Repository navigation
chore(audit): apply ganda repo audit fixes - #649
Merged
StevenTCramer merged 13 commits intoNov 10, 2026
Merged
StevenTCramer merged 13 commits into
StevenTCramer merged 13 commits into
Conversation
Seed the suppression baseline, ignore walk signals, and take TimeWarp.Nuru 4.0.0-beta.12. That pin drops ICommandHandler, so the CLI handlers implement IRequestHandler and return ValueTask. Co-authored-by: Cursor <cursoragent@cursor.com>
…nerators State takes TimeWarp.Architecture.Analyzers only for TWA0004. The move set is TWA0004, TWA0023, and TWA0038, with those ids kept. The analyzers stay in this package until TimeWarp.SourceGenerators reports them, so the check is not dropped and a compilation does not report the same id twice. Co-authored-by: Grok <noreply@x.ai>
The block on task 034 is cleared. Resume can bump the pin and delete the three generic analyzers. Co-authored-by: Cursor <cursoragent@cursor.com>
…dy reports Keeping TWA0004, TWA0023, and TWA0038 in TimeWarp.Architecture.Analyzers would report each hit twice. Architecture rules stay in this package. TypeStemIdentifierAttribute stays in TimeWarp.Architecture.Attributes. workflow.yml run steps are pwsh so the workflow-pwsh-shell audit passes. The suppression baseline drops the deleted type-stem test. Co-authored-by: Grok <noreply@x.ai>
The validation command matched its own instructions, so a run reported five generic rows when the table has three. Co-authored-by: Grok <noreply@x.ai>
Round 1 left two open findings. The review record stays with the kitchen so the fix pass can close them. Co-authored-by: Grok <noreply@x.ai>
AGENTS.md and the split guide copied the Directory.Packages.props pin, so the next bump would make them wrong. The opt-out attribute still named the convention analyzers as the TWA0023 matcher. Co-authored-by: Grok <noreply@x.ai>
The pwsh conversion split those reads, so the dev-cli checks no longer saw the pin files and ci (fast) failed. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
StevenTCramer
deleted the
task/486-split-timewarparchitectureanalyzers-move-generic-c
branch
November 10, 2026 12:32
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Directory.Packages.propspinsTimeWarp.SourceGeneratorsat 1.0.0-beta.13, which reports TWA0004, TWA0023, and TWA0038. Those three analyzers and their tests are removed fromTimeWarp.Architecture.Analyzersin the same change, so a build reports each hit once. Architecture rules stay. TWA0001 and TWA0017–TWA0019 stay inTimeWarp.Architecture.Generators.TypeStemIdentifierAttributestays inTimeWarp.Architecture.Attributes.TWA0028 stays Architecture (it checks
TimeWarp.Foundation.Enumerations.Enumeration). TWA0036 stays Architecture (ISO 8601 rendering, including Razor). The onlyPackageReferencetoTimeWarp.Architecture.Analyzersoutside this repo istimewarp-stateat published pin2.0.0-beta.31, which still contains the three rules. Dropping that reference is timewarp-state task 153. This repo's unpublished version stays2.0.0-beta.32../bin/dev build --quietsucceeded. Analyzer tests: 263 passed, 0 failed (Jaribu, from the test project directory, Release,--no-build). A throwaway 510-line file with no Purpose region, since deleted, produced error TWA0004 and error TWA0038 throughtimewarp-source-generators1.0.0-beta.13. Each id appeared twice in the log because MSBuild echoes the csc line. The csc command line named that analyzer once.ganda repo audit --fixlowered the suppression baseline and redeployed the git hooks..github/workflows/workflow.ymlrun steps are pwsh soworkflow-pwsh-shellpasses.source-file-line-capremains a warning for the same generated and research files as before (task 469-001).Review round 1 M1 and M2 are fixed.
AGENTS.mdanddocumentation/developer/guides/analyzer-package-split.mdsay TimeWarp.SourceGenerators 1.0.0-beta.13 and later, and point atDirectory.Packages.propsfor the pin. TheTypeStemIdentifierAttributeDesign region names TimeWarp.SourceGenerators (TWA0023) as the analyzer that matches by simple name and does not reference that assembly. The package description,Directory.Build.props, and the unshipped header already stated a minimum and were left as they were. Round 1 review files stay as the reviewer wrote them.Review
Round 1 (general, effort 3) opened M1 (suggestion) and M2 (nit). Commit b400129 fixed both. Round 2 (general, effort 1) re-checked the fix delta, found both fixed, and raised nothing new.
Final counts: bug 0; suggestion 1 fixed; nit 1 fixed; 0 open; 0 wontfix. Review disposition: clean after 2 rounds, with no escalations. Paths:
review/review-framework.md,review/round-2/merged.md(the last merged file), andreview/disposition.md.Test plan
Smoke
Expect
1.0.0-beta.13.1.0.0-beta.13 and later; pin in Directory.Packages.props. Neither contains(pin 1.0.0-beta.13).TimeWarp.SourceGenerators (TWA0023). It does not say convention-analyzers match by simple name.Directory.Build.propsstill fails the build on a missing Purpose region or a file over 500 lines, from SourceGenerators, once.Kanban task 486
Session: Grok task-work