
   "tests/skill-manifest.test.cjs",
@@ -340,11 +296,14 @@ module.exports = {
   "tests/smart-entry.unit.test.cjs",
   "tests/state-todos-render.test.cjs",
   "tests/state.platform.test.cjs",
+  "tests/sub-repos-evaluation-scope-5867.test.cjs",
   "tests/subject-first-line.platform.test.cjs",
   "tests/tdd-mode.platform.test.cjs",
   "tests/tdd-review-checkpoint-cross-plan.test.cjs",
   "tests/teams-status.test.cjs",
   "tests/test-gate-watch-mode.test.cjs",
+  "tests/timeout-evidence-from-ci.test.cjs",
+  "tests/timeout-evidence.test.cjs",
   "tests/todos-workstream-scope.test.cjs",
   "tests/uat-complete-session.test.cjs",
   "tests/ui-auditor-screenshot-block.test.cjs",
@@ -353,17 +312,17 @@ module.exports = {
   "tests/undo-commit-selection.test.cjs",
   "tests/unreachable-guard-drift.test.cjs",
   "tests/unreachable-shell-guard.test.cjs",
-  "tests/unusable-input.test.cjs",
   "tests/update-custom-backup.test.cjs",
   "tests/user-artifact-staging.test.cjs",
   "tests/user-home-isolation-5594.test.cjs",
   "tests/verification-append-audit.test.cjs",
   "tests/verification-status.test.cjs",
-  "tests/verify-archive-dirs-live-path.test.cjs",
   "tests/verify-command-grounding.test.cjs",
   "tests/verify-lifecycle-writes-e2e.test.cjs",
   "tests/verify-work-auto-transition.test.cjs",
   "tests/verify.test.cjs",
+  "tests/vscode-browser-no-node-api.test.cjs",
+  "tests/windows-powershell-hook-runner.test.cjs",
   "tests/windsurf-hooks-bridge.test.cjs",
   "tests/workflow-guard.test.cjs",
   "tests/workflow-shell-pinning.test.cjs",

package/scripts/lib/shellcheck-fetch.cjs

@@ -15,6 +15,14 @@
  * reader (no third-party archive library), and caches the extracted binary
  * for reuse across runs.
  *
+ * The download retries a transient failure (HTTP 408/429/5xx, network error,
+ * request timeout) up to DOWNLOAD_ATTEMPTS times, sleeping DOWNLOAD_BACKOFF_MS
+ * between attempts (#6095). The attempt count and the DOWNLOAD_BACKOFF_MS
+ * sleeps are bounded; total wall time is not bounded by this module, because
+ * DOWNLOAD_TIMEOUT_MS is a per-hop socket idle timeout (a body that keeps
+ * trickling bytes never trips it). The CI job's timeout-minutes is the outer
+ * bound. A non-transient failure (404, too many redirects) fails at once.
+ *
  * Zip-slip defense: unlike `decompress`, which wrote extracted files using
  * PATHS TAKEN FROM THE ARCHIVE (the exact defect class in GHSA-mp2f-45pm-
  * 3cg9 — a malicious archive entry named e.g. `../../etc/passwd` gets
@@ -62,9 +70,18 @@ const MAX_REDIRECTS = 5;
 // SHELLCHECK_TIMEOUT_MS bound on the ShellCheck subprocess. A bare `timeout`
 // option on the request does NOT abort it by itself — Node only emits a
 // 'timeout' event, which must be handled by destroying the request (see the
-// `req.on('timeout', ...)` below).
+// `req.on('timeout', ...)` below). This is a per-hop IDLE timeout (socket
+// inactivity): a stalled hop fails after it, but a body that keeps trickling
+// bytes never trips it. downloadWithRetry bounds the attempt count and the
+// DOWNLOAD_BACKOFF_MS sleeps; total wall time is not bounded by this module
+// (the CI job's timeout-minutes is the outer bound).
 const DOWNLOAD_TIMEOUT_MS = 30_000;
 
+// Total download attempts and the sleeps (ms) between them: a sleep of
+// DOWNLOAD_BACKOFF_MS[i] follows failed attempt i + 1 (#6095).
+const DOWNLOAD_ATTEMPTS = 3;
+const DOWNLOAD_BACKOFF_MS = [2000, 5000];
+
 /**
  * Issue one real HTTPS request. Exists as its own function purely so tests
  * can inject a fake in its place (see `httpsGetFollowingRedirects`'s
@@ -95,7 +112,9 @@ function httpsGetFollowingRedirects(url, redirectsLeft = MAX_REDIRECTS, requestF
         if (status >= 300 && status < 400 && res.headers.location) {
           res.resume(); // drain so the socket can be reused/closed
           if (redirectsLeft <= 0) {
-            reject(new Error(`too many redirects fetching ${url}`));
+            const err = new Error(`too many redirects fetching ${url}`);
+            err.code = 'TOO_MANY_REDIRECTS';
+            reject(err);
             return;
           }
           const next = new URL(res.headers.location, url).toString();
@@ -104,7 +123,9 @@ function httpsGetFollowingRedirects(url, redirectsLeft = MAX_REDIRECTS, requestF
         }
         if (status !== 200) {
           res.resume();
-          reject(new Error(`unexpected HTTP ${status} fetching ${url}`));
+          const err = new Error(`unexpected HTTP ${status} fetching ${url}`);
+          err.status = status;
+          reject(err);
           return;
         }
         const chunks = [];
@@ -124,6 +145,48 @@ function httpsGetFollowingRedirects(url, redirectsLeft = MAX_REDIRECTS, requestF
   });
 }
 
+/**
+ * True when a download failure is worth retrying: HTTP 408, 429 or 5xx, or an
+ * error with no HTTP status (network error, request timeout, socket reset).
+ * False for any other status (e.g. 404, a wrong pinned asset) and for
+ * `too many redirects`, which is deterministic.
+ */
+function isTransientDownloadError(err) {
+  const status = err && err.status;
+  if (typeof status === 'number') {
+    return status === 408 || status === 429 || (status >= 500 && status <= 599);
+  }
+  return !(err && err.code === 'TOO_MANY_REDIRECTS');
+}
+
+/**
+ * GET `url` via `getFn`, retrying a transient failure up to `attempts` times
+ * with `backoffMs[i]` sleeps between attempts. A non-transient error rejects
+ * at once; exhausting the attempts rejects with one Error listing every
+ * attempt. `sleep` and `getFn` are injectable so tests never wait.
+ */
+async function downloadWithRetry(
+  url,
+  {
+    attempts = DOWNLOAD_ATTEMPTS,
+    backoffMs = DOWNLOAD_BACKOFF_MS,
+    sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    getFn = httpsGetFollowingRedirects,
+  } = {},
+) {
+  const failures = [];
+  for (let attempt = 1; attempt <= attempts; attempt++) {
+    try {
+      return await getFn(url);
+    } catch (e) {
+      if (!isTransientDownloadError(e)) throw e;
+      failures.push(`attempt ${attempt}: ${e.message}`);
+      if (attempt < attempts) await sleep(backoffMs[Math.min(attempt - 1, backoffMs.length - 1)]);
+    }
+  }
+  throw new Error(failures.join('; '));
+}
+
 /**
  * Find the entry named (or path-ending-in) `targetName` inside a raw
  * (already gunzipped) POSIX tar byte stream and return its content as a
@@ -204,7 +267,7 @@ async function resolveShellcheckBin() {
 
   let gz;
   try {
-    gz = await httpsGetFollowingRedirects(url);
+    gz = await downloadWithRetry(url);
   } catch (e) {
     throw new ExitError(1, `lint-workflow-shellcheck: failed to download ShellCheck (${url}): ${e.message}`);
   }
@@ -241,7 +304,11 @@ module.exports = {
   CACHED_BIN_PATH,
   MAX_REDIRECTS,
   DOWNLOAD_TIMEOUT_MS,
+  DOWNLOAD_ATTEMPTS,
+  DOWNLOAD_BACKOFF_MS,
   extractFileFromTar,
   httpsGetFollowingRedirects,
+  isTransientDownloadError,
+  downloadWithRetry,
   resolveShellcheckBin,
 };