@opengsd/gsd-core 1.7.0-rc.6 → 1.7.0

package/gsd-core/bin/lib/commands.cjs

@@ -45,6 +45,7 @@ const { extractFrontmatter } = frontmatter;
 const modelProfiles = require("./model-profiles.cjs");
 const { MODEL_PROFILES, VALID_PHASE_TYPES } = modelProfiles;
 const runtime_slash_cjs_1 = require("./runtime-slash.cjs");
+const clock_cjs_1 = require("./clock.cjs");
 // ─── Phase Status ─────────────────────────────────────────────────────────────
 /**
  * Determine phase status by checking plan/summary counts AND verification state.
@@ -592,6 +593,7 @@ function cmdCommit(cwd, message, files, raw, amend, noVerify) {
     // Stage files
     const explicitFiles = files && files.length > 0;
     const filesToStage = explicitFiles ? files : ['.planning/'];
+    const stagedPaths = [];
     for (const file of filesToStage) {
         const fullPath = node_path_1.default.join(cwd, file);
         if (!node_fs_1.default.existsSync(fullPath)) {
@@ -607,12 +609,32 @@ function cmdCommit(cwd, message, files, raw, amend, noVerify) {
         }
         else {
             (0, shell_command_projection_cjs_1.execGit)(['add', file], { cwd });
+            stagedPaths.push(file);
         }
     }
-    // Commit (--no-verify skips pre-commit hooks, used by parallel executor agents)
-    const commitArgs = amend ? ['commit', '--amend', '--no-edit'] : ['commit', '-m', sanitizedMessage];
+    // Commit — when the caller declared a scope (--files), append a pathspec so
+    // only the declared files land in the commit, not the entire index (#2112).
+    // The pathspec uses stagedPaths (not filesToStage) so skipped missing files
+    // are excluded — otherwise git would record them as deletions (#2014).
+    // During a merge, git refuses partial commits — fall back to a bare commit.
+    // --amend is left without a pathspec: amending with -- <paths> is a different
+    // operation that rewrites the tip with only those paths.
+    if (explicitFiles && stagedPaths.length === 0 && !amend) {
+        const result = { committed: false, hash: null, reason: 'nothing_to_commit' };
+        output(result, raw, 'nothing');
+        return;
+    }
+    const isMergeInProgress = (0, shell_command_projection_cjs_1.execGit)(['rev-parse', '-q', '--verify', 'MERGE_HEAD'], { cwd }).exitCode === 0;
+    const canScope = explicitFiles && stagedPaths.length > 0 && !amend
+        && !isMergeInProgress;
+    const commitArgs = amend
+        ? ['commit', '--amend', '--no-edit']
+        : ['commit', '-m', sanitizedMessage];
     if (noVerify)
         commitArgs.push('--no-verify');
+    if (canScope) {
+        commitArgs.push('--', ...stagedPaths);
+    }
     const commitResult = (0, shell_command_projection_cjs_1.execGit)(commitArgs, { cwd });
     if (commitResult.exitCode !== 0) {
         if (commitResult.stdout.includes('nothing to commit') || commitResult.stderr.includes('nothing to commit')) {
@@ -710,12 +732,21 @@ function cmdCommitToSubrepo(cwd, message, files, raw) {
     for (const [repo, repoFiles] of Object.entries(grouped)) {
         const repoCwd = node_path_1.default.join(cwd, repo);
         // Stage files (strip sub-repo prefix for paths relative to that repo)
+        const stagedRelPaths = [];
         for (const file of repoFiles) {
             const relativePath = file.slice(repo.length + 1);
-            (0, shell_command_projection_cjs_1.execGit)(['add', relativePath], { cwd: repoCwd });
+            const addResult = (0, shell_command_projection_cjs_1.execGit)(['add', relativePath], { cwd: repoCwd });
+            if (addResult.exitCode === 0) {
+                stagedRelPaths.push(relativePath);
+            }
         }
-        // Commit
-        const commitResult = (0, shell_command_projection_cjs_1.execGit)(['commit', '-m', message], { cwd: repoCwd });
+        // Commit — pathspec limits the commit to the staged files only (#2112)
+        const isMergeInProgressSub = (0, shell_command_projection_cjs_1.execGit)(['rev-parse', '-q', '--verify', 'MERGE_HEAD'], { cwd: repoCwd }).exitCode === 0;
+        const canScopeSub = stagedRelPaths.length > 0 && !isMergeInProgressSub;
+        const commitArgs = canScopeSub
+            ? ['commit', '-m', message, '--', ...stagedRelPaths]
+            : ['commit', '-m', message];
+        const commitResult = (0, shell_command_projection_cjs_1.execGit)(commitArgs, { cwd: repoCwd });
         if (commitResult.exitCode !== 0) {
             if (commitResult.stdout.includes('nothing to commit') || commitResult.stderr.includes('nothing to commit')) {
                 repos[repo] = { committed: false, hash: null, files: repoFiles, reason: 'nothing_to_commit' };
@@ -837,8 +868,16 @@ function cmdPrSubrepo(cwd, repo, branch, commitMessage, raw) {
             error(`Failed to stage ${file} in ${repo}: ${addResult.stderr}`);
         }
     }
-    // 5. Commit
-    const commitResult = (0, shell_command_projection_cjs_1.execGit)(['commit', '-m', commitMessage], { cwd: repoCwd });
+    // 5. Commit — pathspec limits the commit to the staged files only (#2112).
+    // changedFiles includes both old and new paths for renames so the full
+    // rename is captured atomically (pathspec on newPath alone would leave the
+    // deletion of oldPath stranded in the index).
+    const isMergeInProgressPr = (0, shell_command_projection_cjs_1.execGit)(['rev-parse', '-q', '--verify', 'MERGE_HEAD'], { cwd: repoCwd }).exitCode === 0;
+    const canScopePr = changedFiles.length > 0 && !isMergeInProgressPr;
+    const commitArgs = canScopePr
+        ? ['commit', '-m', commitMessage, '--', ...changedFiles]
+        : ['commit', '-m', commitMessage];
+    const commitResult = (0, shell_command_projection_cjs_1.execGit)(commitArgs, { cwd: repoCwd });
     if (commitResult.exitCode !== 0) {
         rollback();
         error(`Failed to commit in ${repo}: ${commitResult.stderr}`);
@@ -1223,7 +1262,7 @@ function cmdTodoComplete(cwd, filename, raw) {
     (0, shell_command_projection_cjs_1.platformEnsureDir)(completedDir);
     // Read, add completion timestamp, move
     let content = node_fs_1.default.readFileSync(sourcePath, 'utf-8');
-    const today = new Date().toISOString().split('T')[0];
+    const today = clock_cjs_1.realClock.localToday();
     content = `completed: ${today}\n` + content;
     (0, shell_command_projection_cjs_1.platformWriteSync)(node_path_1.default.join(completedDir, filename), content);
     node_fs_1.default.unlinkSync(sourcePath);
@@ -1232,7 +1271,7 @@ function cmdTodoComplete(cwd, filename, raw) {
 function cmdScaffold(cwd, type, options, raw) {
     const { phase, name } = options;
     const padded = phase ? normalizePhaseName(phase) : '00';
-    const today = new Date().toISOString().split('T')[0];
+    const today = clock_cjs_1.realClock.localToday();
     // Find phase directory
     const phaseInfo = phase ? findPhaseInternal(cwd, phase) : null;
     const phaseDir = phaseInfo ? node_path_1.default.join(cwd, phaseInfo['directory']) : null;

package/gsd-core/bin/lib/config-loader.cjs

@@ -158,11 +158,15 @@ const _warnedUnknownConfigKeys = new Set();
 // ─── Git utilities ────────────────────────────────────────────────────────────
 const _gitIgnoredCache = new Map();
 function isGitIgnored(cwd, targetPath) {
-    const key = cwd + '::' + targetPath;
+    // #2206: strip trailing slashes — `git check-ignore` has a quirk where a
+    // CRLF .gitignore with blank lines falsely reports a trailing-slash path
+    // (e.g. `.planning/`) as ignored. Normalizing here protects every call site.
+    const normalized = targetPath.replace(/\/+$/, '');
+    const key = cwd + '::' + normalized;
     if (_gitIgnoredCache.has(key))
         return _gitIgnoredCache.get(key);
     // --no-index checks .gitignore rules regardless of whether the file is tracked.
-    const result = (0, shell_command_projection_cjs_1.execGit)(['check-ignore', '-q', '--no-index', '--', targetPath], { cwd });
+    const result = (0, shell_command_projection_cjs_1.execGit)(['check-ignore', '-q', '--no-index', '--', normalized], { cwd });
     const ignored = result.exitCode === 0;
     _gitIgnoredCache.set(key, ignored);
     return ignored;

package/gsd-core/bin/lib/config.cjs

@@ -692,6 +692,18 @@ function cmdConfigSet(cwd, keyPath, value, raw) {
     const VALID_CONTEXT_POSITIONS = ['front', 'end'];
     if (kp === 'statusline.context_position')
         assertEnumValue(parsedValue, val, VALID_CONTEXT_POSITIONS, 'statusline.context_position');
+    // statusline.show_context_tokens — boolean only
+    if (kp === 'statusline.show_context_tokens') {
+        if (typeof parsedValue !== 'boolean') {
+            error(`Invalid statusline.show_context_tokens '${val}'. Must be a boolean (true or false).`);
+        }
+    }
+    // statusline.show_git — boolean only
+    if (kp === 'statusline.show_git') {
+        if (typeof parsedValue !== 'boolean') {
+            error(`Invalid statusline.show_git '${val}'. Must be a boolean (true or false).`);
+        }
+    }
     // Fallow scope + profile enum validation (#3424)
     const VALID_FALLOW_SCOPES = ['phase', 'repo'];
     if (kp === 'code_quality.fallow.scope')

package/gsd-core/bin/lib/core-utils.cjs

@@ -27,10 +27,16 @@ const { comparePhaseNum } = phaseIdModule;
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const planningWorkspace = require("./planning-workspace.cjs");
 const { findContextMdIn } = planningWorkspace;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const shellCommandProjection = require("./shell-command-projection.cjs");
 // ─── Path helpers ────────────────────────────────────────────────────────────
-/** Normalize a relative path to always use forward slashes (cross-platform). */
+/**
+ * Normalize a relative path to always use forward slashes (cross-platform).
+ * Delegates to the single separator seam in shell-command-projection so there is
+ * exactly one implementation of native→POSIX conversion across the codebase.
+ */
 function toPosixPath(p) {
-    return p.split(node_path_1.default.sep).join('/');
+    return shellCommandProjection.toPosixPath(p);
 }
 /**
  * Scan immediate child directories for separate git repos.

package/gsd-core/bin/lib/drift.cjs

@@ -69,7 +69,7 @@ const SAFE_PATH_RE = /^(?!.*\.\.)(?:[A-Za-z0-9_.][A-Za-z0-9_.\-]*)(?:\/[A-Za-z0-
 function classifyFile(file) {
     if (typeof file !== 'string' || !file)
         return null;
-    const norm = file.replace(/\\/g, '/');
+    const norm = (0, shell_command_projection_cjs_1.posixNormalize)(file);
     if (MIGRATION_RES.some((r) => r.test(norm)))
         return 'migration';
     if (ROUTE_RES.some((r) => r.test(norm)))
@@ -87,7 +87,7 @@ function classifyFile(file) {
  * check `structureMd.includes('src/lib')` holds.
  */
 function isPathMapped(file, structureMd) {
-    const norm = file.replace(/\\/g, '/');
+    const norm = (0, shell_command_projection_cjs_1.posixNormalize)(file);
     const parts = norm.split('/');
     // Check prefixes from longest to shortest; any hit means "mapped".
     for (let i = parts.length - 1; i >= 1; i--) {
@@ -130,7 +130,7 @@ function detectDrift(input) {
         const elements = [];
         const seen = new Map();
         for (const rawFile of added) {
-            const file = rawFile.replace(/\\/g, '/');
+            const file = (0, shell_command_projection_cjs_1.posixNormalize)(rawFile);
             const specific = classifyFile(file);
             let category = specific;
             if (!category) {
@@ -251,7 +251,7 @@ function chooseAffectedPaths(paths) {
     for (const raw of paths || []) {
         if (typeof raw !== 'string' || !raw)
             continue;
-        const file = raw.replace(/\\/g, '/');
+        const file = (0, shell_command_projection_cjs_1.posixNormalize)(raw);
         const parts = file.split('/');
         if (parts.length === 0)
             continue;

package/gsd-core/bin/lib/frontmatter.cjs

@@ -522,6 +522,27 @@ const FRONTMATTER_SCHEMAS = {
     summary: { required: ['phase', 'plan', 'subsystem', 'tags', 'duration', 'completed'] },
     verification: { required: ['phase', 'verified', 'status', 'score'] },
 };
+/**
+ * Strip ALL frontmatter blocks from the start of `content`.
+ *
+ * Handles CRLF line endings and multiple stacked blocks (corruption
+ * recovery): greedily strips consecutive `---...---` blocks separated by
+ * optional whitespace, so a doubled/tripled frontmatter header (e.g. from a
+ * botched merge) is fully removed, not just the first block.
+ *
+ * Canonical home for this primitive (#2143 audit dedup): previously
+ * duplicated byte-identically in both `state.cts` and `state-transition.cts`.
+ */
+function stripFrontmatter(content) {
+    let result = content;
+    while (true) {
+        const stripped = result.replace(/^\s*---\r?\n[\s\S]*?\r?\n---\s*/, '');
+        if (stripped === result)
+            break;
+        result = stripped;
+    }
+    return result;
+}
 function cmdFrontmatterGet(cwd, filePath, field, raw) {
     if (!filePath) {
         error('file path required');
@@ -654,6 +675,7 @@ module.exports = {
     parseFrontmatter: extractFrontmatter,
     reconstructFrontmatter,
     spliceFrontmatter,
+    stripFrontmatter,
     noOpObjectListSetError,
     parseMustHavesBlock,
     FRONTMATTER_SCHEMAS,

package/gsd-core/bin/lib/gsd2-import.cjs

@@ -26,6 +26,7 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const shell_command_projection_cjs_1 = require("./shell-command-projection.cjs");
 const runtime_slash_cjs_1 = require("./runtime-slash.cjs");
+const clock_cjs_1 = require("./clock.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const ioMod = require("./io.cjs");
 const { output } = ioMod;
@@ -276,7 +277,7 @@ function buildStateMd(phaseMap) {
     const status = currentEntry ? 'Ready to plan' : 'All phases complete';
     const filled = Math.round(pct / 10);
     const bar = `[${'█'.repeat(filled)}${'░'.repeat(10 - filled)}]`;
-    const today = new Date().toISOString().split('T')[0];
+    const today = clock_cjs_1.realClock.localToday();
     return [
         '# Project State',
         '',

package/gsd-core/bin/lib/init.cjs

@@ -13,6 +13,7 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_os_1 = __importDefault(require("node:os"));
 const shell_command_projection_cjs_1 = require("./shell-command-projection.cjs");
+const clock_cjs_1 = require("./clock.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports -- io.cjs is an export= CommonJS module
 const io = require("./io.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports -- config-loader.cjs is an export= CommonJS module
@@ -203,7 +204,7 @@ function getInitGitState(cwd) {
         }
         resolved = node_path_1.default.resolve(resolved);
         if (process.platform === 'win32') {
-            return resolved.replace(/\//g, '\\').toLowerCase();
+            return (0, shell_command_projection_cjs_1.toNativePath)(resolved).toLowerCase();
         }
         return resolved;
     };
@@ -213,7 +214,7 @@ function getInitGitState(cwd) {
         try {
             const prefixResult = (0, shell_command_projection_cjs_1.execGit)(['rev-parse', '--show-prefix'], { cwd, timeout: 5000 });
             if (prefixResult['exitCode'] === 0) {
-                const prefix = (typeof prefixResult['stdout'] === 'string' ? prefixResult['stdout'] : '').trim().replace(/\\/g, '/');
+                const prefix = (0, shell_command_projection_cjs_1.posixNormalize)((typeof prefixResult['stdout'] === 'string' ? prefixResult['stdout'] : '').trim());
                 inNestedSubdir = prefix.length > 0 && prefix !== '.' && prefix !== './';
                 resolvedByGitPrefix = true;
             }
@@ -230,7 +231,7 @@ function getInitGitState(cwd) {
                 }
                 else {
                     const rel = node_path_1.default.relative(rootNorm, cwdNorm);
-                    const relNorm = process.platform === 'win32' ? rel.replace(/\//g, '\\') : rel;
+                    const relNorm = (0, shell_command_projection_cjs_1.toNativePath)(rel);
                     inNestedSubdir =
                         relNorm !== '' &&
                             relNorm !== '.' &&
@@ -244,7 +245,7 @@ function getInitGitState(cwd) {
         }
     }
     if (inNestedSubdir && typeof worktreeRoot === 'string') {
-        const toComparableRaw = (p) => p.replace(/\\/g, '/').replace(/\/+$/g, '').toLowerCase();
+        const toComparableRaw = (p) => (0, shell_command_projection_cjs_1.posixNormalize)(p).replace(/\/+$/g, '').toLowerCase();
         if (toComparableRaw(worktreeRoot) === toComparableRaw(String(cwd))) {
             inNestedSubdir = false;
         }
@@ -613,8 +614,8 @@ function cmdInitQuick(cwd, description, raw) {
         quick_id: quickId,
         slug: slug,
         description: description || null,
-        date: now.toISOString().split('T')[0],
-        timestamp: now.toISOString(),
+        date: clock_cjs_1.realClock.localToday(),
+        timestamp: clock_cjs_1.realClock.nowIso(),
         quick_dir: '.planning/quick',
         task_dir: slug ? `.planning/quick/${quickId}-${slug}` : null,
         roadmap_exists: node_fs_1.default.existsSync(node_path_1.default.join(planningDir(cwd), 'ROADMAP.md')),
@@ -730,6 +731,21 @@ function cmdInitVerifyWork(cwd, phase, raw) {
 function cmdInitPhaseOp(cwd, phase, raw) {
     const config = loadConfig(cwd);
     let phaseInfo = guardedFindPhase(cwd, phase, config.project_code);
+    // #2237: surface ambiguous phase-directory collisions instead of silently
+    // taking the first match when unrelated projects share a .planning/phases/ tree.
+    if (phaseInfo?.['ambiguous_matches']) {
+        const matches = phaseInfo['ambiguous_matches'];
+        const result = {
+            phase_found: false,
+            phase_dir: null,
+            phase_number: null,
+            phase_name: null,
+            ambiguous_matches: matches,
+            warning: `Phase ${phase} is ambiguous: ${matches.length} directories match (${matches.map((m) => `"${m}"`).join(', ')}). Set a distinct project_code in .planning/config.json to scope resolution.`,
+        };
+        output(withProjectRoot(cwd, result), raw);
+        return;
+    }
     if (phaseInfo?.['archived']) {
         const roadmapPhase = guardedGetRoadmapPhase(cwd, phase, config.project_code);
         if (roadmapPhase?.['found']) {
@@ -849,7 +865,6 @@ function cmdInitPhaseOp(cwd, phase, raw) {
 }
 function cmdInitTodos(cwd, area, raw) {
     const config = loadConfig(cwd);
-    const now = new Date();
     const pendingDir = node_path_1.default.join(planningDir(cwd), 'todos', 'pending');
     let count = 0;
     const todos = [];
@@ -885,8 +900,8 @@ function cmdInitTodos(cwd, area, raw) {
     }
     const result = {
         commit_docs: config.commit_docs,
-        date: now.toISOString().split('T')[0],
-        timestamp: now.toISOString(),
+        date: clock_cjs_1.realClock.localToday(),
+        timestamp: clock_cjs_1.realClock.nowIso(),
         todo_count: count,
         todos,
         area_filter: area || null,
@@ -1007,7 +1022,6 @@ function cmdInitMilestoneOp(cwd, raw) {
 }
 function cmdInitMapCodebase(cwd, raw) {
     const config = loadConfig(cwd);
-    const now = new Date();
     const codebaseDir = node_path_1.default.join(planningRoot(cwd), 'codebase');
     let existingMaps = [];
     try {
@@ -1022,8 +1036,8 @@ function cmdInitMapCodebase(cwd, raw) {
         search_gitignored: config.search_gitignored,
         parallelization: config.parallelization,
         subagent_timeout: config.subagent_timeout,
-        date: now.toISOString().split('T')[0],
-        timestamp: now.toISOString(),
+        date: clock_cjs_1.realClock.localToday(),
+        timestamp: clock_cjs_1.realClock.nowIso(),
         codebase_dir: '.planning/codebase',
         existing_maps: existingMaps,
         has_maps: existingMaps.length > 0,
@@ -1763,7 +1777,7 @@ function buildAgentSkillsBlock(config, agentType, projectRoot, diagnostics) {
         if (entry.kind === 'directive') {
             return `- Load the \`${entry.name}\` skill via the Skill tool before proceeding (plugin-provided).`;
         }
-        return `- @${String(entry.ref).replace(/\\/g, '/')}`;
+        return `- @${(0, shell_command_projection_cjs_1.posixNormalize)(String(entry.ref))}`;
     }).join('\n');
     return `<agent_skills>\nRead these user-configured skills:\n${lines}\n</agent_skills>`;
 }

package/gsd-core/bin/lib/install-engine.cjs

@@ -27,6 +27,7 @@ const runtimeArtifactLayout = require("./runtime-artifact-layout.cjs");
 const runtimeArtifactInstallPlan = require("./runtime-artifact-install-plan.cjs");
 const runtimeNamePolicy = require("./runtime-name-policy.cjs");
 const installProfiles = require("./install-profiles.cjs");
+const shell_command_projection_cjs_1 = require("./shell-command-projection.cjs");
 const { processAttribution } = runtimeArtifactConversion;
 // resolveRuntimeArtifactLayout: accessed via module ref (not destructured) so
 // test stubs that monkeypatch the module's exports are seen at call time.
@@ -883,8 +884,8 @@ function installOpencodeFamilyArtifacts(runtime, configDir, scope, resolvedProfi
         isGlobal,
         isOpencode: behaviors.skipHomePrefixSubstitution === true,
         isWindowsHost: process.platform === 'win32',
-        resolvedTarget: node_path_1.default.resolve(configDir).replace(/\\/g, '/'),
-        homeDir: node_os_1.default.homedir().replace(/\\/g, '/'),
+        resolvedTarget: (0, shell_command_projection_cjs_1.posixNormalize)(node_path_1.default.resolve(configDir)),
+        homeDir: (0, shell_command_projection_cjs_1.posixNormalize)(node_os_1.default.homedir()),
     });
     const commandDir = runtimeArtifactInstallPlan.assertDestWithinConfigHome(configDir, 'command');
     installOpencodeFamilyCommands(runtime, commandDir, rawCommandsDir, pathPrefix, resolveAttribution);

package/gsd-core/bin/lib/installer-migration-authoring.cjs

@@ -14,6 +14,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateInstallerMigrationRecord = validateInstallerMigrationRecord;
 exports.validateInstallerMigrationActions = validateInstallerMigrationActions;
 const node_path_1 = __importDefault(require("node:path"));
+const shell_command_projection_cjs_1 = require("./shell-command-projection.cjs");
 function getStr(record, field) {
     const v = record[field];
     return typeof v === 'string' ? v : '';
@@ -56,7 +57,7 @@ function requireActionEvidence(action, field, migration) {
 }
 function validateSafeRelPath(relPath, migration, actionType) {
     const source = actionSource(migration, { relPath });
-    const normalized = relPath.replace(/\\/g, '/');
+    const normalized = (0, shell_command_projection_cjs_1.posixNormalize)(relPath);
     if (node_path_1.default.isAbsolute(normalized) || node_path_1.default.win32.isAbsolute(normalized)) {
         throw new Error(`migration action ${actionType} relPath must stay inside configDir: ${source}`);
     }

package/gsd-core/bin/lib/installer-migrations.cjs

@@ -118,7 +118,7 @@ function normalizeRelPath(relPath) {
     if (typeof relPath !== 'string' || relPath.trim() === '') {
         throw new Error('migration action relPath must be a non-empty string');
     }
-    const normalized = relPath.replace(/\\/g, '/');
+    const normalized = (0, shell_command_projection_cjs_1.posixNormalize)(relPath);
     if (node_path_1.default.isAbsolute(normalized) || node_path_1.default.win32.isAbsolute(normalized)) {
         throw new Error(`migration action relPath must stay inside configDir: ${relPath}`);
     }