@tekyzinc/gsd-t 3.29.10 → 4.0.12

package/CHANGELOG.md

@@ -2,6 +2,182 @@
 
 All notable changes to GSD-T are documented here. Updated with each release.
 
+## [4.0.12] - 2026-05-29
+
+### Removed — M61-carryover test cleanup (green the suite)
+
+The SC7 cockpit walkthrough surfaced ~23 unit + ~19 E2E pre-existing failures, all tests asserting conventions or files that M61 intentionally retired (command→Workflow conversion removed the marker/wire-in blocks; D4 retired the viewer/dashboard). Delete-with-subject cleanup — no behavior change.
+
+- Removed wire-in/marker tests: `m56-d3-wire-in`, `m56-d4-wire-in`, `m55-d5-wire-in-{execute,verify}`, `m56-d5-stream-json-gap-closures` (the last required D3-deleted `gsd-t-capture-lint.cjs`).
+- Removed 8 viewer/transcript unit tests + 3 journey-coverage staging tests coupled to the deleted viewer HTML.
+- Removed orphaned E2E specs: all 6 `e2e/viewer/*`, 13 viewer-dependent `e2e/journeys/*`, `main-session-stream`, all 4 `e2e/live-journeys/*`. Kept the 3 `verify-gate-blocks-*` journeys (verify-gate is KEEP).
+- Deleted `scripts/gsd-t-transcript.html` (96KB retired D4 viewer); pruned `.gsd-t/journey-manifest.json` 19→3 specs; generalized `bin/journey-coverage.cjs` `VIEWER_FILE_PATTERNS` to `scripts/*.html`; cleaned 2 pre-commit hooks.
+- `test/stack-rules.test.js`: dropped per-command-file Detection-block assertions (kept engine + QA-protocol checks). `test/filesystem.test.js`: command counts 55→51 / 49→45 (D2 retired 4 commands).
+
+Suite now 1267 pass / 1 known flake (`verifyPlaywrightHealth` — passes 20/0 isolated; suite-contention subprocess timeout) / 3 sqlite-skip. E2E 3 pass. journey-coverage clean. bin/ unchanged at 20,271 LOC.
+
+## [4.0.11] - 2026-05-29 (M65 Orchestration-Shell Retirement — patch)
+
+Completes the M61 D6 deferral: deletes the M40/M44 orchestration shell that the native Workflow scripts replaced. Scope was corrected from the raw brief after a live reference scan proved `parallel-cli*` and `gsd-t-parallel.cjs` are KEEP-list substrate (verify-gate Track-2 + the `_lib` file-disjointness prover), not retireable shell — they were retained.
+
+### Removed (bin/, −1,780 LOC: 22,051 → 20,271)
+
+| File(s) | Native replacement |
+|---------|--------------------|
+| `bin/gsd-t-orchestrator.js` + `-worker.cjs` + `-queue.cjs` + `-config.cjs` | `templates/workflows/gsd-t-execute.workflow.js` |
+| `bin/spawn-plan-{writer,status-updater,derive}.cjs` + `scripts/spawn-plan-fmt-tokens.cjs` | Native `/workflows` progress + Agent View |
+| `bin/headless-exit-codes.cjs` | `mapHeadlessExitCode` inlined into `bin/gsd-t.js` (5-code contract + M45 boundary-anchored regexes verbatim) |
+| `scripts/gsd-t-post-commit-spawn-plan.sh` + `templates/hooks/post-commit-spawn-plan.sh` | — (spawn-plan panel retired with the M61-D4 viewer) |
+
+### Removed CLI subcommands
+- `gsd-t orchestrate` — superseded by `gsd-t-execute.workflow.js`.
+
+### Removed tests (delete-with-subject)
+- `test/m40-orchestrator-{config,queue,worker}.test.js`, `test/m44-d8-{spawn-plan-writer,spawn-plan-status-updater,post-commit-hook}.test.js` (each tested only a co-deleted module).
+
+### Changed
+- `bin/gsd-t-parallel.cjs` — inlined `computeInSessionHeadroom`/`computeUnattendedGate`/`DEFAULT_SUMMARY_SIZE_PCT` (wave-join-contract §Mode-Aware Gating Math, constants 85/60/4) off the deleted orchestrator-config; refreshed stale header.
+- `bin/gsd-t.js` — purged 10 stale `PROJECT_BIN_TOOLS` entries pointing at M61-deleted files (would have broken `update-all`).
+- `commands/gsd-t-help.md` — removed spawn-plan/parallelism panel bullets (referenced deleted hook + retired dashboard).
+- `commands/gsd-t-resume.md` — removed dead Step 0.3 "Orchestrator Run Recovery" section.
+
+### Deferred (NOT in M65)
+- `bin/orchestrator.js` + `bin/design-orchestrator.js` — the design-build pipeline orchestrator; `gsd-t design-build` is documented but has no live dispatch case (unwired). Wire-back-or-retire is a separate decision.
+
+### Verification
+- Red Team (opus): GRUDGING PASS — 0 CRITICAL/HIGH, both inlines byte-faithful (25-case adversarial corpus → 100% parity vs parent sources).
+- QA (sonnet): PASS — zero M65-caused failures; −66 test-count drop fully accounted by the 6 deleted files.
+- `/code-review ultra`: skipped (pure deletion + verbatim inlines, covered by RT+QA).
+- `gsd-t doctor` clean; `gsd-t build-coverage` PASS; `gsd-t parallel --dry-run` exit 0 (KEEP-canary).
+- Verdict **VERIFIED-WITH-WARNINGS**: the verify-gate/ci-parity reds are 100% inherited M61 D1–D8 carryover (23 broken unit tests + ~18 orphaned viewer E2E specs importing the M61-D4-deleted `gsd-t-dashboard-server.js`), proven against parent commit `5a5c6c0^` (1427 pass / 22 fail). M65 introduced zero regressions. Carryover flagged for a dedicated M61-cleanup milestone.
+
+## [4.0.10] - 2026-05-29 (M61 Platform Reconciliation — major)
+
+### BREAKING CHANGES
+
+GSD-T v4.0.10 retires ~18,000 LOC of orchestration infrastructure built across M34–M55 to compensate for limitations Claude Code has since absorbed natively (1M context window, native background Workflows with `parallel()`/`pipeline()`/`budget`/schema-validation, `/usage`, `/context`, `/workflows`, comprehensive hooks, `/code-review ultra`).
+
+The v3.x source is preserved on the `v3.x-legacy` git branch as a safety net. `npm install @tekyzinc/gsd-t@3.x` continues to work.
+
+#### Removed CLI subcommands
+
+| Subcommand | Replacement |
+|------------|-------------|
+| `gsd-t unattended` (+ `-watch`, `-stop`) | Native background Workflows + `/loop` skill |
+| `gsd-t backfill-tokens` | None — historical analysis was never load-bearing |
+| `gsd-t capture-lint` | None — the OBSERVABILITY block convention itself is retired |
+| `gsd-t tool-cost` | OpenTelemetry exports (Enterprise) or `/usage` aggregate |
+| `gsd-t report tokens` | `/usage` |
+| `gsd-t stream-feed` | `/workflows` + Agent View |
+| `gsd-t benchmark-orchestrator` | None — operator-run benchmark driver |
+
+#### Removed slash commands
+
+| Command | Replacement |
+|---------|-------------|
+| `/gsd-t-unattended`, `/gsd-t-unattended-watch`, `/gsd-t-unattended-stop` | Native background Workflows |
+| `/gsd-t-visualize` | `/workflows` |
+
+#### Removed CLAUDE.md rules
+
+| Rule (global + project) | Replacement |
+|------------------------|-------------|
+| **Observability Logging (MANDATORY)** | Workflow `budget` global + native `/usage` |
+| **Token Capture Rule (MANDATORY)** | Same |
+| **In-Session Conversation Capture (M45 D2)** | Native session transcript + `/workflows` view |
+| **Always-Headless Spawn (M43 D4) — Channel Separation** | Native Workflows are inherently background |
+| **Context Meter (M34/M38)** | Native `/context` + Workflow `budget.remaining()` |
+| **Mandatory Preflight Before Spawn (M55)** | REWRITTEN as Preflight Gate — invoked inside Workflow scripts via `_lib.runPreflight()` |
+| **Brief-First Worker Rule (M55)** | REWRITTEN — invoked inside Workflow `agent()` calls; per-domain briefs generated inside `parallel()` map |
+| **Two-Track Verify-Gate (M55)** | REWRITTEN as a stage inside `gsd-t-verify.workflow.js`, now followed by M57 CI-parity + M58 test-data purge + orthogonal validation triad |
+
+#### Removed contracts
+
+`headless-contract.md`, `headless-default-contract.md`, `context-meter-contract.md`, `dashboard-server-contract.md`, `conversation-capture-contract.md`, `live-activity-contract.md`, `parallelism-report-contract.md`, `compaction-events-contract.md`, `event-schema-contract.md`, `economics-estimator-contract.md`, `metrics-schema-contract.md`.
+
+#### Added contracts
+
+- **`orthogonal-validation-contract.md` v1.0.0 STABLE** — locks `/code-review ultra` + Red Team + QA as orthogonal objective functions. No collapse, no substitution, no transitive trust. `skipUltra=true` is INELIGIBLE for `VERIFIED`.
+
+#### Added files
+
+- **`templates/workflows/_lib.js`** — shared Workflow helpers (`runPreflight`, `generateBrief`, `proveFileDisjointness`, `runVerifyGate`, `loadProtocol`, `readDomainTasks`, `readScope`). Prefers project-local `bin/<tool>.cjs` with PATH fallback.
+- **`templates/workflows/gsd-t-execute.workflow.js`** — canonical execute phase as native Workflow.
+- **`templates/workflows/gsd-t-verify.workflow.js`** — verify phase with M57 + M58 gates + orthogonal triad.
+- **`templates/workflows/gsd-t-wave.workflow.js`** — composes execute + verify.
+- **`templates/workflows/gsd-t-integrate.workflow.js`**, **`-debug`**, **`-quick`**, **`-phase`** (generic upper-stage runner).
+
+#### Reframed validation protocols
+
+`templates/prompts/{qa,red-team,design-verify}-subagent.md` methodology bodies unchanged. Only the invocation-context preamble updated: when invoked as a Workflow `agent()` stage, final emission is a StructuredOutput JSON envelope matching the schema; when invoked as a Task subagent (legacy path), final emission is the markdown report. Same methodology; different envelope.
+
+Red Team verdict string canonicalized: `GRUDGING PASS` → `GRUDGING-PASS` across schema enum, protocol body, global rule, and 3 command files.
+
+#### Command file conversions
+
+All 12 GSD-T command files converted from prose-orchestrator scaffolding (~6,000 lines total) to thin Workflow invokers (~700 lines total):
+- `execute` (984 → 67), `verify` (595 → 78), `wave` (454 → 65), `integrate` (394 → 69), `debug` (558 → 72), `quick` (legacy preserved → minimal), `partition` (560 → 49), `plan` (491 → 45), `impact` (314 → 45), `milestone` (143 → 44), `prd` (330 → 44), `design-decompose` (517 → 44), `doc-ripple` (156 → 40).
+
+Each command file now describes WHAT (its phase's purpose) and invokes its corresponding Workflow script with explicit `args` shape.
+
+#### Migration guide
+
+| If you were using… | …now use this |
+|--------------------|---------------|
+| `gsd-t-unattended` for cross-session orchestration | Native background Workflows + `/loop` for recurring tasks |
+| `gsd-t backfill-tokens` for historical cost analysis | OpenTelemetry exports (Enterprise) |
+| `captureSpawn`/`recordSpawnRow` wrappers in your own scripts | Workflow `budget.spent()` / `/usage` |
+| `gsd-t stream-feed` watching dashboard | `/workflows` + Agent View |
+| Custom orchestrator code on top of `gsd-t-orchestrator.js` | Write a Workflow script in `templates/workflows/` style |
+| Editing `commands/gsd-t-*.md` to add steps | Edit the corresponding `templates/workflows/*.workflow.js` |
+
+If you cannot migrate immediately, pin `"@tekyzinc/gsd-t": "3.x"` in package.json. v3.x is preserved on the `v3.x-legacy` git branch.
+
+### Verification
+
+- Baseline locked at v3.29.11: bin/ = 37,785 LOC / 109 files.
+- Post-M61: bin/ = 19,855 LOC / 78 files. Reduction: -17,930 LOC (47% of bin/ retired; 70% of way to SC1 target ≤12,000).
+- Full unit suite: 41 failures remain post-Wave-3. 100% are command-file format tests (M56-D3 markers, Stack Rules, preflight wire-in blocks, OBSERVABILITY LOGGING tests, `shim_one_liner_*`) for the legacy command-file shape the Workflow conversions explicitly replace, + command-count tests for retired subcommands. Zero new behavior regressions.
+- 4.8 audit (fresh-context Opus 4.8 review Workflow) returned `agree-with-edits` on all 8 artifact groups: core architecture sound, no revert needed.
+- Retire→native map archived under `.gsd-t/milestones/m61-platform-reconciliation-2026-05-29/retire-to-native-map.md`.
+
+### Deferred to follow-up milestones
+
+- **M62 (post-M61): Cross-project propagation** — run `gsd-t version-update-all` to propagate v4.0.10 to all registered projects (rewrite their CLAUDE.md + retire docs; cleanup `~/.claude/settings.json` hooks for retired infrastructure).
+- **SC7 cockpit walkthrough** — scripted desktop-only walkthrough of a small post-M61 backlog item (zero terminal keystrokes). User-driven.
+- **D6 port-then-delete completion** — `bin/gsd-t-orchestrator.js`, `gsd-t-orchestrator-{worker,queue,config}.cjs`, `gsd-t-parallel.cjs`, `parallel-cli.cjs`, `spawn-plan-writer.cjs` are stubbed to load cleanly post-D2/D4 but await final deletion after a real M58 reproduction via the Workflow scripts validates the migration. Expected ~6,000 LOC additional reduction.
+- **Deeper SC7 walkthrough on a UI-heavy milestone** — broader test of desktop's browser-tooling advantage.
+
+## [3.29.11] - 2026-05-29 09:57 PDT
+
+### Fixed — CRITICAL test-data adapter data-destruction bug (M60)
+
+Found by a native-Workflow Red Team bake-off (Opus 4.8, perspective-diverse
+adversarial review) while evaluating GSD-T against native Claude Code 4.8
+capability. M58's own in-session Red Team had passed this as "6/6 defended"
+— the claim was wrong.
+
+- **Bug**: `bin/gsd-t-test-data-adapters/file-json-array.cjs` and
+  `localstorage-key-prefix.cjs` guarded with
+  `typeof taggedPrefix === 'string' && taggedPrefix.length > 0 && !id.startsWith(...)`.
+  An empty/undefined `taggedPrefix` short-circuits the whole condition, so
+  **no guard runs** — `gsd-t test-data --purge` would delete untagged
+  production records and report `errors:0` (gate GREEN). No adapter enforced
+  `projectDir` containment on the `store` path, making it a write-anywhere
+  delete primitive. Reproduced live before fixing.
+- **Fix** (additive refusal only — removes capability, never adds destructive
+  behavior): both adapters now hard-refuse empty/undefined `taggedPrefix`
+  (matching the already-correct `sqlite-table-where` adapter); `file-json-array`
+  and `sqlite-table-where` enforce the containment predicate
+  `resolved.startsWith(root + sep) && resolved !== root` when `projectDir` is
+  supplied; `purgeRunInserts` threads `projectDir` into every adapter call.
+- **Tests**: new `test/m60-redteam-regressions.test.js` (10 tests, one per
+  finding + happy-path + back-compat). M58 suite 44/44 unchanged.
+- **Contract**: `test-data-tagging-contract.md` → v1.1.0 STABLE (empty-prefix
+  refusal + path containment now normative).
+- Backward-compatible: the happy path (non-empty prefix, in-project path, or
+  no `projectDir`) is unchanged.
+
 ## [3.29.10] - 2026-05-27 10:09 PDT
 
 ### Changed — Timestamp precision in progress.md (forward-only)

package/bin/gsd-t-parallel.cjs

@@ -10,14 +10,15 @@
  *   - D1 task graph           (bin/gsd-t-task-graph.cjs)
  *   - D4 depgraph validation  (bin/gsd-t-depgraph-validate.cjs)
  *   - D5 file-disjointness    (bin/gsd-t-file-disjointness.cjs)
- *   - D6 economics estimator  (bin/gsd-t-economics.cjs)
- *   - token-budget            (bin/token-budget.cjs) — in-session ctxPct
- *   - mode-aware gating math  (bin/gsd-t-orchestrator-config.cjs)
+ *   - mode-aware gating math  (inlined below — formerly bin/gsd-t-orchestrator-config.cjs)
  *
- * Does NOT replace `bin/gsd-t-orchestrator.js`. `runParallel` prepares the
- * validated ready-task set and plan; the existing orchestrator machinery
- * owns the actual worker spawn. In T2 this module emits the plan;
- * the downstream orchestrator consumes it.
+ * M61/M65 note: the economics estimator (gsd-t-economics.cjs), token-budget,
+ * and the M40 orchestrator (bin/gsd-t-orchestrator.js) were retired — the
+ * orchestration core moved to native Workflow scripts (templates/workflows/).
+ * This module survives as the file-disjointness/ready-task planner consumed by
+ * `_lib.proveFileDisjointness()`; its mode-aware gating helpers, which used to
+ * live in gsd-t-orchestrator-config.cjs, are inlined below (M65) so this file
+ * no longer depends on the retired orchestrator config.
  *
  * Contract: `.gsd-t/contracts/wave-join-contract.md` v1.1.0 (§Mode-Aware Gating Math).
  *
@@ -35,11 +36,61 @@ const path = require("node:path");
 const { buildTaskGraph, getReadyTasks } = require(path.join(__dirname, "gsd-t-task-graph.cjs"));
 const { validateDepGraph } = require(path.join(__dirname, "gsd-t-depgraph-validate.cjs"));
 const { proveDisjointness } = require(path.join(__dirname, "gsd-t-file-disjointness.cjs"));
-const { estimateTaskFootprint } = require(path.join(__dirname, "gsd-t-economics.cjs"));
-const {
-  computeInSessionHeadroom,
-  computeUnattendedGate,
-} = require(path.join(__dirname, "gsd-t-orchestrator-config.cjs"));
+// M61 D3: gsd-t-economics retired. estimateTaskFootprint produced a per-task
+// token+cost estimate the planner could consult for in-session-headroom
+// math. Native budget primitives (Workflow `budget` + /usage) replace it.
+// Stub to a zero-footprint estimate so the planner proceeds with default
+// assumptions instead of crashing.
+const estimateTaskFootprint = () => ({
+  inputTokens: 0, outputTokens: 0, costUSD: 0, source: "m61-stub",
+});
+
+// ─── Mode-aware gating math (inlined from gsd-t-orchestrator-config.cjs, M65) ──
+// Contract: `.gsd-t/contracts/wave-join-contract.md` v1.1.0 §Mode-Aware Gating Math.
+const IN_SESSION_CW_CEILING_PCT = 85;
+const UNATTENDED_PER_WORKER_CW_PCT = 60;
+const DEFAULT_SUMMARY_SIZE_PCT = 4;
+
+/**
+ * [in-session] headroom gate. Returns `{ok, reducedCount}`.
+ *   ok=true iff `ctxPct + workerCount * summarySize ≤ IN_SESSION_CW_CEILING_PCT`.
+ *   Otherwise reduces N repeatedly; final floor is N=1. NEVER refuses.
+ */
+function computeInSessionHeadroom(opts) {
+  const o = opts || {};
+  const ctxPct = Number.isFinite(o.ctxPct) ? o.ctxPct : 0;
+  const requested = Number.isFinite(o.workerCount) ? Math.max(0, Math.floor(o.workerCount)) : 0;
+  const summarySize = Number.isFinite(o.summarySize) ? o.summarySize : DEFAULT_SUMMARY_SIZE_PCT;
+  const ceiling = IN_SESSION_CW_CEILING_PCT;
+
+  if (ctxPct + requested * summarySize <= ceiling) {
+    return { ok: true, reducedCount: requested };
+  }
+  let n = requested - 1;
+  while (n > 1) {
+    if (ctxPct + n * summarySize <= ceiling) {
+      return { ok: true, reducedCount: n };
+    }
+    n -= 1;
+  }
+  return { ok: true, reducedCount: 1 };
+}
+
+/**
+ * [unattended] per-worker CW gate. Returns `{ok, split}`.
+ *   ok=true, split=false if `estimatedCwPct ≤ threshold` (default 60).
+ *   ok=false, split=true otherwise — caller MUST slice the task into multiple
+ *   iters (this function only signals the split requirement).
+ */
+function computeUnattendedGate(opts) {
+  const o = opts || {};
+  const estimatedCwPct = Number.isFinite(o.estimatedCwPct) ? o.estimatedCwPct : 0;
+  const threshold = Number.isFinite(o.threshold) ? o.threshold : UNATTENDED_PER_WORKER_CW_PCT;
+  if (estimatedCwPct > threshold) {
+    return { ok: false, split: true };
+  }
+  return { ok: true, split: false };
+}
 
 // token-budget is optional at require-time so unit tests can stub via dependency injection.
 let _tokenBudget = null;
@@ -155,7 +206,7 @@ function runParallel(opts) {
   const dryRun = !!(opts && opts.dryRun);
   const summarySize = Number.isFinite(opts && opts.summarySize)
     ? opts.summarySize
-    : require(path.join(__dirname, "gsd-t-orchestrator-config.cjs")).DEFAULT_SUMMARY_SIZE_PCT;
+    : DEFAULT_SUMMARY_SIZE_PCT;
 
   const graph = buildTaskGraph({ projectDir });
   let candidates = getReadyTasks(graph);

package/bin/gsd-t-test-data-adapters/file-json-array.cjs

@@ -5,23 +5,47 @@
  * `store` is the file path; `id` is the value of the `id` field on the matching row.
  *
  * Refuses to delete a record whose `id` does not start with `taggedPrefix`.
- * Atomic rewrite (write-temp + rename).
+ * `taggedPrefix` is REQUIRED and non-empty — an empty/omitted prefix would
+ * disable the guard entirely (Red Team CRITICAL, M60). Atomic rewrite
+ * (write-temp + rename).
+ *
+ * When `projectDir` is supplied, `store` MUST resolve inside it — the adapter
+ * refuses paths outside-AND-equal-to projectDir (containment predicate from
+ * feedback_destructive_path_ops_containment). Prevents a tampered ledger from
+ * becoming a write-anywhere delete primitive.
  */
 const fs = require('node:fs');
 const path = require('node:path');
 
 const KIND = 'file-json-array';
 
-function purge({ store, id, taggedPrefix }) {
+function assertContained(store, projectDir) {
+  if (typeof projectDir !== 'string' || projectDir.length === 0) {
+    return; // no projectDir supplied — containment not enforceable, caller's choice
+  }
+  const root = path.resolve(projectDir);
+  const resolved = path.resolve(store);
+  if (!(resolved.startsWith(root + path.sep) && resolved !== root)) {
+    throw new Error(
+      `file-json-array: store path "${store}" resolves outside projectDir "${projectDir}" — refused (containment guard)`
+    );
+  }
+}
+
+function purge({ store, id, taggedPrefix, projectDir }) {
   if (typeof store !== 'string' || store.length === 0) {
     throw new Error('file-json-array: store must be a non-empty file path');
   }
   if (typeof id !== 'string' || id.length === 0) {
     throw new Error('file-json-array: id must be a non-empty string');
   }
-  if (typeof taggedPrefix === 'string' && taggedPrefix.length > 0 && !id.startsWith(taggedPrefix)) {
+  if (typeof taggedPrefix !== 'string' || taggedPrefix.length === 0) {
+    throw new Error('file-json-array: taggedPrefix is required and must be non-empty (guard cannot be disabled)');
+  }
+  if (!id.startsWith(taggedPrefix)) {
     throw new Error(`file-json-array: tag prefix mismatch (id="${id}", taggedPrefix="${taggedPrefix}")`);
   }
+  assertContained(store, projectDir);
 
   if (!fs.existsSync(store)) {
     return 'absent';

package/bin/gsd-t-test-data-adapters/localstorage-key-prefix.cjs

@@ -22,7 +22,12 @@ async function purge({ page, store, id, taggedPrefix }) {
   if (typeof id !== 'string' || id.length === 0) {
     throw new Error('localStorage-key-prefix: id must be a non-empty string');
   }
-  if (typeof taggedPrefix === 'string' && taggedPrefix.length > 0 && !id.startsWith(taggedPrefix)) {
+  // taggedPrefix is REQUIRED and non-empty — an empty/omitted prefix would
+  // disable the guard entirely (Red Team CRITICAL, M60).
+  if (typeof taggedPrefix !== 'string' || taggedPrefix.length === 0) {
+    throw new Error('localStorage-key-prefix: taggedPrefix is required and must be non-empty (guard cannot be disabled)');
+  }
+  if (!id.startsWith(taggedPrefix)) {
     throw new Error(`localStorage-key-prefix: tag prefix mismatch (id="${id}", taggedPrefix="${taggedPrefix}")`);
   }
 

package/bin/gsd-t-test-data-adapters/sqlite-table-where.cjs

@@ -8,11 +8,25 @@
  * still loads when the module isn't installed. Tests self-skip in that case.
  */
 const fs = require('node:fs');
+const path = require('node:path');
 
 const KIND = 'sqlite-table-where';
 
 const IDENT_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 
+function assertContained(dbPath, projectDir) {
+  if (typeof projectDir !== 'string' || projectDir.length === 0) {
+    return; // no projectDir supplied — containment not enforceable, caller's choice
+  }
+  const root = path.resolve(projectDir);
+  const resolved = path.resolve(dbPath);
+  if (!(resolved.startsWith(root + path.sep) && resolved !== root)) {
+    throw new Error(
+      `sqlite-table-where: dbPath "${dbPath}" resolves outside projectDir "${projectDir}" — refused (containment guard)`
+    );
+  }
+}
+
 function parseStore(store) {
   if (typeof store !== 'string') {
     throw new Error('sqlite-table-where: store must be "dbPath|table|idColumn"');
@@ -34,7 +48,7 @@ function parseStore(store) {
   return { dbPath, table, idColumn };
 }
 
-function purge({ store, id, taggedPrefix }) {
+function purge({ store, id, taggedPrefix, projectDir }) {
   const { dbPath, table, idColumn } = parseStore(store);
   if (typeof id !== 'string' || id.length === 0) {
     throw new Error('sqlite-table-where: id must be a non-empty string');
@@ -45,6 +59,7 @@ function purge({ store, id, taggedPrefix }) {
   if (!id.startsWith(taggedPrefix)) {
     throw new Error(`sqlite-table-where: tag prefix mismatch (id="${id}", taggedPrefix="${taggedPrefix}")`);
   }
+  assertContained(dbPath, projectDir);
   if (!fs.existsSync(dbPath)) {
     return 'absent';
   }

package/bin/gsd-t-test-data-ledger.cjs

@@ -129,6 +129,7 @@ async function purgeRunInserts({ projectDir, runId, dryRun }) {
         store: row.store,
         id: row.id,
         taggedPrefix: row.taggedPrefix,
+        projectDir, // thread through so path adapters can enforce containment (M60)
       });
       if (result === 'purged') {
         purged.push(row);