@therocketcode/gsd-core 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (568) hide show
  1. package/.claude-plugin/plugin.json +23 -0
  2. package/GEMINI.md +53 -0
  3. package/LICENSE +21 -0
  4. package/README.ja-JP.md +125 -0
  5. package/README.ko-KR.md +125 -0
  6. package/README.md +144 -0
  7. package/README.pt-BR.md +125 -0
  8. package/README.zh-CN.md +125 -0
  9. package/agents/gsd-advisor-researcher.md +108 -0
  10. package/agents/gsd-ai-researcher.md +114 -0
  11. package/agents/gsd-assumptions-analyzer.md +105 -0
  12. package/agents/gsd-code-fixer.md +668 -0
  13. package/agents/gsd-code-reviewer.md +387 -0
  14. package/agents/gsd-codebase-mapper.md +853 -0
  15. package/agents/gsd-debug-session-manager.md +314 -0
  16. package/agents/gsd-debugger.md +1452 -0
  17. package/agents/gsd-doc-classifier.md +168 -0
  18. package/agents/gsd-doc-synthesizer.md +204 -0
  19. package/agents/gsd-doc-verifier.md +217 -0
  20. package/agents/gsd-doc-writer.md +616 -0
  21. package/agents/gsd-domain-researcher.md +147 -0
  22. package/agents/gsd-eval-auditor.md +191 -0
  23. package/agents/gsd-eval-planner.md +154 -0
  24. package/agents/gsd-executor.md +785 -0
  25. package/agents/gsd-framework-selector.md +160 -0
  26. package/agents/gsd-integration-checker.md +470 -0
  27. package/agents/gsd-intel-updater.md +342 -0
  28. package/agents/gsd-nyquist-auditor.md +203 -0
  29. package/agents/gsd-pattern-mapper.md +335 -0
  30. package/agents/gsd-phase-researcher.md +867 -0
  31. package/agents/gsd-plan-checker.md +978 -0
  32. package/agents/gsd-planner.md +1204 -0
  33. package/agents/gsd-project-researcher.md +611 -0
  34. package/agents/gsd-research-synthesizer.md +259 -0
  35. package/agents/gsd-roadmapper.md +688 -0
  36. package/agents/gsd-security-auditor.md +155 -0
  37. package/agents/gsd-ui-auditor.md +495 -0
  38. package/agents/gsd-ui-checker.md +309 -0
  39. package/agents/gsd-ui-researcher.md +374 -0
  40. package/agents/gsd-user-profiler.md +171 -0
  41. package/agents/gsd-verifier.md +923 -0
  42. package/assets/gsd-logo-2000-transparent.png +0 -0
  43. package/assets/gsd-logo-2000-transparent.svg +17 -0
  44. package/assets/gsd-logo-2000.png +0 -0
  45. package/assets/gsd-logo-2000.svg +21 -0
  46. package/assets/terminal.svg +68 -0
  47. package/bin/install.js +12726 -0
  48. package/bin/lib/ui-safety-gate.cjs +107 -0
  49. package/commands/gsd/add-tests.md +42 -0
  50. package/commands/gsd/ai-integration-phase.md +37 -0
  51. package/commands/gsd/audit-fix.md +34 -0
  52. package/commands/gsd/audit-milestone.md +37 -0
  53. package/commands/gsd/audit-uat.md +24 -0
  54. package/commands/gsd/autonomous.md +48 -0
  55. package/commands/gsd/capture.md +62 -0
  56. package/commands/gsd/cleanup.md +24 -0
  57. package/commands/gsd/code-review.md +59 -0
  58. package/commands/gsd/complete-milestone.md +143 -0
  59. package/commands/gsd/config.md +56 -0
  60. package/commands/gsd/debug.md +52 -0
  61. package/commands/gsd/discover-product.md +65 -0
  62. package/commands/gsd/discuss-phase.md +77 -0
  63. package/commands/gsd/docs-update.md +49 -0
  64. package/commands/gsd/eval-review.md +33 -0
  65. package/commands/gsd/execute-phase.md +66 -0
  66. package/commands/gsd/explore.md +27 -0
  67. package/commands/gsd/extract-learnings.md +23 -0
  68. package/commands/gsd/fast.md +31 -0
  69. package/commands/gsd/forensics.md +57 -0
  70. package/commands/gsd/graphify.md +204 -0
  71. package/commands/gsd/health.md +31 -0
  72. package/commands/gsd/help.md +28 -0
  73. package/commands/gsd/import.md +45 -0
  74. package/commands/gsd/inbox.md +39 -0
  75. package/commands/gsd/ingest-docs.md +42 -0
  76. package/commands/gsd/manager.md +45 -0
  77. package/commands/gsd/map-codebase.md +83 -0
  78. package/commands/gsd/milestone-summary.md +51 -0
  79. package/commands/gsd/model-domain.md +65 -0
  80. package/commands/gsd/mvp-phase.md +45 -0
  81. package/commands/gsd/new-milestone.md +45 -0
  82. package/commands/gsd/new-project.md +47 -0
  83. package/commands/gsd/ns-context.md +23 -0
  84. package/commands/gsd/ns-ideate.md +24 -0
  85. package/commands/gsd/ns-manage.md +29 -0
  86. package/commands/gsd/ns-project.md +22 -0
  87. package/commands/gsd/ns-review.md +26 -0
  88. package/commands/gsd/ns-workflow.md +28 -0
  89. package/commands/gsd/pause-work.md +43 -0
  90. package/commands/gsd/phase.md +56 -0
  91. package/commands/gsd/plan-phase.md +64 -0
  92. package/commands/gsd/plan-review-convergence.md +59 -0
  93. package/commands/gsd/pr-branch.md +26 -0
  94. package/commands/gsd/profile-user.md +46 -0
  95. package/commands/gsd/progress.md +48 -0
  96. package/commands/gsd/quick.md +174 -0
  97. package/commands/gsd/recommend-architecture.md +64 -0
  98. package/commands/gsd/resume-work.md +30 -0
  99. package/commands/gsd/review-backlog.md +63 -0
  100. package/commands/gsd/review.md +42 -0
  101. package/commands/gsd/secure-phase.md +36 -0
  102. package/commands/gsd/settings.md +29 -0
  103. package/commands/gsd/ship.md +24 -0
  104. package/commands/gsd/sketch.md +60 -0
  105. package/commands/gsd/spec-phase.md +63 -0
  106. package/commands/gsd/spike.md +57 -0
  107. package/commands/gsd/stats.md +20 -0
  108. package/commands/gsd/surface.md +155 -0
  109. package/commands/gsd/testing-strategy.md +65 -0
  110. package/commands/gsd/thread.md +24 -0
  111. package/commands/gsd/ui-phase.md +35 -0
  112. package/commands/gsd/ui-review.md +33 -0
  113. package/commands/gsd/ultraplan-phase.md +34 -0
  114. package/commands/gsd/undo.md +35 -0
  115. package/commands/gsd/update.md +49 -0
  116. package/commands/gsd/validate-phase.md +36 -0
  117. package/commands/gsd/verify-work.md +39 -0
  118. package/commands/gsd/workspace.md +52 -0
  119. package/commands/gsd/workstreams.md +70 -0
  120. package/gemini-extension.json +6 -0
  121. package/gsd-core/bin/check-latest-version.cjs +161 -0
  122. package/gsd-core/bin/gsd-tools.cjs +1928 -0
  123. package/gsd-core/bin/lib/active-workstream-store.cjs +291 -0
  124. package/gsd-core/bin/lib/adr-parser.cjs +399 -0
  125. package/gsd-core/bin/lib/agent-command-router.cjs +68 -0
  126. package/gsd-core/bin/lib/artifacts.cjs +51 -0
  127. package/gsd-core/bin/lib/audit.cjs +743 -0
  128. package/gsd-core/bin/lib/check-command-router.cjs +343 -0
  129. package/gsd-core/bin/lib/cjs-command-router-adapter.cjs +81 -0
  130. package/gsd-core/bin/lib/cli-exit.cjs +42 -0
  131. package/gsd-core/bin/lib/clock.cjs +95 -0
  132. package/gsd-core/bin/lib/clusters.cjs +132 -0
  133. package/gsd-core/bin/lib/code-review-flags.cjs +59 -0
  134. package/gsd-core/bin/lib/command-aliases.cjs +809 -0
  135. package/gsd-core/bin/lib/command-arg-projection.cjs +55 -0
  136. package/gsd-core/bin/lib/command-routing-hub.cjs +300 -0
  137. package/gsd-core/bin/lib/commands.cjs +1203 -0
  138. package/gsd-core/bin/lib/config-schema.cjs +29 -0
  139. package/gsd-core/bin/lib/config-types.cjs +19 -0
  140. package/gsd-core/bin/lib/config.cjs +738 -0
  141. package/gsd-core/bin/lib/configuration.cjs +239 -0
  142. package/gsd-core/bin/lib/context-utilization.cjs +48 -0
  143. package/gsd-core/bin/lib/core.cjs +2051 -0
  144. package/gsd-core/bin/lib/decisions.cjs +118 -0
  145. package/gsd-core/bin/lib/docs.cjs +252 -0
  146. package/gsd-core/bin/lib/drift.cjs +364 -0
  147. package/gsd-core/bin/lib/fallow-runner.cjs +115 -0
  148. package/gsd-core/bin/lib/frontmatter.cjs +442 -0
  149. package/gsd-core/bin/lib/gap-checker.cjs +257 -0
  150. package/gsd-core/bin/lib/graphify.cjs +496 -0
  151. package/gsd-core/bin/lib/gsd2-import.cjs +456 -0
  152. package/gsd-core/bin/lib/init-command-router.cjs +62 -0
  153. package/gsd-core/bin/lib/init.cjs +1815 -0
  154. package/gsd-core/bin/lib/install-profiles.cjs +584 -0
  155. package/gsd-core/bin/lib/installer-migration-authoring.cjs +122 -0
  156. package/gsd-core/bin/lib/installer-migration-report.cjs +350 -0
  157. package/gsd-core/bin/lib/installer-migrations/000-first-time-baseline.cjs +218 -0
  158. package/gsd-core/bin/lib/installer-migrations/001-legacy-orphan-files.cjs +48 -0
  159. package/gsd-core/bin/lib/installer-migrations/002-codex-legacy-hooks-json.cjs +94 -0
  160. package/gsd-core/bin/lib/installer-migrations/003-rename-get-shit-done-to-gsd-core.cjs +108 -0
  161. package/gsd-core/bin/lib/installer-migrations.cjs +823 -0
  162. package/gsd-core/bin/lib/intel.cjs +590 -0
  163. package/gsd-core/bin/lib/learnings.cjs +270 -0
  164. package/gsd-core/bin/lib/legacy-cleanup.cjs +253 -0
  165. package/gsd-core/bin/lib/milestone.cjs +373 -0
  166. package/gsd-core/bin/lib/model-catalog.cjs +154 -0
  167. package/gsd-core/bin/lib/model-profiles.cjs +24 -0
  168. package/gsd-core/bin/lib/observability/event.cjs +51 -0
  169. package/gsd-core/bin/lib/observability/logger.cjs +146 -0
  170. package/gsd-core/bin/lib/observability/redaction.cjs +48 -0
  171. package/gsd-core/bin/lib/package-identity.cjs +35 -0
  172. package/gsd-core/bin/lib/package-legitimacy.cjs +368 -0
  173. package/gsd-core/bin/lib/phase-command-router.cjs +189 -0
  174. package/gsd-core/bin/lib/phase-lifecycle.cjs +74 -0
  175. package/gsd-core/bin/lib/phase.cjs +1307 -0
  176. package/gsd-core/bin/lib/phases-command-router.cjs +43 -0
  177. package/gsd-core/bin/lib/plan-scan.cjs +91 -0
  178. package/gsd-core/bin/lib/planning-workspace.cjs +245 -0
  179. package/gsd-core/bin/lib/profile-output.cjs +1120 -0
  180. package/gsd-core/bin/lib/profile-pipeline.cjs +517 -0
  181. package/gsd-core/bin/lib/project-root.cjs +119 -0
  182. package/gsd-core/bin/lib/prompt-budget.cjs +305 -0
  183. package/gsd-core/bin/lib/research-provider.cjs +137 -0
  184. package/gsd-core/bin/lib/research-store.cjs +167 -0
  185. package/gsd-core/bin/lib/review-reviewer-selection.cjs +121 -0
  186. package/gsd-core/bin/lib/roadmap-command-router.cjs +166 -0
  187. package/gsd-core/bin/lib/roadmap-upgrade.cjs +476 -0
  188. package/gsd-core/bin/lib/roadmap.cjs +600 -0
  189. package/gsd-core/bin/lib/runtime-artifact-layout.cjs +312 -0
  190. package/gsd-core/bin/lib/runtime-config-adapter-registry.cjs +56 -0
  191. package/gsd-core/bin/lib/runtime-homes.cjs +190 -0
  192. package/gsd-core/bin/lib/runtime-name-policy.cjs +96 -0
  193. package/gsd-core/bin/lib/runtime-slash.cjs +119 -0
  194. package/gsd-core/bin/lib/schema-detect.cjs +159 -0
  195. package/gsd-core/bin/lib/secrets.cjs +34 -0
  196. package/gsd-core/bin/lib/security.cjs +480 -0
  197. package/gsd-core/bin/lib/semver-compare.cjs +42 -0
  198. package/gsd-core/bin/lib/shell-command-projection.cjs +533 -0
  199. package/gsd-core/bin/lib/state-command-router.cjs +160 -0
  200. package/gsd-core/bin/lib/state-document.cjs +259 -0
  201. package/gsd-core/bin/lib/state.cjs +2010 -0
  202. package/gsd-core/bin/lib/surface.cjs +449 -0
  203. package/gsd-core/bin/lib/task-command-router.cjs +85 -0
  204. package/gsd-core/bin/lib/template.cjs +237 -0
  205. package/gsd-core/bin/lib/uat.cjs +297 -0
  206. package/gsd-core/bin/lib/ui-safety-gate.cjs +98 -0
  207. package/gsd-core/bin/lib/update-context.cjs +218 -0
  208. package/gsd-core/bin/lib/validate-command-router.cjs +91 -0
  209. package/gsd-core/bin/lib/validate.cjs +112 -0
  210. package/gsd-core/bin/lib/verification-command-router.cjs +31 -0
  211. package/gsd-core/bin/lib/verification.cjs +193 -0
  212. package/gsd-core/bin/lib/verify-command-router.cjs +44 -0
  213. package/gsd-core/bin/lib/verify.cjs +1451 -0
  214. package/gsd-core/bin/lib/workstream-inventory-builder.cjs +81 -0
  215. package/gsd-core/bin/lib/workstream-inventory.cjs +147 -0
  216. package/gsd-core/bin/lib/workstream-name-policy.cjs +91 -0
  217. package/gsd-core/bin/lib/workstream.cjs +380 -0
  218. package/gsd-core/bin/lib/worktree-base-ref.cjs +325 -0
  219. package/gsd-core/bin/lib/worktree-safety.cjs +943 -0
  220. package/gsd-core/bin/shared/config-defaults.manifest.json +98 -0
  221. package/gsd-core/bin/shared/config-schema.manifest.json +192 -0
  222. package/gsd-core/bin/shared/model-catalog.json +149 -0
  223. package/gsd-core/bin/shared/runtime-aliases.manifest.json +75 -0
  224. package/gsd-core/bin/verify-reapply-patches.cjs +349 -0
  225. package/gsd-core/contexts/dev.md +21 -0
  226. package/gsd-core/contexts/research.md +22 -0
  227. package/gsd-core/contexts/review.md +23 -0
  228. package/gsd-core/references/agent-contracts.md +79 -0
  229. package/gsd-core/references/ai-evals.md +156 -0
  230. package/gsd-core/references/ai-frameworks.md +186 -0
  231. package/gsd-core/references/architecture-decision.md +74 -0
  232. package/gsd-core/references/artifact-types.md +131 -0
  233. package/gsd-core/references/auth-in-tests.md +91 -0
  234. package/gsd-core/references/autonomous-smart-discuss.md +277 -0
  235. package/gsd-core/references/checkpoints.md +814 -0
  236. package/gsd-core/references/common-bug-patterns.md +114 -0
  237. package/gsd-core/references/context-budget.md +85 -0
  238. package/gsd-core/references/continuation-format.md +253 -0
  239. package/gsd-core/references/db-test-isolation.md +54 -0
  240. package/gsd-core/references/debugger-philosophy.md +76 -0
  241. package/gsd-core/references/decimal-phase-calculation.md +64 -0
  242. package/gsd-core/references/doc-conflict-engine.md +91 -0
  243. package/gsd-core/references/domain-modeling.md +80 -0
  244. package/gsd-core/references/domain-probes.md +125 -0
  245. package/gsd-core/references/e2e-tiering.md +35 -0
  246. package/gsd-core/references/execute-mvp-tdd.md +81 -0
  247. package/gsd-core/references/executor-examples.md +110 -0
  248. package/gsd-core/references/few-shot-examples/plan-checker.md +73 -0
  249. package/gsd-core/references/few-shot-examples/verifier.md +109 -0
  250. package/gsd-core/references/flaky-test-checklist.md +22 -0
  251. package/gsd-core/references/gate-prompts.md +100 -0
  252. package/gsd-core/references/gates.md +70 -0
  253. package/gsd-core/references/git-integration.md +298 -0
  254. package/gsd-core/references/git-planning-commit.md +40 -0
  255. package/gsd-core/references/ios-scaffold.md +123 -0
  256. package/gsd-core/references/mandatory-initial-read.md +2 -0
  257. package/gsd-core/references/model-profile-resolution.md +38 -0
  258. package/gsd-core/references/model-profiles.md +245 -0
  259. package/gsd-core/references/mvp-concepts.md +49 -0
  260. package/gsd-core/references/phase-argument-parsing.md +61 -0
  261. package/gsd-core/references/planner-antipatterns.md +89 -0
  262. package/gsd-core/references/planner-chunked.md +49 -0
  263. package/gsd-core/references/planner-gap-closure.md +62 -0
  264. package/gsd-core/references/planner-graphify-auto-update.md +67 -0
  265. package/gsd-core/references/planner-human-verify-mode.md +57 -0
  266. package/gsd-core/references/planner-interface-context.md +62 -0
  267. package/gsd-core/references/planner-load-graph-context.md +36 -0
  268. package/gsd-core/references/planner-mvp-mode.md +53 -0
  269. package/gsd-core/references/planner-reviews.md +39 -0
  270. package/gsd-core/references/planner-revision.md +87 -0
  271. package/gsd-core/references/planner-source-audit.md +73 -0
  272. package/gsd-core/references/planning-config.md +473 -0
  273. package/gsd-core/references/product-discovery.md +49 -0
  274. package/gsd-core/references/project-skills-discovery.md +19 -0
  275. package/gsd-core/references/questioning.md +162 -0
  276. package/gsd-core/references/realistic-test-data.md +44 -0
  277. package/gsd-core/references/research-documentation-lookup.md +29 -0
  278. package/gsd-core/references/research-philosophy.md +29 -0
  279. package/gsd-core/references/research-verification-protocol.md +27 -0
  280. package/gsd-core/references/revision-loop.md +97 -0
  281. package/gsd-core/references/scout-codebase.md +51 -0
  282. package/gsd-core/references/skeleton-template.md +48 -0
  283. package/gsd-core/references/sketch-interactivity.md +41 -0
  284. package/gsd-core/references/sketch-theme-system.md +94 -0
  285. package/gsd-core/references/sketch-tooling.md +45 -0
  286. package/gsd-core/references/sketch-variant-patterns.md +81 -0
  287. package/gsd-core/references/spidr-splitting.md +69 -0
  288. package/gsd-core/references/tdd.md +330 -0
  289. package/gsd-core/references/test-containers.md +55 -0
  290. package/gsd-core/references/test-strategy.md +75 -0
  291. package/gsd-core/references/thinking-models-debug.md +44 -0
  292. package/gsd-core/references/thinking-models-execution.md +50 -0
  293. package/gsd-core/references/thinking-models-planning.md +62 -0
  294. package/gsd-core/references/thinking-models-research.md +50 -0
  295. package/gsd-core/references/thinking-models-verification.md +55 -0
  296. package/gsd-core/references/thinking-partner.md +96 -0
  297. package/gsd-core/references/ui-brand.md +162 -0
  298. package/gsd-core/references/universal-anti-patterns.md +63 -0
  299. package/gsd-core/references/user-profiling.md +681 -0
  300. package/gsd-core/references/user-story-template.md +58 -0
  301. package/gsd-core/references/verification-overrides.md +227 -0
  302. package/gsd-core/references/verification-patterns.md +612 -0
  303. package/gsd-core/references/verify-mvp-mode.md +85 -0
  304. package/gsd-core/references/workstream-flag.md +111 -0
  305. package/gsd-core/references/worktree-branch-check.md +38 -0
  306. package/gsd-core/references/worktree-path-safety.md +67 -0
  307. package/gsd-core/templates/AI-SPEC.md +246 -0
  308. package/gsd-core/templates/DEBUG.md +169 -0
  309. package/gsd-core/templates/README.md +77 -0
  310. package/gsd-core/templates/SECURITY.md +61 -0
  311. package/gsd-core/templates/UAT.md +265 -0
  312. package/gsd-core/templates/UI-SPEC.md +100 -0
  313. package/gsd-core/templates/VALIDATION.md +76 -0
  314. package/gsd-core/templates/adr.md +58 -0
  315. package/gsd-core/templates/claude-md.md +145 -0
  316. package/gsd-core/templates/codebase/architecture.md +255 -0
  317. package/gsd-core/templates/codebase/concerns.md +310 -0
  318. package/gsd-core/templates/codebase/conventions.md +307 -0
  319. package/gsd-core/templates/codebase/integrations.md +280 -0
  320. package/gsd-core/templates/codebase/stack.md +186 -0
  321. package/gsd-core/templates/codebase/structure.md +285 -0
  322. package/gsd-core/templates/codebase/testing.md +480 -0
  323. package/gsd-core/templates/config.json +62 -0
  324. package/gsd-core/templates/context.md +352 -0
  325. package/gsd-core/templates/continue-here.md +78 -0
  326. package/gsd-core/templates/copilot-instructions.md +7 -0
  327. package/gsd-core/templates/debug-subagent-prompt.md +91 -0
  328. package/gsd-core/templates/dev-preferences.md +21 -0
  329. package/gsd-core/templates/discovery.md +146 -0
  330. package/gsd-core/templates/discussion-log.md +63 -0
  331. package/gsd-core/templates/domain-model.md +54 -0
  332. package/gsd-core/templates/milestone-archive.md +123 -0
  333. package/gsd-core/templates/milestone.md +115 -0
  334. package/gsd-core/templates/phase-prompt.md +610 -0
  335. package/gsd-core/templates/planner-subagent-prompt.md +117 -0
  336. package/gsd-core/templates/product-brief.md +55 -0
  337. package/gsd-core/templates/project.md +186 -0
  338. package/gsd-core/templates/requirements.md +231 -0
  339. package/gsd-core/templates/research-project/ARCHITECTURE.md +204 -0
  340. package/gsd-core/templates/research-project/FEATURES.md +147 -0
  341. package/gsd-core/templates/research-project/PITFALLS.md +200 -0
  342. package/gsd-core/templates/research-project/STACK.md +120 -0
  343. package/gsd-core/templates/research-project/SUMMARY.md +170 -0
  344. package/gsd-core/templates/research.md +592 -0
  345. package/gsd-core/templates/retrospective.md +54 -0
  346. package/gsd-core/templates/roadmap.md +202 -0
  347. package/gsd-core/templates/spec.md +307 -0
  348. package/gsd-core/templates/state.md +195 -0
  349. package/gsd-core/templates/summary-complex.md +59 -0
  350. package/gsd-core/templates/summary-minimal.md +41 -0
  351. package/gsd-core/templates/summary-standard.md +48 -0
  352. package/gsd-core/templates/summary.md +248 -0
  353. package/gsd-core/templates/test-strategy.md +50 -0
  354. package/gsd-core/templates/user-profile.md +146 -0
  355. package/gsd-core/templates/user-setup.md +311 -0
  356. package/gsd-core/templates/verification-report.md +322 -0
  357. package/gsd-core/workflows/_runtime-launcher.snippet.sh +1 -0
  358. package/gsd-core/workflows/add-backlog.md +91 -0
  359. package/gsd-core/workflows/add-phase.md +113 -0
  360. package/gsd-core/workflows/add-tests.md +355 -0
  361. package/gsd-core/workflows/add-todo.md +161 -0
  362. package/gsd-core/workflows/ai-integration-phase.md +295 -0
  363. package/gsd-core/workflows/analyze-dependencies.md +96 -0
  364. package/gsd-core/workflows/audit-fix.md +178 -0
  365. package/gsd-core/workflows/audit-milestone.md +360 -0
  366. package/gsd-core/workflows/audit-uat.md +110 -0
  367. package/gsd-core/workflows/autonomous.md +797 -0
  368. package/gsd-core/workflows/check-todos.md +180 -0
  369. package/gsd-core/workflows/cleanup.md +195 -0
  370. package/gsd-core/workflows/code-review-fix.md +502 -0
  371. package/gsd-core/workflows/code-review.md +658 -0
  372. package/gsd-core/workflows/complete-milestone.md +855 -0
  373. package/gsd-core/workflows/debug.md +237 -0
  374. package/gsd-core/workflows/diagnose-issues.md +245 -0
  375. package/gsd-core/workflows/discover-product.md +112 -0
  376. package/gsd-core/workflows/discovery-phase.md +291 -0
  377. package/gsd-core/workflows/discuss-phase/modes/advisor.md +176 -0
  378. package/gsd-core/workflows/discuss-phase/modes/all.md +28 -0
  379. package/gsd-core/workflows/discuss-phase/modes/analyze.md +44 -0
  380. package/gsd-core/workflows/discuss-phase/modes/auto.md +57 -0
  381. package/gsd-core/workflows/discuss-phase/modes/batch.md +52 -0
  382. package/gsd-core/workflows/discuss-phase/modes/chain.md +98 -0
  383. package/gsd-core/workflows/discuss-phase/modes/default.md +141 -0
  384. package/gsd-core/workflows/discuss-phase/modes/power.md +44 -0
  385. package/gsd-core/workflows/discuss-phase/modes/text.md +55 -0
  386. package/gsd-core/workflows/discuss-phase/templates/checkpoint.json +18 -0
  387. package/gsd-core/workflows/discuss-phase/templates/context.md +136 -0
  388. package/gsd-core/workflows/discuss-phase/templates/discussion-log.md +50 -0
  389. package/gsd-core/workflows/discuss-phase-assumptions.md +675 -0
  390. package/gsd-core/workflows/discuss-phase-power.md +291 -0
  391. package/gsd-core/workflows/discuss-phase.md +499 -0
  392. package/gsd-core/workflows/do.md +111 -0
  393. package/gsd-core/workflows/docs-update.md +1176 -0
  394. package/gsd-core/workflows/edit-phase.md +295 -0
  395. package/gsd-core/workflows/eval-review.md +156 -0
  396. package/gsd-core/workflows/execute-phase/steps/codebase-drift-gate.md +95 -0
  397. package/gsd-core/workflows/execute-phase/steps/per-plan-worktree-gate.md +94 -0
  398. package/gsd-core/workflows/execute-phase/steps/post-merge-gate.md +117 -0
  399. package/gsd-core/workflows/execute-phase.md +1752 -0
  400. package/gsd-core/workflows/execute-plan.md +526 -0
  401. package/gsd-core/workflows/explore.md +146 -0
  402. package/gsd-core/workflows/extract-learnings.md +243 -0
  403. package/gsd-core/workflows/fast.md +124 -0
  404. package/gsd-core/workflows/forensics.md +279 -0
  405. package/gsd-core/workflows/graduation.md +196 -0
  406. package/gsd-core/workflows/health.md +224 -0
  407. package/gsd-core/workflows/help/modes/brief.md +22 -0
  408. package/gsd-core/workflows/help/modes/default.md +50 -0
  409. package/gsd-core/workflows/help/modes/full.md +789 -0
  410. package/gsd-core/workflows/help/modes/topic.md +74 -0
  411. package/gsd-core/workflows/help.md +24 -0
  412. package/gsd-core/workflows/import.md +256 -0
  413. package/gsd-core/workflows/inbox.md +387 -0
  414. package/gsd-core/workflows/ingest-docs.md +340 -0
  415. package/gsd-core/workflows/insert-phase.md +152 -0
  416. package/gsd-core/workflows/list-phase-assumptions.md +178 -0
  417. package/gsd-core/workflows/list-workspaces.md +57 -0
  418. package/gsd-core/workflows/manager.md +393 -0
  419. package/gsd-core/workflows/map-codebase.md +446 -0
  420. package/gsd-core/workflows/milestone-summary.md +224 -0
  421. package/gsd-core/workflows/model-domain.md +162 -0
  422. package/gsd-core/workflows/mvp-phase.md +222 -0
  423. package/gsd-core/workflows/new-milestone.md +635 -0
  424. package/gsd-core/workflows/new-project.md +1555 -0
  425. package/gsd-core/workflows/new-workspace.md +240 -0
  426. package/gsd-core/workflows/next.md +299 -0
  427. package/gsd-core/workflows/node-repair.md +92 -0
  428. package/gsd-core/workflows/note.md +158 -0
  429. package/gsd-core/workflows/pause-work.md +244 -0
  430. package/gsd-core/workflows/plan-milestone-gaps.md +281 -0
  431. package/gsd-core/workflows/plan-phase.md +1814 -0
  432. package/gsd-core/workflows/plan-review-convergence.md +346 -0
  433. package/gsd-core/workflows/plant-seed.md +230 -0
  434. package/gsd-core/workflows/pr-branch.md +157 -0
  435. package/gsd-core/workflows/profile-user.md +453 -0
  436. package/gsd-core/workflows/progress.md +699 -0
  437. package/gsd-core/workflows/quick.md +1017 -0
  438. package/gsd-core/workflows/reapply-patches.md +426 -0
  439. package/gsd-core/workflows/recommend-architecture.md +135 -0
  440. package/gsd-core/workflows/remove-phase.md +156 -0
  441. package/gsd-core/workflows/remove-workspace.md +108 -0
  442. package/gsd-core/workflows/resume-project.md +332 -0
  443. package/gsd-core/workflows/review.md +748 -0
  444. package/gsd-core/workflows/scan.md +107 -0
  445. package/gsd-core/workflows/secure-phase.md +182 -0
  446. package/gsd-core/workflows/session-report.md +146 -0
  447. package/gsd-core/workflows/settings-advanced.md +810 -0
  448. package/gsd-core/workflows/settings-integrations.md +312 -0
  449. package/gsd-core/workflows/settings.md +566 -0
  450. package/gsd-core/workflows/ship.md +405 -0
  451. package/gsd-core/workflows/sketch-wrap-up.md +286 -0
  452. package/gsd-core/workflows/sketch.md +361 -0
  453. package/gsd-core/workflows/spec-phase.md +263 -0
  454. package/gsd-core/workflows/spike-wrap-up.md +307 -0
  455. package/gsd-core/workflows/spike.md +453 -0
  456. package/gsd-core/workflows/stats.md +80 -0
  457. package/gsd-core/workflows/sync-skills.md +182 -0
  458. package/gsd-core/workflows/testing-strategy.md +122 -0
  459. package/gsd-core/workflows/thread.md +222 -0
  460. package/gsd-core/workflows/transition.md +694 -0
  461. package/gsd-core/workflows/ui-phase.md +328 -0
  462. package/gsd-core/workflows/ui-review.md +193 -0
  463. package/gsd-core/workflows/ultraplan-phase.md +199 -0
  464. package/gsd-core/workflows/undo.md +314 -0
  465. package/gsd-core/workflows/update.md +496 -0
  466. package/gsd-core/workflows/validate-phase.md +181 -0
  467. package/gsd-core/workflows/verify-phase.md +544 -0
  468. package/gsd-core/workflows/verify-work.md +781 -0
  469. package/hooks/dist/gsd-check-update-worker.js +108 -0
  470. package/hooks/dist/gsd-check-update.js +66 -0
  471. package/hooks/dist/gsd-config-reload.js +133 -0
  472. package/hooks/dist/gsd-context-monitor.js +195 -0
  473. package/hooks/dist/gsd-cursor-post-tool.js +75 -0
  474. package/hooks/dist/gsd-cursor-session-start.js +52 -0
  475. package/hooks/dist/gsd-graphify-update.sh +158 -0
  476. package/hooks/dist/gsd-phase-boundary.sh +47 -0
  477. package/hooks/dist/gsd-prompt-guard.js +97 -0
  478. package/hooks/dist/gsd-read-guard.js +101 -0
  479. package/hooks/dist/gsd-read-injection-scanner.js +203 -0
  480. package/hooks/dist/gsd-session-state.sh +59 -0
  481. package/hooks/dist/gsd-statusline.js +566 -0
  482. package/hooks/dist/gsd-update-banner.js +138 -0
  483. package/hooks/dist/gsd-validate-commit.sh +57 -0
  484. package/hooks/dist/gsd-workflow-guard.js +167 -0
  485. package/hooks/dist/gsd-worktree-path-guard.js +169 -0
  486. package/hooks/dist/lib/git-cmd.js +150 -0
  487. package/hooks/dist/lib/gsd-graphify-rebuild.sh +65 -0
  488. package/hooks/dist/managed-hooks-registry.cjs +38 -0
  489. package/hooks/gsd-check-update-worker.js +108 -0
  490. package/hooks/gsd-check-update.js +66 -0
  491. package/hooks/gsd-config-reload.js +133 -0
  492. package/hooks/gsd-context-monitor.js +195 -0
  493. package/hooks/gsd-cursor-post-tool.js +75 -0
  494. package/hooks/gsd-cursor-session-start.js +52 -0
  495. package/hooks/gsd-graphify-update.sh +158 -0
  496. package/hooks/gsd-phase-boundary.sh +47 -0
  497. package/hooks/gsd-prompt-guard.js +97 -0
  498. package/hooks/gsd-read-guard.js +101 -0
  499. package/hooks/gsd-read-injection-scanner.js +203 -0
  500. package/hooks/gsd-session-state.sh +59 -0
  501. package/hooks/gsd-statusline.js +566 -0
  502. package/hooks/gsd-update-banner.js +138 -0
  503. package/hooks/gsd-validate-commit.sh +57 -0
  504. package/hooks/gsd-workflow-guard.js +167 -0
  505. package/hooks/gsd-worktree-path-guard.js +169 -0
  506. package/hooks/hooks.json +69 -0
  507. package/hooks/lib/git-cmd.js +150 -0
  508. package/hooks/lib/gsd-graphify-rebuild.sh +65 -0
  509. package/hooks/managed-hooks-registry.cjs +38 -0
  510. package/package.json +115 -0
  511. package/scripts/affected-tests-lib.cjs +542 -0
  512. package/scripts/audit-workflow-script-paths.cjs +73 -0
  513. package/scripts/base64-scan.sh +351 -0
  514. package/scripts/build-hooks.js +247 -0
  515. package/scripts/changeset/README.md +129 -0
  516. package/scripts/changeset/cli.cjs +590 -0
  517. package/scripts/changeset/github-release-notes.cjs +199 -0
  518. package/scripts/changeset/lint.cjs +111 -0
  519. package/scripts/changeset/new.cjs +137 -0
  520. package/scripts/changeset/parse.cjs +114 -0
  521. package/scripts/changeset/render.cjs +34 -0
  522. package/scripts/changeset/serialize.cjs +130 -0
  523. package/scripts/check-alias-drift.cjs +114 -0
  524. package/scripts/check-env.cjs +312 -0
  525. package/scripts/check-npm-integrity.cjs +215 -0
  526. package/scripts/ci-guard-runner.cjs +22 -0
  527. package/scripts/ci-prepare-test-scope.cjs +51 -0
  528. package/scripts/ci-rebase-check.cjs +86 -0
  529. package/scripts/ci-test-scope.cjs +431 -0
  530. package/scripts/command-contract-helpers.cjs +64 -0
  531. package/scripts/diff-touches-shipped-paths.cjs +155 -0
  532. package/scripts/fix-slash-commands.cjs +147 -0
  533. package/scripts/gen-inventory-manifest.cjs +115 -0
  534. package/scripts/gen-research-agents.cjs +276 -0
  535. package/scripts/generate-package-identity.cjs +125 -0
  536. package/scripts/issue-dedupe.cjs +278 -0
  537. package/scripts/lib/allowlist-ratchet.cjs +136 -0
  538. package/scripts/lib/cli-exit.cjs +56 -0
  539. package/scripts/lint-command-contract.cjs +114 -0
  540. package/scripts/lint-descriptions.cjs +87 -0
  541. package/scripts/lint-docs-required.cjs +222 -0
  542. package/scripts/lint-legacy-dir-name.cjs +160 -0
  543. package/scripts/lint-package-identity-drift.cjs +141 -0
  544. package/scripts/lint-pr-check-project-dir.cjs +99 -0
  545. package/scripts/lint-shell-command-projection-drift.cjs +62 -0
  546. package/scripts/lint-skill-deps.cjs +185 -0
  547. package/scripts/lint-test-file-count.allowlist.json +135 -0
  548. package/scripts/lint-test-file-count.cjs +246 -0
  549. package/scripts/mutation-matrix.cjs +222 -0
  550. package/scripts/pr-template-policy.cjs +268 -0
  551. package/scripts/prompt-injection-scan.sh +207 -0
  552. package/scripts/release-notes/discord-release-summary.cjs +373 -0
  553. package/scripts/release-notes/format-github-release-notes.cjs +261 -0
  554. package/scripts/release-tarball-smoke.cjs +629 -0
  555. package/scripts/research-profiles.cjs +149 -0
  556. package/scripts/run-affected-tests.cjs +7 -0
  557. package/scripts/run-cross-platform-tests.cjs +67 -0
  558. package/scripts/run-tests.cjs +315 -0
  559. package/scripts/secret-scan-lint.sh +231 -0
  560. package/scripts/secret-scan.sh +358 -0
  561. package/scripts/setup-branch-protection.sh +236 -0
  562. package/scripts/strip-prose-atrefs.cjs +106 -0
  563. package/scripts/sync-manifest-versions.cjs +119 -0
  564. package/scripts/sync-rulesets.sh +34 -0
  565. package/scripts/sync-runtime-launcher.cjs +399 -0
  566. package/scripts/test-failure-reasons.cjs +34 -0
  567. package/scripts/verify-npm-publish.cjs +240 -0
  568. package/scripts/workflow-policy.cjs +450 -0
@@ -0,0 +1,590 @@
1
+ #!/usr/bin/env node
2
+ 'use strict';
3
+
4
+ /**
5
+ * CLI wrapper for the changeset-fragment workflow (#2975).
6
+ *
7
+ * Subcommands:
8
+ * render --repo <dir> --version V --date D [--json] Fold .changeset/*.md
9
+ * into CHANGELOG.md;
10
+ * delete consumed fragments.
11
+ *
12
+ * `--json` emits a structured report on stdout — the only contract tests
13
+ * assert against. Per CONTRIBUTING.md "Prohibited: Raw Text Matching on
14
+ * Test Outputs", the human formatter is operator-only.
15
+ */
16
+
17
+ const fs = require('node:fs');
18
+ const path = require('node:path');
19
+
20
+ const { ExitError, runMain } = require('../lib/cli-exit.cjs');
21
+ const { parseFragment } = require('./parse.cjs');
22
+ const { renderChangelog } = require('./render.cjs');
23
+ const { serializeChangelog, parseChangelog } = require('./serialize.cjs');
24
+ const { renderGithubReleaseNotes } = require('./github-release-notes.cjs');
25
+ const {
26
+ compareSemverCore,
27
+ isStableTripletSemver,
28
+ } = require('../../gsd-core/bin/lib/semver-compare.cjs');
29
+ const { packageName, repoSlug: defaultRepoSlug } = require('../../gsd-core/bin/lib/package-identity.cjs');
30
+
31
+ function parseArgs(argv) {
32
+ const opts = {
33
+ cmd: null,
34
+ repo: process.cwd(),
35
+ version: null,
36
+ date: null,
37
+ fromRef: null,
38
+ toRef: null,
39
+ changelog: null,
40
+ output: null,
41
+ repoSlug: defaultRepoSlug,
42
+ installCommand: `npx ${packageName}@latest`,
43
+ json: false,
44
+ allowEmpty: false,
45
+ preview: false,
46
+ };
47
+ if (argv.length === 0) return { ok: true, opts };
48
+ opts.cmd = argv[0];
49
+
50
+ // Pull a value for a value-taking flag, validating that the next token
51
+ // exists and is not itself another flag (which is the silently-misparsed
52
+ // case CR called out: e.g. `--repo --json` would consume `--json` as the
53
+ // repo path).
54
+ const requireValue = (flag, i) => {
55
+ const v = argv[i + 1];
56
+ if (v === undefined || v.startsWith('--')) {
57
+ return { ok: false, error: `missing value for ${flag}` };
58
+ }
59
+ return { ok: true, value: v };
60
+ };
61
+
62
+ for (let i = 1; i < argv.length; i++) {
63
+ const a = argv[i];
64
+ if (a === '--json') { opts.json = true; continue; }
65
+ if (a === '--allow-empty') { opts.allowEmpty = true; continue; }
66
+ if (a === '--preview') { opts.preview = true; continue; }
67
+ if (
68
+ a === '--repo' ||
69
+ a === '--version' ||
70
+ a === '--date' ||
71
+ a === '--from' ||
72
+ a === '--to' ||
73
+ a === '--changelog' ||
74
+ a === '--output' ||
75
+ a === '--repo-slug' ||
76
+ a === '--install-command'
77
+ ) {
78
+ const r = requireValue(a, i);
79
+ if (!r.ok) return { ok: false, error: r.error };
80
+ if (a === '--repo') opts.repo = r.value;
81
+ else if (a === '--version') opts.version = r.value;
82
+ else if (a === '--date') opts.date = r.value;
83
+ else if (a === '--from') opts.fromRef = r.value;
84
+ else if (a === '--to') opts.toRef = r.value;
85
+ else if (a === '--changelog') opts.changelog = r.value;
86
+ else if (a === '--output') opts.output = r.value;
87
+ else if (a === '--repo-slug') opts.repoSlug = r.value;
88
+ else if (a === '--install-command') opts.installCommand = r.value;
89
+ i++;
90
+ continue;
91
+ }
92
+ return { ok: false, error: `unknown argument: ${a}` };
93
+ }
94
+ return { ok: true, opts };
95
+ }
96
+
97
+ function listFragmentFiles(changesetDir) {
98
+ if (!fs.existsSync(changesetDir)) return [];
99
+ return fs.readdirSync(changesetDir)
100
+ .filter((f) => f.endsWith('.md') && f !== 'README.md')
101
+ .map((f) => path.join(changesetDir, f));
102
+ }
103
+
104
+ function splitChangelog(text) {
105
+ // Split off the top-level "# Changelog" heading + lead matter (everything
106
+ // before the first "## [version]" block) from the rest. The rest is the
107
+ // priorChangelog passed into renderChangelog. The "## [Unreleased]" block,
108
+ // if present, is dropped (the new release replaces it).
109
+ const lines = text.split(/\r?\n/);
110
+ const firstReleaseIdx = lines.findIndex((l) => /^##\s+\[/.test(l));
111
+ if (firstReleaseIdx === -1) {
112
+ return { lead: text.replace(/\s+$/, ''), prior: '' };
113
+ }
114
+ const lead = lines.slice(0, firstReleaseIdx).join('\n').replace(/\s+$/, '');
115
+ let priorStart = firstReleaseIdx;
116
+ // Skip the [Unreleased] block if present — it's a placeholder, not a release.
117
+ if (/^##\s+\[Unreleased\]/i.test(lines[firstReleaseIdx])) {
118
+ let j = firstReleaseIdx + 1;
119
+ while (j < lines.length && !/^##\s+\[/.test(lines[j])) j++;
120
+ priorStart = j;
121
+ }
122
+ const prior = lines.slice(priorStart).join('\n').trimStart();
123
+ return { lead, prior };
124
+ }
125
+
126
+ // FIX 2: tiny local helper so both render paths share identical assembly logic.
127
+ function assembleChangelog(lead, releaseBlock) {
128
+ return [
129
+ lead || '# Changelog',
130
+ '',
131
+ '## [Unreleased]',
132
+ '',
133
+ releaseBlock.replace(/\s+$/, ''),
134
+ '',
135
+ ].join('\n');
136
+ }
137
+
138
+ // Insert a "_No notable changes._" placeholder after the dated release heading
139
+ // of an otherwise-empty release block. serializeChangelog with no sections
140
+ // yields just "## [v] - d\n"; we expand the trailing newline into a blank line
141
+ // + placeholder + blank line so parseChangelog still sees the dated heading
142
+ // first and the output is human-readable. Shared by the --allow-empty and
143
+ // --preview zero-fragment paths so they can never drift.
144
+ function injectEmptyPlaceholder(headerOnlyBlock) {
145
+ return headerOnlyBlock.replace(
146
+ /^(##\s+\[[^\]]+\][^\n]*)\n+/,
147
+ '$1\n\n_No notable changes._\n\n',
148
+ );
149
+ }
150
+
151
+ function cmdRender(opts) {
152
+ const repo = path.resolve(opts.repo);
153
+ const changesetDir = path.join(repo, '.changeset');
154
+ const changelogPath = path.join(repo, 'CHANGELOG.md');
155
+ const fragmentFiles = listFragmentFiles(changesetDir);
156
+
157
+ const fragments = [];
158
+ const failures = [];
159
+ for (const file of fragmentFiles) {
160
+ const src = fs.readFileSync(file, 'utf8');
161
+ const r = parseFragment(src);
162
+ if (r.ok) fragments.push({ ...r.fragment, file });
163
+ else failures.push({ file: path.relative(repo, file), reason: r.reason, detail: r.detail || null });
164
+ }
165
+
166
+ // 1. parse-failure → exitCode 1 (unchanged).
167
+ if (failures.length > 0) {
168
+ return { exitCode: 1, report: { consumed: 0, failures } };
169
+ }
170
+
171
+ // 2. Read priorText once; reuse in all subsequent branches.
172
+ const priorText = fs.existsSync(changelogPath) ? fs.readFileSync(changelogPath, 'utf8') : '';
173
+
174
+ // Preview mode (#759): render the dated release section WITHOUT writing
175
+ // CHANGELOG.md and WITHOUT consuming .changeset fragments. Used by the rc
176
+ // release job to surface the curated notes for the version under test while
177
+ // leaving the fragment set intact for the eventual finalize render.
178
+ if (opts.preview) {
179
+ // priorChangelog is intentionally null: a preview shows ONLY the new dated
180
+ // section for the version under test, not the full file history.
181
+ // serializeChangelog appends priorChangelog verbatim, so passing the prior
182
+ // text here would dump every past release into the rc job summary.
183
+ const ir = renderChangelog({
184
+ fragments,
185
+ version: opts.version,
186
+ date: opts.date,
187
+ priorChangelog: null,
188
+ });
189
+ let releaseBlock = serializeChangelog(ir);
190
+ if (fragments.length === 0) {
191
+ // Mirror --allow-empty: a no-fragment release still shows a dated heading
192
+ // with a placeholder rather than an empty block.
193
+ releaseBlock = injectEmptyPlaceholder(releaseBlock);
194
+ }
195
+ return {
196
+ exitCode: 0,
197
+ report: {
198
+ consumed: 0,
199
+ failures: [],
200
+ preview: releaseBlock,
201
+ fragmentCount: fragments.length,
202
+ },
203
+ };
204
+ }
205
+
206
+ // 3. FIX 1: idempotency guard — if the version is already promoted (a dated
207
+ // release heading for this version already exists in CHANGELOG), split on
208
+ // whether fragments are still present:
209
+ // • alreadyPromoted + zero fragments → legitimate CI-retry no-op (the prior
210
+ // render commit already deleted fragments and wrote the heading).
211
+ // • alreadyPromoted + fragments present → inconsistent state: the heading
212
+ // was written out-of-band but fragments were never consumed. Fail loudly
213
+ // so the operator resolves it manually rather than silently leaving stale
214
+ // fragments to be re-consumed in a later release.
215
+ const version = stripV(opts.version);
216
+ const { releases: existingReleases } = parseChangelog(priorText);
217
+ const alreadyPromoted = existingReleases.some(
218
+ (rel) => rel.version === version && rel.date,
219
+ );
220
+ if (alreadyPromoted) {
221
+ if (fragments.length === 0) {
222
+ return { exitCode: 0, report: { consumed: 0, failures: [], alreadyPromoted: true } };
223
+ }
224
+ const errMsg =
225
+ `CHANGELOG.md already has a dated heading for ${version} but ` +
226
+ `${fragments.length} unconsumed fragment(s) remain in .changeset/ — ` +
227
+ `resolve manually (the version was likely promoted out-of-band).`;
228
+ return {
229
+ exitCode: 1,
230
+ report: { consumed: 0, failures: [], alreadyPromoted: true, error: errMsg },
231
+ };
232
+ }
233
+
234
+ // 4. Zero-fragment + !allowEmpty early-exit: write nothing.
235
+ if (fragments.length === 0) {
236
+ if (!opts.allowEmpty) {
237
+ return { exitCode: 0, report: { consumed: 0, failures: [] } };
238
+ }
239
+ // --allow-empty: emit a dated heading with a placeholder even though there
240
+ // are no fragments. This lets the render→verify CI chain succeed when a
241
+ // release contains no user-visible changes.
242
+ const { lead, prior } = splitChangelog(priorText);
243
+ // Build a header-only release block and inject the placeholder line.
244
+ const ir = renderChangelog({
245
+ fragments: [],
246
+ version: opts.version,
247
+ date: opts.date,
248
+ priorChangelog: prior || null,
249
+ });
250
+ const headerOnlyBlock = serializeChangelog(ir);
251
+ const releaseBlock = injectEmptyPlaceholder(headerOnlyBlock);
252
+ // FIX 2: use shared assembleChangelog helper.
253
+ const out = assembleChangelog(lead, releaseBlock);
254
+ fs.writeFileSync(changelogPath, out);
255
+ return {
256
+ exitCode: 0,
257
+ report: {
258
+ consumed: 0,
259
+ failures: [],
260
+ written: true,
261
+ release: { version: opts.version, date: opts.date },
262
+ },
263
+ };
264
+ }
265
+
266
+ // 5. Normal render path: fragments present — reuse priorText already read above.
267
+ const { lead, prior } = splitChangelog(priorText);
268
+
269
+ const ir = renderChangelog({
270
+ fragments,
271
+ version: opts.version,
272
+ date: opts.date,
273
+ priorChangelog: prior || null,
274
+ });
275
+ const releaseBlock = serializeChangelog(ir);
276
+ // FIX 2: use shared assembleChangelog helper.
277
+ const out = assembleChangelog(lead, releaseBlock);
278
+
279
+ fs.writeFileSync(changelogPath, out);
280
+
281
+ // Delete consumed fragments. If any unlink fails the changelog is written
282
+ // but the fragment is still on disk, so a re-run would double-consume it.
283
+ // Surface the partial-failure as exitCode=1 with structured detail so the
284
+ // operator can manually clean up before retrying.
285
+ const deleteFailures = [];
286
+ for (const f of fragments) {
287
+ try {
288
+ fs.unlinkSync(f.file);
289
+ } catch (e) {
290
+ deleteFailures.push({
291
+ file: path.relative(repo, f.file),
292
+ reason: 'fail_fragment_delete',
293
+ detail: e.code || e.message,
294
+ });
295
+ }
296
+ }
297
+
298
+ return {
299
+ exitCode: deleteFailures.length > 0 ? 1 : 0,
300
+ report: {
301
+ consumed: fragments.length - deleteFailures.length,
302
+ failures: deleteFailures,
303
+ release: { version: opts.version, date: opts.date },
304
+ },
305
+ };
306
+ }
307
+
308
+ function stripV(v) { return typeof v === 'string' ? v.replace(/^v/, '') : v; }
309
+
310
+ function resolveChangelogPath(opts) {
311
+ return opts.changelog
312
+ ? path.resolve(opts.changelog)
313
+ : path.join(path.resolve(opts.repo), 'CHANGELOG.md');
314
+ }
315
+
316
+ /**
317
+ * extract subcommand: extracts all changelog release blocks strictly after
318
+ * `--from` (exclusive) up to and including `--to` (inclusive). Both
319
+ * arguments accept `v`-prefixed semver (e.g. `v1.5.13`).
320
+ *
321
+ * Exit codes:
322
+ * 0 — one or more releases matched, output written.
323
+ * 2 — no releases fall in the specified range (matches nothing).
324
+ * 1 — I/O error or missing required flags.
325
+ *
326
+ * Fix for #3496: provides a deterministic range-aware helper so the
327
+ * `/gsd:update` show_changes_and_confirm step no longer relies on
328
+ * vague/manual extraction that can silently skip intermediate versions.
329
+ */
330
+ function cmdExtract(opts) {
331
+ const from = stripV(opts.fromRef);
332
+ const to = stripV(opts.toRef);
333
+
334
+ // Validate that both bounds are strict semver (N.N.N, digits only).
335
+ // Coercing a malformed bound like "1.41.x" to "1.41.0" makes range
336
+ // selection silently wrong; reject early with a structured error.
337
+ if (!isStableTripletSemver(from)) {
338
+ return {
339
+ exitCode: 1,
340
+ report: { error: `invalid semver for --from: "${from}" (expected N.N.N)`, releases: [] },
341
+ textOutput: null,
342
+ };
343
+ }
344
+ if (!isStableTripletSemver(to)) {
345
+ return {
346
+ exitCode: 1,
347
+ report: { error: `invalid semver for --to: "${to}" (expected N.N.N)`, releases: [] },
348
+ textOutput: null,
349
+ };
350
+ }
351
+
352
+ const changelogPath = resolveChangelogPath(opts);
353
+
354
+ if (!fs.existsSync(changelogPath)) {
355
+ return {
356
+ exitCode: 1,
357
+ report: { error: `CHANGELOG not found: ${changelogPath}`, releases: [] },
358
+ textOutput: null,
359
+ };
360
+ }
361
+
362
+ const text = fs.readFileSync(changelogPath, 'utf8');
363
+ const { releases } = parseChangelog(text);
364
+
365
+ const matched = releases.filter((rel) => {
366
+ if (rel.version === 'Unreleased') return false;
367
+ // Extract mode intentionally operates on stable releases only.
368
+ if (!isStableTripletSemver(rel.version)) {
369
+ process.stderr.write(`[extract] skipping pre-release/non-semver entry: ${rel.version}\n`);
370
+ return false;
371
+ }
372
+ // from is exclusive: cmp > 0 means rel.version > from
373
+ const afterFrom = compareSemverCore(rel.version, from) > 0;
374
+ // to is inclusive: cmp <= 0 means rel.version <= to
375
+ const upToTo = compareSemverCore(rel.version, to) <= 0;
376
+ return afterFrom && upToTo;
377
+ });
378
+
379
+ if (matched.length === 0) {
380
+ return {
381
+ exitCode: 2,
382
+ report: { releases: [], from, to },
383
+ textOutput: null,
384
+ };
385
+ }
386
+
387
+ return {
388
+ exitCode: 0,
389
+ report: { releases: matched, from, to },
390
+ textOutput: matched
391
+ .map((rel) => {
392
+ const header = `## [${rel.version}]${rel.date ? ` - ${rel.date}` : ''}`;
393
+ const sections = (rel.sections || [])
394
+ .map((s) => {
395
+ const bullets = s.bullets
396
+ .map((b) => (b.pr !== null ? `- ${b.body} (#${b.pr})` : `- ${b.body}`))
397
+ .join('\n');
398
+ return `### ${s.type}\n\n${bullets}`;
399
+ })
400
+ .join('\n\n');
401
+ return sections ? `${header}\n\n${sections}` : header;
402
+ })
403
+ .join('\n\n'),
404
+ };
405
+ }
406
+
407
+ function cmdVerify(opts) {
408
+ const version = stripV(opts.version);
409
+
410
+ if (!isStableTripletSemver(version)) {
411
+ return {
412
+ exitCode: 1,
413
+ report: { error: `invalid semver for --version: "${version}" (expected N.N.N)`, ok: false },
414
+ textOutput: null,
415
+ };
416
+ }
417
+
418
+ const changelogPath = resolveChangelogPath(opts);
419
+
420
+ if (!fs.existsSync(changelogPath)) {
421
+ return {
422
+ exitCode: 1,
423
+ report: { error: `CHANGELOG not found: ${changelogPath}`, ok: false },
424
+ textOutput: null,
425
+ };
426
+ }
427
+
428
+ const text = fs.readFileSync(changelogPath, 'utf8');
429
+ const { releases } = parseChangelog(text);
430
+
431
+ const match = releases.find((r) => r.version === version);
432
+
433
+ if (!match) {
434
+ return {
435
+ exitCode: 1,
436
+ report: {
437
+ error: `CHANGELOG.md has no \`## [${version}]\` release heading — promote [Unreleased] into a dated section before releasing (see #690)`,
438
+ ok: false,
439
+ },
440
+ textOutput: null,
441
+ };
442
+ }
443
+
444
+ if (!match.date) {
445
+ return {
446
+ exitCode: 1,
447
+ report: {
448
+ error: `CHANGELOG.md heading \`## [${version}]\` has no date — expected \`## [${version}] - YYYY-MM-DD\``,
449
+ ok: false,
450
+ },
451
+ textOutput: null,
452
+ };
453
+ }
454
+
455
+ return {
456
+ exitCode: 0,
457
+ report: { ok: true, version, date: match.date },
458
+ textOutput: `CHANGELOG.md has a dated heading for ${version} (${match.date})`,
459
+ };
460
+ }
461
+
462
+ function cmdGithubReleaseNotes(opts) {
463
+ const repo = path.resolve(opts.repo);
464
+ const report = renderGithubReleaseNotes({
465
+ repo,
466
+ fromRef: opts.fromRef,
467
+ toRef: opts.toRef,
468
+ repoSlug: opts.repoSlug,
469
+ installCommand: opts.installCommand,
470
+ });
471
+
472
+ if (!report.ok) {
473
+ return {
474
+ exitCode: 1,
475
+ report: {
476
+ consumed: 0,
477
+ failures: report.failures,
478
+ release: { from: opts.fromRef, to: opts.toRef },
479
+ },
480
+ };
481
+ }
482
+
483
+ if (opts.output) {
484
+ fs.writeFileSync(path.resolve(opts.output), report.body);
485
+ }
486
+
487
+ return {
488
+ exitCode: 0,
489
+ report: {
490
+ consumed: report.fragments.length,
491
+ failures: [],
492
+ release: { from: opts.fromRef, to: opts.toRef },
493
+ output: opts.output || null,
494
+ body: opts.output ? null : report.body,
495
+ },
496
+ };
497
+ }
498
+
499
+ function usage() {
500
+ return [
501
+ 'usage:',
502
+ ' changeset/cli.cjs render --repo <dir> --version V --date D [--allow-empty] [--preview] [--json]',
503
+ ' --preview renders the dated section to stdout without writing CHANGELOG.md or consuming fragments.',
504
+ ' changeset/cli.cjs github-release-notes --repo <dir> --from REF --to REF [--output FILE] [--repo-slug OWNER/REPO] [--install-command CMD] [--json]',
505
+ ' changeset/cli.cjs extract --from VERSION --to VERSION [--changelog FILE] [--repo <dir>] [--json]',
506
+ ' Extracts changelog entries strictly after --from (exclusive) and up to',
507
+ ' and including --to (inclusive). Accepts v-prefixed versions.',
508
+ ' Exit 2 when no releases fall in range.',
509
+ ' changeset/cli.cjs verify --version <X.Y.Z> [--changelog <path>] Exit non-zero if CHANGELOG.md has no dated `## [X.Y.Z]` heading (release gate, #690)',
510
+ '',
511
+ ].join('\n');
512
+ }
513
+
514
+ function main() {
515
+ const parsed = parseArgs(process.argv.slice(2));
516
+ if (!parsed.ok) {
517
+ process.stderr.write(`${parsed.error}\n`);
518
+ process.stderr.write(usage());
519
+ throw new ExitError(2);
520
+ }
521
+ const { opts } = parsed;
522
+ if (opts.cmd !== 'render' && opts.cmd !== 'github-release-notes' && opts.cmd !== 'extract' && opts.cmd !== 'verify') {
523
+ process.stderr.write(usage());
524
+ throw new ExitError(1);
525
+ }
526
+ if (opts.cmd === 'render' && (!opts.version || !opts.date)) {
527
+ throw new ExitError(2, '--version and --date are required for render');
528
+ }
529
+ if (opts.cmd === 'github-release-notes' && (!opts.fromRef || !opts.toRef)) {
530
+ throw new ExitError(2, '--from and --to are required for github-release-notes');
531
+ }
532
+ if (opts.cmd === 'extract' && (!opts.fromRef || !opts.toRef)) {
533
+ process.stderr.write('--from and --to are required for extract\n');
534
+ process.stderr.write(usage());
535
+ throw new ExitError(1);
536
+ }
537
+ if (opts.cmd === 'verify' && !opts.version) {
538
+ throw new ExitError(2, '--version is required for verify');
539
+ }
540
+
541
+ if (opts.cmd === 'extract') {
542
+ const { exitCode, report, textOutput } = cmdExtract(opts);
543
+ if (opts.json) {
544
+ process.stdout.write(JSON.stringify(report, null, 2) + '\n');
545
+ } else if (textOutput) {
546
+ process.stdout.write(textOutput + '\n');
547
+ } else if (exitCode === 2) {
548
+ process.stderr.write(`no releases found in range (from=${report.from}, to=${report.to})\n`);
549
+ }
550
+ return exitCode;
551
+ }
552
+
553
+ if (opts.cmd === 'verify') {
554
+ const { exitCode, report, textOutput } = cmdVerify(opts);
555
+ if (opts.json) {
556
+ process.stdout.write(JSON.stringify(report, null, 2) + '\n');
557
+ } else if (textOutput) {
558
+ process.stdout.write(textOutput + '\n');
559
+ } else {
560
+ process.stderr.write(report.error + '\n');
561
+ }
562
+ return exitCode;
563
+ }
564
+
565
+ const { exitCode, report } = opts.cmd === 'render' ? cmdRender(opts) : cmdGithubReleaseNotes(opts);
566
+ if (opts.json) {
567
+ process.stdout.write(JSON.stringify(report, null, 2) + '\n');
568
+ } else if (opts.cmd === 'render' && opts.preview) {
569
+ // render --preview: emit the rendered section verbatim (no mutation occurred).
570
+ process.stdout.write(report.preview);
571
+ } else if (opts.cmd === 'github-release-notes' && report.body) {
572
+ process.stdout.write(report.body);
573
+ } else {
574
+ if (report.error) {
575
+ process.stderr.write(`${report.error}\n`);
576
+ }
577
+ process.stdout.write(`Consumed: ${report.consumed} fragment(s)\n`);
578
+ if (report.failures.length > 0) {
579
+ process.stdout.write(`Failures: ${report.failures.length}\n`);
580
+ for (const f of report.failures) {
581
+ process.stdout.write(` ${f.file}: ${f.reason}${f.detail ? ` (${f.detail})` : ''}\n`);
582
+ }
583
+ }
584
+ }
585
+ return exitCode;
586
+ }
587
+
588
+ if (require.main === module) runMain(main);
589
+
590
+ module.exports = { cmdRender, cmdExtract, cmdVerify, cmdGithubReleaseNotes, parseArgs, splitChangelog, assembleChangelog, listFragmentFiles, usage };