Skip to content

agent-semgrep-v1.0.0

Choose a tag to compare

@github-actions github-actions released this 03 Aug 23:04
· 57 commits to main since this release

1.0.0 (2026-08-03)

⚠ BREAKING CHANGES

  • cli: audit-command.ts is now a thin wrapper around
    AuditOrchestrator.run() instead of calling SourceAuditorModule directly.

Changes:

  • DI: added getAuditOrchestrator() to dependency-injection.ts
  • Removed legacy flags: --target, --detector, --max-findings, --group-by, --summary
  • Added --agent flag for filtering to specific agent
  • Exit code from policyDecision.decision (block=1, pass=0)
  • Output formatting adapted for AuditOrchestrationResult
  • Waive subcommand unchanged

Code reduction: 628 → ~340 lines (-46%)
Tests: 19 passing, AORCH-C1..C6 covered

  • fix(cli): audit fixes — mock type, --quiet desc, EARS-C11 getAuditOrchestrator test

  • test(e2e): Block G (CG9-CG16) + Block H (CH1-CH4) — 12 new E2E tests

Block G — Audit Orchestration (CG9-CG16):

  • CG9: SarifBuilder.validate() passes on agent output
  • CG10: Content-based fingerprints stable across line numbers
  • CG11: Flat gitgov/ property keys in SARIF results
  • CG12: Multi-agent execution with dedup consolidation
  • CG13: Failed agent doesn't block remaining agents
  • CG14: Duplicate findings deduplicated with reportedBy[]
  • CG15: Zero findings skips conditional heuristic stage
  • CG16: Findings trigger subsequent detection stages

Block H — Policy Evaluation (CH1-CH4):

  • CH1: ExecutionRecord type decision with BLOCK result
  • CH2: ExecutionRecord type decision with PASS result
  • CH3: Waived findings excluded from policy decision
  • CH4: ExecutionRecord has complete structure for Ed25519 signing

All 20 E2E tests passing (8 existing + 12 new).

  • fix(tests): fold E4b/P1b into parents, remove PSV2-A9 duplicate

  • docs(core): clarify PolicyEvaluationResult re-export boundary in orchestrator types

  • feat(core): create policy.yml during project initialization (EARS-FPI14)

FsProjectInitializer.createProjectStructure() now creates .gitgov/policy.yml
with default configuration (version: "1.0", failOn: critical).
Does not overwrite existing policy.yml on re-initialization.

2 new tests: [EARS-FPI14] create + no-overwrite. 26/26 passing.

  • fix(core): FPI14 use async fs.access instead of sync existsSync, fix test mocks

  • test(e2e): verify policy.yml creation during gitgov init (EARS-FPI14)

  • epic: IndexerAdapter now requires cacheStore: Store
    instead of deprecated cacheStrategy/cachePath/cacheSize options.

Core (Triad 1 - indexer_adapter):

  • Remove FileIndexerAdapter, use IndexerAdapter with Store
  • Make cacheStore REQUIRED dependency (no backward compatibility)
  • Remove backup mechanism (EARS-14) - cache is regenerable data
  • Simplify cache operations via Store.put/get/delete/exists
  • Update all 77 tests to use mock cacheStore

CLI (Triad 2 - indexer-command):

  • Remove cacheSize/cacheStrategy handling from output formatting
  • Update tests to match simplified report structure (34 tests)

Store:

  • Export IndexData type for external usage

Audit: Both triads verified coherent (Blueprint ↔ Code ↔ Tests)

  • feat(cli): add dependency_injection_module blueprint and update tests

Triad 3 - DependencyInjectionService:

  • New blueprint following module_designer_v2 template
  • Update test EARS naming to block format (A1-A2, B1-B4, etc.)
  • Add EARS-F1 test for validation when .gitgov exists
  • 10 tests passing, 19 EARS total in blueprint

EARS coverage:

  • Singleton (A1-A2): ✅ Complete
  • Store Init (B1-B4): 🟡 2/4
  • Adapter Factories (C1-C8): 🟡 2/8
  • Bootstrap Reindex (D1-D2): ✅ Complete
  • Error Handling (E1-E4): 🟡 2/4
  • Validation (F1-F2): ✅ Complete
  • test(cli): remove deprecated cache fields from test mocks

Remove cacheStrategy and cacheSize from IndexGenerationReport mocks
in dashboard and task command tests. These fields were removed as
part of the Store abstraction migration.

  • refactor: migrate agent prompts to blueprints submodule
  • Move docs/gitgov_agent_prompt.md → blueprints/02_agents/design/gitgov_agent.md
  • Rename packages/core/prompts/gitgov_agent_prompt.md → gitgov_agent.md
  • Update sync-prompts.ts to use new location in blueprints

This consolidates all agent definitions in the blueprints submodule.

  • docs(core,cli): standardize README sections
  • Add Contributing, Security, Community, License, Links sections to both
  • Remove redundant implementation status sections from CLI README
  • Align footer format across packages
  • chore: update blueprints submodule

  • refactor(core): normalize EARS IDs in ConfigManager triada

Normalized all EARS IDs from numeric to letter-block format across
Blueprint, Code, and Tests for better section association.

Changes:

  • Blueprint: EARS-1..26, EARS-53 → EARS-A1..D3
  • Tests: Updated all 44 test EARS references
  • Code: EARS-53 → EARS-B9 (actor auto-detection)

Triada coherence verified: Blueprint ↔ Code ↔ Tests aligned.

  • refactor(core,cli): migrate to createConfigManager factory function

Updated all ConfigManager instantiation from constructor to factory
function as part of ConfigStore abstraction migration.

Changes:

  • IdentityAdapter: new ConfigManager() → createConfigManager()
  • ContextCommand: new Config.ConfigManager() → Config.createConfigManager()
  • SyncModule tests: new ConfigManager(path) → createConfigManager(path)
  • DependencyInjection: new Config.ConfigManager() → Config.createConfigManager()
  • Store exports: Added ConfigStore, FsConfigStore, MemoryConfigStore

Tests verified: 2349 passed.

  • docs(epic): update Cycle 3 progress - ConfigManager completed

  • docs(sync_module): sync triada código ↔ tests

Triada auditada y coherente:

  • 58/62 EARS implementados y testeados
  • 4 EARS skipped (requieren setup E2E complejo)
  • docs(id): sync triadas id_generator + id_parser

id_generator:

  • EARS 1-6 coherentes (generacion de IDs)

id_parser (nuevo):

  • EARS A1-E2 coherentes (parsing, validacion, inferencia)
  • Tests con prefijos [EARS-X]
  • chore: update blueprints submodule - Progressive Disclosure epic

  • refactor(lint): sync triada código ↔ tests - 37/37 EARS

  • Habilitado test EARS-F2 (registros legacy sin header/payload)
  • Arquitectura Store Backends: LintModule (puro) + FsLintModule (I/O)
  • Todos los tests pasando (58 tests)
  • chore(utils): update index exports

  • feat(core): add type_guards and array_utils modules

  • chore: update blueprints submodule - design docs improvements

  • refactor(cli): migrate to FsLintModule architecture

  • DependencyInjectionService uses FsLintModule (wrapper I/O)
  • LintCommand updated for FsLintOptions/FsFixOptions types
  • Tests updated for new API
  • docs(epic): Cycle 3 COMPLETADO - Store Backends

  • chore: add .gitmodules for blueprints submodule

Adds proper submodule configuration for packages/blueprints.

Features

  • add core packages and CLI implementation (5904320)
  • add project configuration files (38dd8b6)
  • agents: add GDPR audit agent with formatted output (#80) (6fe884c)
  • agents: security-audit agent with configurable pipeline and SARIF output (#117) (0fb2e70)
  • agents: security-audit identity and integration — Cycle 2 (#118) (b167370)
  • cicd: separate release workflows for cli and core packages (631046a)
  • cli,core: add cycle remove-task and move-task commands (#29) (a2f2ba8), closes #1758521733
  • cli,core: gitgov agent add + agent runner createRequire + cleanup old schema (74581b4)
  • cli/core: EARS-27/28/43/61 sync improvements and UX fixes (#65) (0d44c85), closes #1763344405 #1763344405 #1763344405 #1763344405 #1763344405
  • cli/task: implement long description support with --description-file flag (#36) (dd46f82)
  • cli+core: AORCH-G1/G2 agent failure warning + AORCH-P6 working-repo guard (ed01477)
  • cli: add --show-archived flag to diagram command (#26) (0126746), closes #1758517322
  • cli: add actor commands + move key storage to .gitgov/keys/ (cd7f035)
  • cli: add exec, feedback, actor commands and init --type extension (16badb9)
  • cli: add governance E2E tests and e2e README (ed9cf15)
  • cli: add sorting and argument parsing for task list (#41) (1fb812d), closes #1759487394
  • cli: add sync status intelligence to dashboard + update pull messaging (ee27a34)
  • cli: add task delete command with interactive dashboard modal (#34) (f43f8a0), closes #1760017977
  • cli: add task details modal to Dashboard TUI (#28) (e52e129), closes #1759487663
  • cli: add task pause and resume commands (#32) (181485e), closes #1758587001 #1758587002
  • cli: AORCH-P4 persist audit-index.json + AORCH-P5 project guard (14077b2)
  • cli: EARS-E8 agent update message with engine type transition (a0fbcad)
  • cli: enhance task command help with step-by-step workflow guide [task:1758573661-task-enhance-task-command-help-with-step-by-step-workfl] (#6) (2c7e1aa)
  • cli: filter completed tasks in priority view (#40) (d5fa301)
  • cli: graceful bootstrap + bump private (KS11 + specs) (#160) (5cc0895), closes #6 #46
  • cli: implement GitGovernance CLI installer for Cloudflare Pages (#17) (64f5873)
  • cli: implement hybrid release architecture (#20) (c38dc28), closes #1759283096 #1759283096
  • cli: implement lint command and update core dependency (7497d0b), closes #1762488681
  • cli: implement TUI dashboard navigation and diagram watch mode [task:1758544872-task-complete-vim-style-navigation-in-dashboard-tui] (#8) (22088b2)
  • cli: integrate worktree-based sync into DI, init, and sync commands (0dcf92d)
  • cli: lint --strict, pull key detection, agent fail-fast, force-cloud commit (fa118bd)
  • cli: login command — OAuth flow + key sync CLI↔SaaS (0f5f8a9)
  • cli: login command v2 — tRPC + ECDH + orgId + --force flags (3941faf)
  • cli: LOGIN-H4 SSH alias resolution via ssh -G + AORCH-C8 git context (88aed89)
  • cli: restore original CLI description (#75) (323dbfd)
  • cli: simplify description (#74) (3deb4e7)
  • cli: update @gitgov/core dependency to ^1.8.3 (#70) (5161583)
  • cli: update CLI description (#72) (b658391)
  • cli: update description wording (#73) (5ec571b)
  • consolidate E2E public API migration, worktree refactor, and hook handler (8c0a47b)
  • consolidate private packages into single submodule (b1f032b)
  • core-gitlab: GitLab REST API provider — 7 modules, 175 tests (#127) (60b663e)
  • core,agents,e2e: session 40 — registry pattern, Two-Tier agents, shared/ refactor, E2E Prisma local (ce01ce1)
  • core,agents: FindingCategory extensible + agent distribution prep (s78) (eb1acf8)
  • core,agents: G18 LLM provider abstraction + review-advisor refactor (69a2368)
  • core,cli,e2e: configurable stateBranch, DB isolation, Prisma 7.x fixes (5f531e1)
  • core,cli: deleteBranch + finalize + GitHubProjectInitializer + key succession + smart init (#147) (c2f0523)
  • core,cli: Gate Cycle 1 — audit --ci, ICiReporter, formatAuditResult, G20 agent new (#152) (46ea47e), closes #87
  • core,cli: Gate Cycle 3+4 — ProjectModule, signed scans, webhook PR handler (#155) (5bc1650)
  • core,cli: GitRemoteRef + parseRemoteUrl + providerHost in login (f2369d7)
  • core,cli: ISessionManager cloud methods + repoFullName resolution (90fda44)
  • core,cli: PROJ-B4 — register default AgentRecord during init (ada0c36)
  • core,cli: RLDX-E1 pure runner, CLI L1 persistence, PI12 getHeadSha (8f33926)
  • core/agents: audit orchestration — Cycles 1-2 (#115) (cc7cf44)
  • core/cli/agents: agent runtime v2 — projectRoot, FsRecordStore, detection rules (#138) (e29337a)
  • core/cli: SARIF 2.1.0 module + CLI refactor (sarif_compliance_spec Cycles 1-2) (e459dc2)
  • core+cli: identity key model P0-P2 implementation (b319a79)
  • core: adapt factories, validators, and projection to v1.1 (6817bb6)
  • core: add @gitgov agent prompt copy during initialization (62de70f)
  • core: add agent prompt sync for npm package (#45) (7eb7ea9), closes #1762268208
  • core: add ConfigManager.getSaasUrl() — EARS-I1/I2 (541a8a4)
  • core: add createUnsignedRecord factory for pre-signing records (#149) (10d555f)
  • core: add deleteTask for draft tasks with educational errors (#33) (e70ccd4), closes #1760017977
  • core: add direct exports for Git and FileLister types (#133) (5dc00b9)
  • core: add direct type exports + GitgovActor metadataJson (#141) (e758773)
  • core: add ECDH X25519 ephemeral transport for key sync (babc424)
  • core: add EmbeddedMetadata factory with validation (5d0236d), closes #1761736263
  • core: add FsWorktreeSyncStateModule — worktree-based ISyncStateModule (b487902)
  • core: add generic metadata support to ExecutionRecord (#76) (97e1421)
  • core: add generic metadata support to FeedbackRecord (#77) (fc657c1)
  • core: add getPublicKey to IKeyProvider + derivePublicKey helper (1963f99)
  • core: add KeyProvider.sign() and eliminate mock signature fallback (5b032e2)
  • core: add metadata projection to PrismaRecordProjection (d48e349)
  • core: add metadata support to task and cycle factories (74e5167)
  • core: add PrismaRecordProjection driver via @gitgov/core/prisma (814dd3a)
  • core: add RECORD_TYPES constant for iteration and validation (#103) (aab5385)
  • core: add ref to AuditOrchestrationOptions — PR-scoped scanning (6216fb1)
  • core: add saasUrl to GitGovConfig for gitgov login support (a844fe1)
  • core: add task pause/resume and fix init actor roles (#31) (5aab230), closes #1758587001 #1758587002 #1759983132
  • core: add versionControlProvenance to SARIF output (#128) (7738d41)
  • core: AgentRunner FeedbackRecord support for review agents (EARS-L1 to L4) (#137) (29dedd6)
  • core: audit entity factories + test builders — AUDIT-F1..I3, 37/37 green (288d843)
  • core: audit type coherence — generics, metadata types, status enums (8b0d1b0)
  • core: AuditFsProjection — persist audit results to .gitgov/audit-index.json (b2a1823)
  • core: auto-commit before pull + preserve LOCAL_ONLY on force pull (8e0cea6)
  • core: createFinding + EARS-U8 + GPI19 + CLI getHeadSha (s74-s75) (#164) (7a10e67)
  • core: D-EARS file_lister readBatch + shared/github rate limit helpers (31c1397)
  • core: export ed25519PublicKeyToSpki helper for SPKI reconstruction (5eb647a)
  • core: extend ProjectAdapter type support and export TransitionRule (787a32a)
  • core: GitHub API backends with Octokit DI (#91) (b2cc265)
  • core: GitHubPolicyConfigLoader + PolicyConfigLoader DI refactor (b8f2321)
  • core: ICiReporter — startCheckRun externalId + postOrUpdateComment re-throws (05d8c9e)
  • core: Identity Module v2 — RecordSigner + IdentityModule + callsite migration (#151) (9eab152)
  • core: implement author/lastModifier enrichment, validation methods, and lint module (#54) (e3b8160), closes #1758522352 #1762449462 #1762488681 #1762449462
  • core: implement EARS-43 and ignore .gitgov/ in work branches (#58) (b22b90f), closes #1763344405 #1763344405 #1763344405 #1763344405 #1763344405
  • core: lint --strict Three Gates + agent engine validation + init warnings (2f24144)
  • core: policy evaluation Cycle 2 — re-evaluation + orchestrator integration (#125) (fb81e5e)
  • core: policy evaluation engine with OPA integration — Cycle 1 (#124) (0f15efa)
  • core: PP-C2 post-persist integrity check in PrismaRecordProjection (0a7b730)
  • core: prisma driver build fixes + audit types test completion (089da53)
  • core: PrismaKeyProvider — database-backed KeyProvider for SaaS multi-tenant (d32176c)
  • core: PrismaKeyProvider v2 — org-scoped + 3-level key hierarchy (aba885a)
  • core: PrismaRecordProjection refactor + E2E single-tenant migration (6175184)
  • core: projection schema v2 — Cycle 1 (#120) (1a90958)
  • core: redaction L1/L2 + E2E alignment + CI GitLab submodule support (#132) (4bf4d8d)
  • core: regenerate schemas and types for protocol v1.1 (3814aca)
  • core: rename indexer_adapter → record_projector + metrics_adapter → record_metrics (e30e86b)
  • core: rename record_projector → record_projection + ProjectionSink → RecordProjection (ffc0ea3)
  • core: saas-base cycle 3 — prisma projection, sync state, webhooks, E2E (#93) (fd1a2be)
  • core: security .gitignore + addAgent homologation + SYNC_ROOT_FILES (16399fa)
  • core: unified audit types — Finding, Waiver, Scan, PolicyDecision (#142) (3432cd2)
  • core: update factories, validators, and projection for v1.1 (6a75e75)
  • doc coherence + README/AGENTS.md architecture + code fixes (4993cba)
  • e2e: projection_audit.test.ts (CBA1-CBA6) + fix CLI --output json (50d56f7)
  • enhance task cancellation with review rejection support (#1) (cf56c0d)
  • epic: Store Backends - Cycles 1-3 Complete (#81) (acedbe1)
  • flow_verification s77 — PAF 17/17, mcp-server fix, LLM lazy detection (4d0b281)
  • gate: configurable state branch + E2E test isolation (#159) (f4485a4)
  • gitgov agent command - run, list, show (#79) (e59ec64)
  • gitgov audit - PII/secrets detection CLI (#78) (f47fbb5)
  • git: update readme file (d32889b)
  • identity: E6 — reconcileActorRecord primitive + login force-cloud delegate (f27ee6c)
  • mcp-server: add @gitgov/mcp-server package with 36 tools (f350130)
  • mcp-server: add 3-level test pyramid (175 tests) + coherence fixes (2bd92f6)
  • mcp-server: add execution, agent, identity, workflow tools (414bf5d)
  • T14: FindingRedactor required — core types + CLI DI + audit fixes (eb3be19), closes #53-54

Bug Fixes

  • agent-security-audit: update description for npm publish (6387e17)
  • agent-semgrep: add release workflow + semantic-release config (db3d42e)
  • agents: move @gitgov/core from dependencies to devDependencies (feb84b1)
  • agents: security-audit Cycle 2 fixtures and test paths (#122) (7cd9b8a)
  • agents: security-audit test fixes + audit gap closure (#119) (1ebfca3)
  • ci: add git user config and fix tsc exec syntax (a4a5023)
  • ci: align Node.js version to 24 per .nvmrc (d6e7eee)
  • ci: build core before typecheck for type resolution (388f8cf)
  • cicd: add build:ci script to build core without blueprints (49d2d35), closes #1759283096
  • cicd: add workflow file to release trigger paths (137ec45), closes #1759283096
  • cicd: pass NPM_TOKEN to setup-node step (83b6316), closes #1759283096
  • cicd: remove core build step from CLI release workflow (937bdce), closes #1759283096
  • cicd: run prebuild before tsc for core (7c7deb9), closes #1759283096
  • cicd: run tests before semantic-release to prevent faulty publishes (f2f04d4)
  • cicd: skip prebuild in CI for core package (40f2509), closes #1759283096
  • cicd: switch from OIDC to NPM_TOKEN for authentication (f7c4ab1), closes #1759283096
  • cicd: temporarily disable tests in release workflow (f3769dd), closes #1759283096
  • cicd: upgrade pnpm to v9 to enable pre/post scripts by default (673240e)
  • cicd: use no-frozen-lockfile for pnpm install in CI (b22d076), closes #1759283096
  • cicd: use standard build for core (prebuild doesn't need blueprints) (a1760ba)
  • cicd: use tsc directly instead of pnpm build for core (918c424), closes #1759283096
  • ci: exclude GitLab submodule from release workflows (2c2ebe5)
  • ci: resolve 3 CI failures — typecheck, git defaults, build order (54278f3)
  • cli,core: audit fixes — public key compare, no default URL, 5min timeout (f8a94e9)
  • cli,core: remove changelog references, sync with protocol v1.1 (873b635)
  • cli: add @gitgov/core as external dependency in build (6058431), closes #1759283096
  • cli: add JSON schema to semantic-release config for better IDE support (0709dde)
  • cli: add loader functions to RecordStore initialization (dcd0b38)
  • cli: configure Jest to resolve @gitgov/core from workspace (#25) (bf01f58), closes #1759460529
  • cli: configure tagFormat in semantic-release to prevent version downgrades (17f719b)
  • cli: handle --help flag with pnpm start -- separator (#39) (16b1670), closes #1759984817
  • cli: improve build system and release script compatibility (v1.0.4) (#16) (708ad4f)
  • cli: INIT-J2b skip postInitConcerns when already a member (26fc4bd)
  • cli: login command audit fixes + dead code cleanup (0ae9b26)
  • cli: pin @gitgov/core dependency to ^2.0.0 (1d7a662)
  • cli: pin @gitgov/core dependency to ^2.9.0 (#105) (cc9b3d5)
  • cli: replace deprecated getGitgovPath with getWorktreeBasePath (95ccdd3)
  • cli: resolve dashboard TUI dynamic require error (#30) (687bb2c), closes #1759918556
  • cli: skip diagram e2e tests incompatible with worktree mode (853bac0)
  • cli: stabilize flaky E2E tests EARS-G1 and EARS-G4 (b792b94)
  • cli: translate status command output to English (#35) (626884e), closes #1758572792
  • cli: update core dependency to use fixed v1.0.2 (#24) (418a39a), closes #1759460529
  • cli: update priority color high to orange (#57) (cc30d8f), closes #1762699192
  • cli: use --initial-branch=main in sync e2e tests (#71) (59aab5c)
  • cli: use compiled CLI instead of tsx in E2E tests (7259b96)
  • core,agents,e2e: complete session 40 changes — modified files (4457d2a)
  • core,cli: detect remote-deleted branch on push, remove legacy .gitignore, reconcile diverged histories (#99) (01c3c8a)
  • core,cli: IKS Phase 2 Cycle 1 — buildMetaWhere + collab fixes (#148) (b108c19)
  • core/cli: tsc zero errors + audit command fixes + FeedbackRecord entityId (#139) (06dca2c)
  • core+cli: D1 fix, P1 revert, syncKey refactor — session 65 (3378d29)
  • core: adapt adapters to protocol v1.1 schema changes (72c98da)
  • core: adapt schema_cache and workflow_validator to new WorkflowRecord schema (b506951)
  • core: add ESM __dirname compatibility for project adapter (#47) (7795e05), closes #45
  • core: add missing lintRecordReferences delegation in FsLintModule (99402ed)
  • core: add tasks to SDK description in README (#66) (85762d3)
  • core: align EARS IDs to owning blueprints — audit_orchestrator, sarif_builder, policy_evaluator (018760a)
  • core: align EARS traceability comments to owning blueprints (93251f5)
  • core: align record_projection docs and test name with implementation (b63cc38)
  • core: AUDIT-I2 test assertion — verify feedback structure not just toBeDefined (fc2bc73)
  • core: audit.prisma — checkRunId Int? → BigInt? (drift correction) (b287383)
  • core: commit schemas/index.ts barrel export (50724da)
  • core: execute prebuild explicitly in build script (0080536)
  • core: fix sync-schemas path and remove changelog (5df44c4)
  • core: generate 44-char Ed25519 public keys for schema compliance (8a9ef24)
  • core: GitHubFileLister pattern + RecordProjector NaN filter + blockedBy (#110) (79e1272)
  • core: include archived tasks in health calculation to prevent drops (#3) (b3c3aed)
  • core: include docs/ folder in npm package (4ac246d)
  • core: key_provider hygiene + Cycle 2 prep (727a163)
  • core: listRemoteBranches per_page:100 — prevent missing branches in pagination (67d9b04)
  • core: make sync-schemas fail-fast on missing YAML (56b09bf)
  • core: normalize repository url format for npm (452b2c6)
  • core: PROJ-G1 cache branchExists in GitHubProjectInitializer (cabdb63)
  • core: reconcile lint.test.ts with PR #98 audit fixes (72bed99)
  • core: regenerate schemas and types from protocol YAML (1197566)
  • core: remove changelog references from lint and project_initializer (f4f6325)
  • core: remove custom type references from validator tests (e7401df), closes PR#97
  • core: remove unnecessary underscore changes, keep only archived tasks fix [task:1758539111-task-fix-health-calculation-to-include-archived-tasks] (#4) (4aa4123)
  • core: resolve agent prompt copy with ESM helper (#51) (7b4fb87)
  • core: resolve duplicate task display in personal status view (#37) (b1bb3b4), closes #1758573347
  • core: restore accidentally deleted files, add lintRecordReferences (364d40b)
  • core: restore GithubSyncStateModule export from github entry point (5e99508)
  • core: restore id_parser exports and interfaces from main, remove changelog (c5ba0c0)
  • core: restore production modules erroneously deleted (7a522f1)
  • core: separate sync from prebuild and consolidate agent prompt (5e9c9e1)
  • core: update clean_exports test paths after shared/ refactor (94afb58)
  • core: update comment in index.ts (#67) (b20132e)
  • core: update export comment (#68) (e5fded9)
  • core: update README record and adapter counts after changelog removal (8aed640)
  • core: update sync-prompts.ts path to private/packages/blueprints (f0ea727)
  • core: update type exports comment (#69) (5970dce)
  • core: update utils, crypto, sync_state, event_bus for v1.1 (0f5f663)
  • core: use __dirname instead of import.meta.url for Jest compatibility (4d520aa), closes #47
  • core: use require.resolve for agent prompt copy (#50) (935a1ab)
  • core: use TaskRecord.title for diagram node labels (#2) (8b5cd4a)
  • core: use tsup for proper ES modules compilation (#22) (e3d755f), closes #1759460529
  • e2e: import RecordProjectorDependencies from barrel, PrismaClient from saas-api (67dc069)
  • e2e: remove core-gitlab workspace dep that breaks CI install (#134) (9216b5c)
  • e2e: thread sharedGitModule in shared GitHub backend helper (067dad5), closes #12
  • e2e: use local PrismaClient instead of saas-api import (5e51187)
  • mcp-server: align FsKeyProvider with core v2.4.0 API (d26bdba)
  • mcp-server: migrate from FsSyncStateModule to FsWorktreeSyncStateModule (d447d7d)
  • mcp-server: remove all any types, fix type mismatches, EARS coherence (5472926)
  • mcp-server: remove changelog references from DI, tools, and tests (f1fe488)
  • mcp-server: resolve MSRV-E naming collision, update test counts (a73fe2d)
  • mcp-server: use valid execution ID in waiver integration test (2f4093f)

Code Refactoring

  • cli: audit-command uses AuditOrchestrator (C1-C6) (#130) (9c8c92a)