Tianyi Cui 55fca161e6 cleanup(config): remove textual process env audit ...

The gate treated a literal process.env substring search as repository-wide source-ownership enforcement. It missed equivalent syntax while matching comments and strings, so the allowlist projected a security guarantee the implementation could not provide.

Remove the scanner and its allowlist. Keep the independently useful shipped-config inline tripwire, and narrow both the module contract and bilingual Agent Note to its actual source-shape claim.

2026-08-07 21:05:04 +08:00

..

fixtures/translation-prompt

fix(i18n): harden prompt response handling

2026-07-23 23:12:56 +08:00

snapshots

docs: profile scheme across guides, notes, and generated catalogs; Agent Note

2026-08-06 06:29:06 +08:00

agent-note-tree.ts

fix(notes): keep archive helpers internal

2026-07-26 23:29:46 +08:00

AGENTS.md

docs(windows): clarify portability rules

2026-07-18 13:03:44 +08:00

archived-agent-notes.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/archive-agent-notes-20260726

2026-07-27 00:53:07 +08:00

archived-agent-notes.ts

fix(notes): anchor archive seals to prior Git state

2026-07-27 00:01:39 +08:00

attribute-chunk-bytes.mjs

build(web): react-free vendor list for the incremental markdown pipeline, npmPackageOf scoped guard, chunk audit script

2026-08-06 16:38:25 +08:00

build-exe-for-python-sdk.ts

cleanup: remove TUI package and legacy dsh entrypoints

2026-08-04 13:20:28 +08:00

build-python-release.py

cleanup(build): minimize native payload handling

2026-07-30 01:29:18 +08:00

change-scope.spec.ts

refactor(dev-infra): narrow change scope report

2026-07-28 01:02:43 +08:00

change-scope.ts

refactor(dev-infra): narrow change scope report

2026-07-28 01:02:43 +08:00

check-expected-filenames.sh

ci: reject golden filenames on matching PRs

2026-07-19 21:24:42 +08:00

check-vendor-manifest.sh

Add lefthook git hooks with a vendor-manifest guard

2026-06-11 15:07:55 +08:00

check-workspace-constraints.ts

refactor(cli)!: namespace the profile and bundle manifests under dsh.profile and dsh.bundle

2026-08-06 17:28:30 +08:00

ci-workflow.spec.ts

fix(ci): isolate pnpm setup per runner

2026-07-29 00:45:52 +08:00

clean.spec.ts

fix(build): contain clean targets within repository

2026-07-26 02:51:58 +08:00

clean.ts

fix(build): contain clean targets within repository

2026-07-26 02:51:58 +08:00

client-bundle-css.spec.ts

feat(ui): complete trajectory request inspection

2026-07-28 09:53:32 +08:00

client-bundle-purity.spec.ts

fix(client): load plugin bundles as external scripts

2026-08-04 14:18:47 +08:00

client-tsconfig.spec.ts

fix(ci): make local Wine gate portable on macOS

2026-07-27 18:43:00 +08:00

cordis-config-files.spec.ts

Stabilize master CI across platforms

2026-07-25 00:10:37 +08:00

cordis-config-files.ts

fix(ci): ignore translation records in Cordis config scan

2026-07-23 00:39:55 +08:00

cordis-core-api.spec.ts

docs: restore generated Cordis core API

2026-07-20 16:33:44 +08:00

cordis-core-api.ts

docs: restore generated Cordis core API

2026-07-20 16:33:44 +08:00

cordis-walk.ts

refactor(cordis): generate catalogs from Typert models

2026-07-29 23:55:12 +08:00

coverage-exempt.spec.ts

fix(ci): review follow-ups for the coverage lane split

2026-07-31 02:55:37 +08:00

coverage-exempt.ts

ci: run coverage-exempt heavy suites uninstrumented in parallel

2026-07-31 02:55:37 +08:00

coverage-uncovered-locations.cjs

ci: print exact uncovered locations when the coverage gate fails

2026-08-06 03:18:17 +08:00

demo-code-mode.mjs

fix(cli): close shared config review gaps

2026-07-30 14:56:39 +08:00

demo-cordis.mjs

feat(cli)!: dsh boots profiles; plugin subcommand manages them via pnpm

2026-08-06 06:29:06 +08:00

dev-web.spec.ts

fix(web): verify current GUI updates end to end

2026-07-29 11:22:48 +08:00

dev-web.ts

fix(web): verify current GUI updates end to end

2026-07-29 11:22:48 +08:00

doc-budgets.manifest.json

docs: define hierarchy and document forms

2026-08-05 16:13:27 +08:00

doc-typecheck-paths.spec.ts

fix(docs): map exact source aliases in built checks

2026-07-19 19:26:38 +08:00

doc-typecheck-paths.ts

feat(gui): step1 skeleton — dsc web serves built web UI over booted harness host

2026-07-22 16:24:44 +08:00

doc-typecheck.ts

Merge remote-tracking branch 'origin/master' into nih-imp-gates

2026-07-27 06:21:53 +08:00

gen-config-catalog.ts

Rename RFCs to Agent Notes

2026-07-19 22:52:03 +08:00

gen-cordis-api.ts

refactor(cordis): generate catalogs from Typert models

2026-07-29 23:55:12 +08:00

gen-cordis-catalog.ts

Merge branch 'claude/web-llm-pi-ai-config-385e24' into claude/pi-ai-model-discovery

2026-08-06 13:05:15 +08:00

gen-doc-graphs.spec.ts

fix(scripts): share package-source selection to clear the jscpd clone

2026-07-30 19:57:17 +08:00

gen-doc-graphs.ts

Merge retargeted parent into Claude Code subagent provider

2026-08-06 21:38:47 +08:00

gen-module-graph.ts

refactor(acp): reduce bridge to automation protocol

2026-07-24 01:40:25 +08:00

gen-persistence-catalog.ts

docs(notes): aggressive archive sweep of low-value decision records

2026-07-28 00:00:51 +08:00

gen-scoped-events.ts

refactor(tsconfig): single root solution graph over host/client aggregates

2026-07-23 03:59:05 +08:00

gen-third-party-notices.spec.ts

fix(subagent-claude-code): tighten provider evidence

2026-08-05 07:32:27 +08:00

gen-third-party-notices.ts

Merge retargeted parent into Claude Code subagent provider

2026-08-06 21:38:47 +08:00

gen-tool-catalog.ts

Merge pull request #1080 from deepseek-harness/feat/py-types-code-mode

2026-08-07 13:14:41 +08:00

gen-translation-brief.ts

feat(i18n): unit-mapped briefings with mechanical --apply, adopting the #684 planner mechanics

2026-07-27 02:31:07 +08:00

hero-composer-dom-continuity.mjs

docs(web): the composer bar is one session-maybe slot, not a swapped pair

2026-07-30 15:18:06 +08:00

install-lefthook.mjs

Merge remote-tracking branch 'origin/master' into xtr/react-loop-simplification

2026-07-31 22:16:40 +08:00

install-lefthook.spec.ts

Merge remote-tracking branch 'origin/master' into xtr/react-loop-simplification

2026-07-31 22:16:40 +08:00

install.sh

fix: retire leftovers of the removed $DSH_HOME/config.yaml personal overlay

2026-08-06 17:28:58 +08:00

jsdoc.ts

feat: slash system / input service / agent scope

2026-07-27 03:28:39 +08:00

lint-rule-fingerprint.spec.ts

test: make lint profile fingerprint honest

2026-07-29 23:26:16 +08:00

markdown.ts

fix(scripts): address review findings on the gate consolidation

2026-07-27 12:02:39 +08:00

migrate-packed-session-fixtures.ts

feat(session): default JSONL writes to packed rows

2026-07-26 23:44:52 +08:00

oxlint-contract.spec.ts

fix: allow ignored-only staged lint

2026-07-29 23:36:08 +08:00

package-graph.ts

fix: normalize glob paths with split(sep).join('/') on Windows

2026-07-15 19:11:20 +08:00

package-invariants.spec.ts

fix(packages): omit source publication payloads

2026-08-05 01:15:19 +08:00

package-invariants.ts

fix(invariants): harden runtime contracts and gates

2026-07-21 00:25:38 +08:00

paired-markdown-derivatives.spec.ts

docs: deduplicate paired code-block checks

2026-07-26 02:52:48 +08:00

paired-markdown-derivatives.ts

docs: deduplicate paired code-block checks

2026-07-26 02:52:48 +08:00

prepare-ci-bubblewrap.sh

docs: record final larger-runner evidence

2026-07-22 16:55:39 +08:00

project-doc-site.spec.ts

fix(scripts): only publish images the repository owns, and keep their suffix

2026-08-06 21:14:39 +08:00

project-doc-site.ts

fix(scripts): only publish images the repository owns, and keep their suffix

2026-08-06 21:14:39 +08:00

publication-payload.spec.ts

fix(packages): omit source publication payloads

2026-08-05 01:15:19 +08:00

publication-payload.ts

fix(packages): omit source publication payloads

2026-08-05 01:15:19 +08:00

publint-all.spec.ts

feat(dev-infra): make gate plans inspectable and replayable

2026-07-27 21:27:42 +08:00

publint-all.ts

fix(scripts): address review findings on the gate consolidation

2026-07-27 12:02:39 +08:00

publish-npm-baseline.ts

fix(npm): promote dsh after baseline publication

2026-08-05 01:44:13 +08:00

repo-files.ts

Merge remote-tracking branch 'origin/master' into worktree/archive-agent-notes-20260726

2026-07-27 00:53:07 +08:00

run-gates.spec.ts

fix(subagent): complete product provider lifecycle

2026-08-04 22:18:35 +08:00

run-gates.ts

Merge remote-tracking branch 'origin/master' into claude/unified-environment-credentials-c8841a

2026-08-06 22:34:46 +08:00

run-oxlint.spec.ts

refactor: centralize Oxlint worker bounds

2026-07-29 23:39:49 +08:00

run-oxlint.ts

refactor: centralize Oxlint worker bounds

2026-07-29 23:39:49 +08:00

session-fixture-layout.snapshot.ts

feat(session): default JSONL writes to packed rows

2026-07-26 23:44:52 +08:00

session-fixture-layout.spec.ts

fix(scripts): complete fixture migration diagnostics

2026-07-27 03:54:33 +08:00

session-fixture-layout.ts

fix(scripts): complete fixture migration diagnostics

2026-07-27 03:54:33 +08:00

smoke-python-runtime.py

Merge branch 'worktree-llm-dynamic-config' into worktree-llm-web-config

2026-07-30 20:15:40 +08:00

test-invariants.spec.ts

fix(test): preserve invariant config failures

2026-07-31 10:41:44 +08:00

test-invariants.ts

fix(test): preserve invariant config failures

2026-07-31 10:41:44 +08:00

translation-brief.spec.ts

feat(i18n): unit-mapped briefings with mechanical --apply, adopting the #684 planner mechanics

2026-07-27 02:31:07 +08:00

translation-brief.ts

feat(i18n): unit-mapped briefings with mechanical --apply, adopting the #684 planner mechanics

2026-07-27 02:31:07 +08:00

translation-pairing-git.ts

fix(i18n): pin translation snapshots against gc

2026-07-28 10:28:49 -07:00

translation-pairing.manifest.json

docs(subprocess): bilingual pair for the consumer-migration Agent Note

2026-07-26 15:51:24 +08:00

translation-pairing.spec.ts

fix(i18n): pin translation snapshots against gc

2026-07-28 10:28:49 -07:00

translation-pairing.ts

Merge remote-tracking branch 'origin/master' into worktree-i18n-update-workflow

2026-07-27 09:39:54 +08:00

translation-prompt.snapshot.ts

fix(i18n): complete prompt v4 pipeline path

2026-07-23 22:41:53 +08:00

translation-prompt.spec.ts

docs(i18n): proofread active Chinese documentation

2026-08-04 17:36:14 +08:00

translation-prompt.ts

fix(i18n): harden prompt response handling

2026-07-23 23:12:56 +08:00

ts-project.ts

fix(build): reuse TypeScript config host

2026-07-26 00:30:20 +08:00

type-equiv.manifest.json

Merge remote-tracking branch 'github/master' into feat/agent-event-payload

2026-08-06 17:10:01 +08:00

verify-agent-note-classification.ts

Remove generated Agent Note index

2026-07-19 23:15:23 +08:00

verify-agent-note-format.ts

Remove generated Agent Note index

2026-07-19 23:15:23 +08:00

verify-archived-agent-notes.ts

fix(notes): anchor archive seals to prior Git state

2026-07-27 00:01:39 +08:00

verify-built-package-invariants.mjs

refactor(scripts): consolidate gate scripts on mdast fences, parseArgs, and globSync

2026-07-26 23:14:28 +08:00

verify-built-package-invariants.spec.ts

ci: enforce bounded build lanes

2026-07-21 20:15:09 +08:00

verify-client-domain-graph.ts

refactor(scripts): consolidate gate scripts on mdast fences, parseArgs, and globSync

2026-07-26 23:14:28 +08:00

verify-config-source-ownership.ts

cleanup(config): remove textual process env audit

2026-08-07 21:05:04 +08:00

verify-cordis-config.ts

refactor(cli): simplify profile composition and dump paths

2026-08-06 09:53:49 +08:00

verify-doc-budgets.ts

docs: rebalance prose cleanup and add trimming skill

2026-07-13 23:27:00 +08:00

verify-doc-refs.ts

Rename RFCs to Agent Notes

2026-07-19 22:52:03 +08:00

verify-export-jsdoc.ts

refactor: migrate linting to Oxlint

2026-07-29 14:32:11 +08:00

verify-md-links.ts

feat(skills): bundle and harden personal maintenance workflows

2026-07-27 18:53:30 +08:00

verify-md-wrap.ts

docs(notes): archive low-value decision records

2026-07-26 23:06:00 +08:00

verify-mermaid.ts

feat(skills): bundle and harden personal maintenance workflows

2026-07-27 18:53:30 +08:00

verify-node-next-types.ts

fix(scripts): run publint/tsc via node JS entry, not a shell .cmd shim

2026-07-15 16:38:22 +08:00

verify-package-invariants.ts

feat(invariants): implement package runtime checks

2026-07-20 00:38:37 +08:00

verify-package-paths.ts

Merge remote-tracking branch 'origin/master' into nih-imp-gates

2026-07-27 06:21:53 +08:00

verify-package-readme-limitations.ts

Rename RFCs to Agent Notes

2026-07-19 22:52:03 +08:00

verify-package-readme-model-experience.ts

Merge remote-tracking branch 'origin/master' into claude/unified-environment-credentials-c8841a

2026-08-06 21:34:45 +08:00

verify-runtime-closure.ts

refactor(scripts): consolidate gate scripts on mdast fences, parseArgs, and globSync

2026-07-26 23:14:28 +08:00

verify-translation-pairing.ts

fix(i18n): persist uncommitted translation snapshots

2026-07-28 04:34:05 -07:00

verify-translation-prompt.ts

fix(i18n): harden prompt response handling

2026-07-23 23:12:56 +08:00

verify-type-equiv.ts

fix(scripts): address review findings on the gate consolidation

2026-07-27 12:02:39 +08:00

verify-vendored-links.ts

fix(review): label host-preparation failures and gate vendored lockfile links

2026-08-02 01:25:01 +08:00

vitest-environment.compat.spec.ts

fix(test): isolate jsdom storage on Node 26

2026-07-30 21:49:33 +08:00

wine-windows-gates.sh

fix(ci): retry the Wine lane's pnpm install on the hoisted-linker rename race

2026-07-28 16:16:10 +08:00