fix(coverage): resolve npm workspace lock owners - #703

Closed

seonghobae wants to merge 51 commits into

mainfrom

fix/npm-workspace-coverage-root

Commits on Aug 3, 2026

fix(coverage): add trusted npm workspace lock resolver

seonghobae
authored and
pr-auto-rebase[bot]
committed
cc6a54a
test(coverage): cover npm workspace lock resolution

seonghobae
authored and
pr-auto-rebase[bot]
committed
fb013f8
fix(coverage): bind npm workspace ownership to validated git blobs

seonghobae
authored and
pr-auto-rebase[bot]
committed
dc2fcbf
test(coverage): prove npm workspace resolver trust boundaries

seonghobae
authored and
pr-auto-rebase[bot]
committed
840d1d0
chore(coverage): bootstrap focused workspace wiring

seonghobae
authored and
pr-auto-rebase[bot]
committed
9f524d6
chore(ci): retrigger workspace coverage bootstrap

seonghobae
authored and
pr-auto-rebase[bot]
committed
1f44fd6
test(coverage): specify npm workspace trust hardening

seonghobae
authored and
pr-auto-rebase[bot]
committed
a7f34fd
ci: exercise npm workspace resolver hardening

seonghobae
authored and
pr-auto-rebase[bot]
committed
838346a
ci: expose focused resolver tests on pull requests

seonghobae
authored and
pr-auto-rebase[bot]
committed
18c65da
chore(coverage): publish bounded bootstrap diagnostics

seonghobae
authored and
pr-auto-rebase[bot]
committed
a281b36
test(coverage): fix resolver fixture initialization

seonghobae
authored and
pr-auto-rebase[bot]
committed
b7b2a54
ci: run coverage bootstrap on same-repo PR synchronize

seonghobae
authored and
pr-auto-rebase[bot]
committed
af14b7b
fix(coverage): harden npm workspace glob and CLI contracts

seonghobae
authored and
pr-auto-rebase[bot]
committed
b9976fb
test(coverage): close resolver branch coverage gaps

seonghobae
authored and
pr-auto-rebase[bot]
committed
99a96bd
chore(coverage): trigger one-shot workspace wiring

seonghobae
authored and
pr-auto-rebase[bot]
committed
ab50cc3
fix(coverage): trust validated HEAD workspace ownership

seonghobae
authored and
pr-auto-rebase[bot]
committed
2623938
test(coverage): accept bounded HEAD workspace updates

seonghobae
authored and
pr-auto-rebase[bot]
committed
89a6ff0
test(coverage): harden anchored workspace matching

seonghobae
authored and
pr-auto-rebase[bot]
committed
ab51380
fix(coverage): scope offline npm installs to selected workspace

seonghobae
authored and
pr-auto-rebase[bot]
committed
fbc0a91
ci(coverage): verify workspace wiring before commit

seonghobae
authored and
pr-auto-rebase[bot]
committed
f1ee192
fix(coverage): honor Git clean filters when validating npm workspace files

seonghobae
authored and
pr-auto-rebase[bot]
committed
05d3b84
test(coverage): pin path-aware npm worktree hashing

seonghobae
authored and
pr-auto-rebase[bot]
committed
96dade5
fix(coverage): preserve Git path filters in generated npm lock verification

seonghobae
authored and
pr-auto-rebase[bot]
committed
72f4088
fix(ci): pass bootstrap result through the step environment

seonghobae
authored and
pr-auto-rebase[bot]
committed
d573869
chore(coverage): trigger verified workspace wiring bootstrap

seonghobae
authored and
pr-auto-rebase[bot]
committed
ad8a9ae
chore(ci): retrigger verified npm workspace bootstrap

seonghobae
authored and
pr-auto-rebase[bot]
committed
558d448
chore(ci): retrigger verified npm workspace wiring

seonghobae
authored and
pr-auto-rebase[bot]
committed
d0323b1
chore(ci): add bounded PR 703 final repair

seonghobae
authored and
pr-auto-rebase[bot]
committed
b7f12da
chore(ci): trigger bounded PR 703 final repair

seonghobae
authored and
pr-auto-rebase[bot]
committed
69e5fcc
ci(pr703): generate reviewed repair artifact without write credentials

seonghobae
authored and
pr-auto-rebase[bot]
committed
a70578a
ci(pr703): run final repair validation for the pull request

seonghobae
authored and
pr-auto-rebase[bot]
committed
d3abaa7
fix(pr703): emit valid structured invocation contract

seonghobae
authored and
pr-auto-rebase[bot]
committed
8e5b5fd
fix(pr703): parse the complete nested npm case contract

seonghobae
authored and
pr-auto-rebase[bot]
committed
20c3ce6
fix(pr703): keep generated nested-case delimiter syntactically valid

seonghobae
authored and
pr-auto-rebase[bot]
committed
04a23b7
fix(pr703): assert every npm failure path in the complete case

seonghobae
authored and
pr-auto-rebase[bot]
committed
309ed34

Commits on Aug 4, 2026

fix(pr703): assert all bounded npm returns
seonghobae
committed
accbf69
fix(pr703): publish verified canonical final state
seonghobae
committed
964ea61
ci(pr703): preserve verified canonical final state
seonghobae
committed
2661025
fix(coverage): finalize npm workspace lock resolution
seonghobae
committed
e292fa8
ci(deps): refresh vulnerable Strix dependency lock
seonghobae
committed
cf65dee
fix(deps): update Strix cryptography and aiohttp
github-actions[bot]
committed
6ad0ffe
chore(ci): remove temporary Strix lock refresher
seonghobae
committed
8af1d77
fix(coverage): prepare resolver review cleanup
seonghobae
committed
f6acae6
ci(coverage): verify resolver review cleanup
seonghobae
committed
40d794a
refactor(coverage): address npm resolver review feedback
seonghobae
committed
6b43ac5
test(coverage): repair resolver hardening regression
seonghobae
committed
6e29a57
test(coverage): restore complete resolver contract suite
seonghobae
committed
e9a4583
fix(security): align scheduled CodeQL action version
seonghobae
committed
bb129fe
chore(coverage): remove unrelated scheduled security drift
seonghobae
committed
e23cba9
fix(ci): align CodeQL action refs for coverage
seonghobae
committed
b824259
ci(repair): verify PR 703 review feedback
seonghobae
committed
c26f40c