Tom Boucher f4c4ec6211 docs(build-hooks): correct staging-dir cleanup comment ...

The previous comment claimed "rmdir-on-non-empty is a no-op" — that is
factually wrong. fs.rmdirSync throws ENOTEMPTY on non-empty directories.
The actual race-safety mechanism is:
1. fs.readdirSync(STAGE_DIR) -> leftovers
2. fs.rmdirSync(STAGE_DIR) only when leftovers.length === 0
3. Outer try/catch swallows TOCTOU ENOTEMPTY (peer added a file
   between readdir and rmdir) and ENOENT (peer already cleaned up).

Comment now references the leftovers variable and both fs calls so a
future reader can map narrative to code without reverse-engineering it.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-06 23:50:52 -04:00

..

changeset

feat(#2975): adopt changeset-fragment workflow to eliminate CHANGELOG conflicts (#2978)

2026-05-01 18:12:20 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

ci(security): add prompt injection, base64, and secret scanning

2026-03-24 13:23:51 -04:00

build-hooks.js

docs(build-hooks): correct staging-dir cleanup comment

2026-05-06 23:50:52 -04:00

command-contract-helpers.cjs

fix(coderabbit): resolve all 12 findings on PR #3152

2026-05-05 16:06:29 -04:00

diff-touches-shipped-paths.cjs

fix(#2983): classifier exit-code discipline, base-tag staging, drop vestigial merge-back (#2984)

2026-05-01 17:25:20 -04:00

fix-slash-commands.cjs

fix: extend fix-slash-commands SEARCH_DIRS to agents/, sdk/src/, .clinerules

2026-05-05 13:19:10 -04:00

gen-inventory-manifest.cjs

docs: close doc drift vectors — bidirectional parity, manifest, schema-driven config (#2479)

2026-04-20 09:39:05 -04:00

lint-command-contract.cjs

fix: apply CodeRabbit auto-fixes

2026-05-05 22:36:38 +00:00

lint-descriptions.cjs

feat(#2789): trim skill description anti-patterns; enforce 100-char budget (#2823)

2026-04-29 08:14:11 -04:00

lint-no-source-grep-extras.cjs

feat(#2982): extend no-source-grep lint to catch var-binding readFileSync.includes() (#2985)

2026-05-01 19:50:10 -04:00

lint-no-source-grep.cjs

feat(#2982): extend no-source-grep lint to catch var-binding readFileSync.includes() (#2985)

2026-05-01 19:50:10 -04:00

prompt-injection-scan.sh

feat(hooks): add gsd-read-injection-scanner PostToolUse hook (#2201) (#2328)

2026-04-16 17:22:31 -04:00

run-tests.cjs

refactor(tests): standardize to node:assert/strict and t.after() per CONTRIBUTING.md (#1675)

2026-04-04 14:29:03 -04:00

secret-scan.sh

ci(security): add prompt injection, base64, and secret scanning

2026-03-24 13:23:51 -04:00

strip-prose-atrefs.cjs

fix(coderabbit): resolve all 12 findings on PR #3152

2026-05-05 16:06:29 -04:00

verify-tarball-sdk-dist.sh

fix(#2647): guard tarball ships sdk/dist so gsd-sdk query works (#2671)

2026-04-24 18:05:18 -04:00