cmd/

Command acceptguard finds gopherstack handlers that accept a REQUEST member the real pinned aws-sdk-go-v2 Input type does not declare -- the mirror image of every wire bug this campaign has found so far, which were all on the response side (a member emitted under the wrong key, dropped, or invented).

Package main provides awsgs, a thin wrapper around the aws CLI that automatically injects --endpoint-url so every command targets a running Gopherstack instance.

Command bdaudit finds bd issues whose recorded state disagrees with what git history actually shows, and reports them -- it never writes to bd.

Command bodyclass answers, per operation, what a gopherstack service's restjson1/awsjson1.x response body actually is: wrapped (a genuine key-switch JSON object), flat/payload (the whole body collapses onto one Output member), header-only (no body, everything HTTP-header-bound), or void (no members beyond ResultMetadata).

Command checkpins verifies that every services/<svc>/PARITY.md sdk_module front-matter pin (aws-sdk-go-v2/service/<name>@v<version>, or azure-sdk-for-go/sdk/<path>@v<version> for Azure-backed services) matches the version go.mod actually requires for that module.

Command clientcoverage measures which AWS operations gopherstack's own test suite actually exercises through a real aws-sdk-go-v2 client, as opposed to a raw-body httptest assertion or a direct handler call.

Command covledger reads and queries the bug-class coverage ledger at cmd/covledger/coverage.yaml -- gopherstack-7q13's answer to two consecutive targeting failures on this campaign, both traceable to the same missing thing: which service has been checked for which class of bug lived only in prose, scattered across bd comments, commit subjects and per-service PARITY.md sections under labels chosen ad hoc per pass.

Command covmerge merges Go coverage profiles (as produced by `go test -covermode=atomic -coverprofile=...`) into a single deduplicated profile.

Command enumcheck finds values gopherstack emits into a wire response field whose real pinned aws-sdk-go-v2 type is a named string enum, but that are not members of that enum's real declared value set -- gopherstack-6flj's guardduty class (GetUsageStatistics.sumByDataSource emitting DetectorFeature names like "S3_DATA_EVENTS" under a field whose real type is the unrelated six-member types.DataSource enum).

Command errcodeaudit finds an error code string gopherstack emits that names no real AWS error type at all -- the class commit fa0e68c21 fixed by hand in services/ecs, which emitted eleven codes (TaskNotFoundException, ClusterAlreadyExistsException, CapacityProviderNotFoundException, ...) corresponding to no type anywhere in the real pinned SDK.

Command errtargetaudit finds gopherstack-o46l's class: a REAL, correctly-spelled AWS error code -- present in the pinned SDK, legitimately correct elsewhere in the same service -- emitted by an operation whose OWN error deserializer never declares it.

Command gendocs regenerates per-service documentation from each service's PARITY.md audit manifest under services/.

Command keycheck verifies that the string keys a service handler writes into its map[string]<T> wire responses, AND the json struct tags on any locally-declared *Output-suffixed struct it constructs, actually exist in the pinned AWS SDK's own response deserializer -- not the Go field name, the deserializer's literal switch-case string.

Command opcensus counts each service's List/Describe/Get operations for gopherstack-6flj (see services/_WRAPPER_KEY_SWEEP_REMAINDER.md).

Command overwidecandidates regenerates the over-wide List-response candidate list for gopherstack-dv4s (see services/_OVERWIDE_CANDIDATES.md).

Command parityfmtcheck checks two structural invariants of every services/<svc>/PARITY.md that every real consumer of the file (cmd/gendocs, cmd/stampaudit, cmd/staleclaims) depends on but none directly validates: a service: front-matter field that exists and names the directory it's actually in, and no unresolved git merge-conflict marker anywhere in the file.

Command paritylint checks the gopherstack-anjf invariant: fix status for every services/<svc>/PARITY.md lives in exactly one place, items_still_open:.

Command paritymigrate is gopherstack-anjf's one-off migration: it consolidates every services/<svc>/PARITY.md's scattered open-item fields (gaps:/residual_gaps:) into the single canonical items_still_open: list.

Command pgoload is a heavy, concurrent load generator for a running Gopherstack server.

Command reqfielddiff finds SDK request-input fields the emulator never declared at all -- gopherstack-4glf's class, invisible to cmd/reqfieldscan by construction, since that scan enumerates fields the emulator's own decode structs DECLARE and checks each is read: a field with no struct field to enumerate is invisible to it.

Command reqfieldscan finds gopherstack request-struct fields that are declared on the wire but never read anywhere in the handling service's package -- gopherstack-4shm's class: a field decoded off the wire and then silently ignored, discarding a parameter or a whole request.

Command requiredoutputfields regenerates the required-response-member ranking for gopherstack-r80d (see services/_REQUIRED_OUTPUT_CANDIDATES.md).

Command routecollisions regenerates the RouteMatcher over-claim candidate list for gopherstack-op3e (see services/_ROUTE_COLLISIONS.md).

Command staleclaims flags a services/<svc>/PARITY.md open-list entry (gaps:/items_still_open:/residual_gaps:) or "not fixed" Notes paragraph whose named op/field a LATER part of the same file records as fixed -- the shape gopherstack-anjf measured costing three dispatched workers at already-fixed gaps (codebuild, ecr, pipes) plus a near-miss (ecs) and a duplicate bug filing (pipes again).

Command stampaudit reports whether each services/<svc>/PARITY.md last_audit_commit stamp still means what the manifest schema says it means (services/_PARITY_TEMPLATE.md: "HEAD when this manifest was written," re-audited via `git diff <last_audit_commit>..HEAD -- services/<svc>/`).

Command structfielddiff dumps every field of every <Op>Input, <Op>Output and nested struct the pinned aws-sdk-go-v2 source declares for one or more services, so the fields can be diffed by hand against gopherstack's own wire model.

Command xmlitemwrap finds a specific, mechanically-detectable AWS query/XML wire-shape bug: a plain string list emitted with structure wrapped around each element instead of the real flat <someSet><item>value</item></someSet> shape.

Command zeroguard finds gopherstack Update/Put/Modify handlers that cannot distinguish "the caller omitted this field" from "the caller sent the zero value" and silently resolve the ambiguity the wrong way -- gopherstack-6flj's newest bug class, first confirmed in apigatewayv2.UpdateAuthorizer and fixed in commit 406c1dcc3.