Validate that GAP directories only contain allowed files#35

Open

magicmark wants to merge 7 commits into

graphql:mainfrom

magicmark:validate-allowed-files

Commits on May 19, 2026

Validate that GAP directories only contain allowed files

magicmark
and
claude
committed

Commits on Jun 2, 2026

Allow dotfiles and metadata.json in GAP directories

magicmark
and
claude
committed
Skip dotfiles before all checks, not inside the allowlist

magicmark
and
claude
committed
Reject dotfiles: use !entry.startsWith(".") in allowlist

magicmark
and
claude
committed
Remove dotfile exception — only allow *.md, metadata.yml, metadata.json

magicmark
and
claude
committed
Explicitly reject dotfiles before the allowlist check

magicmark
and
claude
committed
Refactor file validation and add versions/ directory support

magicmark
and
claude
committed