chore: fix the red Cspell and egress-audit inputs checks on develop

Merged
EV
12d ago
+637-24

Two of the red checks on develop 77606f6199 — the head of stage PR #10637 (owner's screenshot) — are real; this fixes both. (The other red ones on that commit — MCP image demo builds, GraphQL Schema, CodeQL, lint — were killed by an external cancel at 00:37–00:39Z with no failing step; GraphQL Schema, CodeQL and Static Checks re-ran green, the MCP image builds will be re-run under a board claim.)

1. Cspell (a2569bd220)

13 real words in the merged code: Greptile (review notes in specs), waivable, offboard / offboarded / offboarding, onboards, requeues, redeclared / redeclares, uncaptured, polynomially, desynchronised, jridgewell (package scope in package.json). cspell's word list is case-insensitive (OFFBOARDING covered). Evidence: the repo's .cspell.json on the 11 files the failed job flagged: 19 issues in 8 files before, 0 after.

2. egress-audit inputs (3aadc04d56)

  • tools/egress-audit/ui-routes.json was out of step with the Angular router: the favorites full-width pages (#10589 #10594 #10606) added 14 view routes (/pages/tasks/view/:id, /pages/accounting/expenses/view/:id, …) and removed the contact view's dead tenant redirect. Regenerated with the pinned harness (run.mjs ui-routes --framework angular --entry apps/gauzy/src/app/app.routes.ts): 305 routes, --check passes.
  • The next step (never reached on develop because the job stopped at the first) would fail too: .github/workflows/upgrade-test.yml's comment named packages.ever.co — an Ever host outside the Ever Platform modules that the shrink-only static-hostnames baseline does not have. Reworded without the host rather than growing the baseline.

Evidence: every step of the inputs job run locally with the pinned harness, against origin/develop and against the push's base 3b75075243: route list in step; Ever-links baseline 1787 entries, 0 removed; mock-clock 4/4; static-hostnames 7/7 and its baseline only shrank; import boundary 6/6 (ESLint required); outbound-calls 4/4; private deps 8/8 + "all public".

Note for ever-gauzy #10639 (docs move, another session): no file overlap — it edits egress-audit.yml, the static-hostnames ALLOWED list and tools/egress-audit/README.md.

Tracked in the homelab handover HANDOVER-2026-10-15-gauzy-followups.md (Q4).

🤖 Generated with Claude Code