Warden Sweep cd745cc3: 14 findings across 165 files

[dcramer]

Warden Sweep cd745cc3

Metric	Count
Files scanned	165
Files timed out	0
Files errored	0
Total findings	19
Verified	14
Rejected	5

Verified Findings

Severity	Skill	File	Title
MEDIUM	find-warden-bugs	src/skills/remote.ts	execGit loses error chain when wrapping errors
HIGH	find-warden-bugs	src/cli/main.ts	Auth error returns before --output file is written
MEDIUM	find-warden-bugs	src/utils/exec.ts	ExecError loses spawn error code, forcing downstream string pattern matching
HIGH	find-warden-bugs	src/event/schedule-context.ts	Path filtering silently fails on Windows due to path separator mismatch
MEDIUM	find-warden-bugs	src/sdk/analyze.ts	Error chain broken when rethrowing authentication failures
HIGH	find-warden-bugs	src/config/schema.ts	maxContextFiles config not threaded through GitHub Actions workflows
MEDIUM	find-warden-bugs	src/cli/git.ts	Error wrapping in git() loses ExecError type and diagnostic fields
HIGH	find-warden-bugs	src/cli/input.ts	process.exit() inside Sentry span bypasses cleanup and telemetry flush
MEDIUM	find-warden-bugs	src/output/github-issues.ts	PR body lists all fixable findings but fixCount reflects only successful applications
MEDIUM	find-warden-bugs	src/sdk/auth.ts	Error chain broken when wrapping ExecError in WardenAuthenticationError
MEDIUM	find-warden-bugs	src/evals/index.ts	Error chain not preserved when wrapping file read error
HIGH	find-warden-bugs	src/config/writer.ts	Missing config fields in TOML writer breaks config round-trip
MEDIUM	find-warden-bugs	src/cli/fix.ts	Ctrl+C during interactive fix bypasses Sentry span completion
HIGH	find-warden-bugs	src/cli/commands/setup-app.ts	Server error handler calls process.exit() and bypasses cleanup in finally block

Skills Run

find-warden-bugs

Generated by Warden Sweep. PRs referencing this issue will appear below.

[dcramer]

Sweep Complete

PRs Created	PRs Skipped (existing)	PRs Failed	Security Findings
13	1	0	0

PRs

• fix(cli): Replace process.exit(130) with thrown error for graceful cleanup #213 - fix: process.exit() inside Sentry span bypasses cleanup and telemetry flush (HIGH)
• fix(cli): Replace process.exit(130) with thrown error for graceful cleanup #213 - fix: Ctrl+C during interactive fix bypasses Sentry span completion (MEDIUM)
• fix(cli): Write --output file on auth error early exit #214 - fix: Auth error returns before --output file is written (HIGH)
• fix: Preserve error chains across error wrapping boundaries #215 - fix: Error wrapping in git() loses ExecError type and diagnostic fields (MEDIUM)
• fix: Preserve error chains across error wrapping boundaries #215 - fix: Error chain broken when wrapping ExecError in WardenAuthenticationError (MEDIUM)
• fix: Preserve error chains across error wrapping boundaries #215 - fix: Error chain broken when rethrowing authentication failures (MEDIUM)
• fix: Preserve error chains across error wrapping boundaries #215 - fix: execGit loses error chain when wrapping errors (MEDIUM)
• fix: Preserve error chains across error wrapping boundaries #215 - fix: Error chain not preserved when wrapping file read error (MEDIUM)
• fix: Preserve error chains across error wrapping boundaries #215 - fix: ExecError loses spawn error code, forcing downstream string pattern matching (MEDIUM)
• fix(action): Thread maxContextFiles config through Action workflows #216 - fix: maxContextFiles config not threaded through GitHub Actions workflows (HIGH)
• fix(cli): Normalize path separators in synthetic file changes #217 - fix: Path filtering silently fails on Windows due to path separator mismatch (HIGH)
• fix(config): Add missing fields to TOML writer for config round-trip #218 - fix: Missing config fields in TOML writer breaks config round-trip (HIGH)
• fix(output): List only successfully applied fixes in PR body #219 - fix: PR body lists all fixable findings but fixCount reflects only successful applications (MEDIUM)