gsd-antigravity-kit 1.32.0 → 2.0.0

package/.agent/skills/gsd/bin/lib/security.cjs

@@ -152,6 +152,25 @@ const INJECTION_PATTERNS = [
   /(?:run|execute|call|invoke)\s+(?:the\s+)?(?:bash|shell|exec|spawn)\s+(?:tool|command)/i,
 ];
 
+/**
+ * Layer 2: Encoding-obfuscation patterns with custom finding messages.
+ * Each entry: { pattern: RegExp, message: string }
+ */
+const OBFUSCATION_PATTERN_ENTRIES = [
+  {
+  pattern: /\b(\w\s){4,}\w\b/,
+  message: 'Character-spacing obfuscation pattern detected (e.g. "i g n o r e")',
+  },
+  {
+  pattern: /<\/?(system|human|assistant|user)\s*>/i,
+  message: 'Delimiter injection pattern: <system>/<assistant>/<user> tag detected',
+  },
+  {
+  pattern: /0x[0-9a-fA-F]{16,}/,
+  message: 'Long hex sequence detected — possible encoded payload',
+  },
+];
+
 /**
  * Scan text for potential prompt injection patterns.
  * Returns an array of findings (empty = clean).
@@ -174,6 +193,13 @@ function scanForInjection(text, opts = {}) {
   }
   }
 
+  // Layer 2: encoding-obfuscation patterns with custom messages
+  for (const entry of OBFUSCATION_PATTERN_ENTRIES) {
+  if (entry.pattern.test(text)) {
+    findings.push(entry.message);
+  }
+  }
+
   if (opts.strict) {
   // Check for suspicious Unicode that could hide instructions
   // (zero-width chars, RTL override, homoglyph attacks)
@@ -181,6 +207,12 @@ function scanForInjection(text, opts = {}) {
     findings.push('Contains suspicious zero-width or invisible Unicode characters');
   }
 
+  // Layer 1: Unicode tag block U+E0000–U+E007F (2025 supply-chain attack vector)
+  // These characters are invisible and can embed hidden instructions
+  if (/[\uDB40\uDC00-\uDB40\uDC7F]/u.test(text) || /[\u{E0000}-\u{E007F}]/u.test(text)) {
+    findings.push('Contains Unicode tag block characters (U+E0000–E007F) — invisible instruction injection vector');
+  }
+
   // Check for extremely long strings that could be prompt stuffing.
   // Normalize CRLF → LF before measuring so Windows checkouts don't inflate the count.
   const normalizedLength = text.replace(/\r\n/g, '\n').replace(/\r/g, '\n').length;
@@ -361,6 +393,87 @@ function validateFieldName(field) {
   return { valid: false, error: `Invalid field name: "${field}"` };
 }
 
+// ─── Layer 3: Structural Schema Validation ───────────────────────────────────
+
+const KNOWN_VALID_TAGS = new Set([
+  'objective', 'process', 'step', 'success_criteria', 'critical_rules',
+  'available_agent_types', 'purpose', 'required_reading',
+]);
+
+/**
+ * Validate the XML structure of a prompt file.
+ * For agent/workflow files, flags any XML tag not in the known-valid set.
+ *
+ * @param {string} text - The file content to validate
+ * @param {'agent'|'workflow'|'unknown'} fileType - The type of prompt file
+ * @returns {{ valid: boolean, violations: string[] }}
+ */
+function validatePromptStructure(text, fileType) {
+  if (!text || typeof text !== 'string') {
+  return { valid: true, violations: [] };
+  }
+
+  if (fileType !== 'agent' && fileType !== 'workflow') {
+  return { valid: true, violations: [] };
+  }
+
+  const violations = [];
+  const tagRegex = /<([A-Za-z][A-Za-z0-9_-]*)/g;
+  let match;
+  while ((match = tagRegex.exec(text)) !== null) {
+  const tag = match[1].toLowerCase();
+  if (!KNOWN_VALID_TAGS.has(tag)) {
+    violations.push(`Unknown XML tag in ${fileType} file: <${tag}>`);
+  }
+  }
+
+  return { valid: violations.length === 0, violations };
+}
+
+// ─── Layer 4: Paragraph-Level Entropy Anomaly Detection ─────────────────────
+
+function shannonEntropy(text) {
+  if (!text || text.length === 0) return 0;
+  const freq = {};
+  for (const ch of text) {
+  freq[ch] = (freq[ch] || 0) + 1;
+  }
+  const len = text.length;
+  let entropy = 0;
+  for (const count of Object.values(freq)) {
+  const p = count / len;
+  entropy -= p * Math.log2(p);
+  }
+  return entropy;
+}
+
+/**
+ * Scan text for paragraphs with anomalously high Shannon entropy.
+ *
+ * @param {string} text - The text to scan
+ * @returns {{ clean: boolean, findings: string[] }}
+ */
+function scanEntropyAnomalies(text) {
+  if (!text || typeof text !== 'string') {
+  return { clean: true, findings: [] };
+  }
+
+  const findings = [];
+  const paragraphs = text.split(/\n\n+/);
+
+  for (const para of paragraphs) {
+  if (para.length <= 50) continue;
+  const entropy = shannonEntropy(para);
+  if (entropy > 5.5) {
+    findings.push(
+    `High-entropy paragraph detected (${entropy.toFixed(2)} bits/char) — possible encoded payload`
+    );
+  }
+  }
+
+  return { clean: findings.length === 0, findings };
+}
+
 module.exports = {
   // Path safety
   validatePath,
@@ -381,4 +494,10 @@ module.exports = {
   // Input validation
   validatePhaseNumber,
   validateFieldName,
+
+  // Structural validation (Layer 3)
+  validatePromptStructure,
+
+  // Entropy anomaly detection (Layer 4)
+  scanEntropyAnomalies,
 };

package/.agent/skills/gsd/bin/lib/verify.cjs

@@ -5,7 +5,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
-const { safeReadFile, loadConfig, normalizePhaseName, escapeRegex, execGit, findPhaseInternal, getMilestoneInfo, stripShippedMilestones, extractCurrentMilestone, planningDir, planningRoot, output, error, checkAgentsInstalled } = require('./core.cjs');
+const { safeReadFile, loadConfig, normalizePhaseName, escapeRegex, execGit, findPhaseInternal, getMilestoneInfo, stripShippedMilestones, extractCurrentMilestone, planningDir, planningRoot, output, error, checkAgentsInstalled, CONFIG_DEFAULTS } = require('./core.cjs');
 const { extractFrontmatter, parseMustHavesBlock } = require('./frontmatter.cjs');
 const { writeStateMd } = require('./state.cjs');
 
@@ -777,7 +777,7 @@ function cmdValidateHealth(cwd, options, raw) {
       if (statusVal !== 'complete' && statusVal !== 'done') {
       addIssue('warning', 'W011',
         `STATE.md says current phase is ${statePhase} (status: ${statusVal || 'unknown'}) but ROADMAP.md shows it as [x] complete — state files may be out of sync`,
-        'Run /gsd:progress to re-derive current position, or manually update STATE.md');
+        'Run /gsd-progress to re-derive current position, or manually update STATE.md');
       }
     }
     }
@@ -831,21 +831,21 @@ function cmdValidateHealth(cwd, options, raw) {
       case 'createConfig':
       case 'resetConfig': {
       const defaults = {
-        model_profile: 'balanced',
-        commit_docs: true,
-        search_gitignored: false,
-        branching_strategy: 'none',
-        phase_branch_template: 'gsd/phase-{phase}-{slug}',
-        milestone_branch_template: 'gsd/{milestone}-{slug}',
-        quick_branch_template: null,
+        model_profile: CONFIG_DEFAULTS.model_profile,
+        commit_docs: CONFIG_DEFAULTS.commit_docs,
+        search_gitignored: CONFIG_DEFAULTS.search_gitignored,
+        branching_strategy: CONFIG_DEFAULTS.branching_strategy,
+        phase_branch_template: CONFIG_DEFAULTS.phase_branch_template,
+        milestone_branch_template: CONFIG_DEFAULTS.milestone_branch_template,
+        quick_branch_template: CONFIG_DEFAULTS.quick_branch_template,
         workflow: {
-        research: true,
-        plan_check: true,
-        verifier: true,
-        nyquist_validation: true,
+        research: CONFIG_DEFAULTS.research,
+        plan_check: CONFIG_DEFAULTS.plan_checker,
+        verifier: CONFIG_DEFAULTS.verifier,
+        nyquist_validation: CONFIG_DEFAULTS.nyquist_validation,
         },
-        parallelization: true,
-        brave_search: false,
+        parallelization: CONFIG_DEFAULTS.parallelization,
+        brave_search: CONFIG_DEFAULTS.brave_search,
       };
       fs.writeFileSync(configPath, JSON.stringify(defaults, null, 2), 'utf-8');
       repairActions.push({ action: repair, success: true, path: 'config.json' });

package/.agent/skills/gsd/migration_report.md

@@ -0,0 +1,7 @@
+# GSD Migration Report
+
+- **Timestamp**: 2026-04-08T07:18:24.858917
+- **Version**: 1.34.2 -> 1.34.2
+- **Skill Name**: gsd
+
+✅ All recognized source directories were successfully mapped and migrated.