fix(cli): narrow auto_setup gate — broad gate caused hours-long CI hang

[Wolfvin]

Mengapa

CI HEAD 3d8e0ee (dan #270-era) STUCK 123+ menit di step "Scan codebase" (Quality Gate) DAN "Run test suite" (CI) — bukan infinite loop, tapi mass-scanning.

Root cause = regresi dari PR #270 saya. Saat memperbaiki regresi _auto_setup #244, saya bikin gate terlalu luas:

_NON_REGISTRY_COMMANDS = {"scan", "plugin", "lsp"}
if args.command not in _NON_REGISTRY_COMMANDS and not _registry_exists(workspace): _auto_setup(...)

Efek: SETIAP command (termasuk semua hidden leaf: check/analyze/entrypoints/list/query/...) yang dipanggil di workspace tanpa registry kini auto-scan dulu. Ratusan command-test × scan (di CI ~300s per scan repo-size) → suite meledak dari 164s (run baik 763ed95, sebelum #270) jadi berjam-jam.

Bukti

• Run baik 164s = HEAD 763ed95 (Merge fix(test): normalize path separator in graph_edges query (closes #268) #269, sebelum fix: sarif f-string SyntaxError + _auto_setup gate regression (unmasked by #266) #270), set sempit {11 umbrella}.
• Setelah fix: sarif f-string SyntaxError + _auto_setup gate regression (unmasked by #266) #270 broad gate: test_cli.py sendiri 161s lokal; CI stuck 123 menit.
• Narrow fix: full suite lokal 346s selesai (bukan hang), TestAutoSetupFallbackCap tetap lolos, 0 failure baru.

Perbaikan

Kembalikan ke allowlist eksplisit sempit: 11 umbrella + list/query/symbols (hidden command yang memang baca registry & dibutuhkan TestAutoSetupFallbackCap). BUKAN "semua kecuali 3". Command seperti check/analyze/entrypoints tidak lagi auto-scan.

Pelajaran

_REGISTRY_COMMANDS menggigit 2× (#244 over-reduce, #270 over-broaden). Allowlist sempit eksplisit — jangan "exclude a few".

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud