@opengsd/gsd-core 1.16.0 → 1.18.0

package/bin/install.js

@@ -35,6 +35,7 @@ const {
   getGlobalSkillsBase,
   resolveKimiHooksTomlDir,
   isRegisteredRuntimeId,
+  resolveGsdHome,
 } = require('../gsd-core/bin/lib/runtime-homes.cjs');
 // #2870: the Install Scope Module — turns a bare 'global' | 'local' scope id
 // plus a runtime into one resolved value (configHome, settingsFile,
@@ -190,7 +191,7 @@ function isCodexHooksFeatureKey(key) {
 // GSD_CLAUDE_LEGACY_DENY_PERMISSIONS below.)
 //
 // Format: each string uses Claude Code's documented permission rule syntax \u2014
-//   "Tool(pattern)"  e.g. "Bash(npx gsd-core *)", "Read(.planning/*)"
+//   "Tool(pattern)"  e.g. "Read(.planning/*)", "Edit(STATE.md)"
 //   "Tool"           (bare tool name, no pattern)
 //
 // Merge policy: additive, non-destructive \u2014 existing user entries are preserved;
@@ -199,7 +200,6 @@ function isCodexHooksFeatureKey(key) {
 // instead of scattered literal 'claude' defaults/rosters (#2086).
 const DEFAULT_RUNTIME = 'claude';
 const GSD_CLAUDE_ALLOW_PERMISSIONS = Object.freeze([
-  'Bash(npx gsd-core *)',
   'Read(.planning/*)',
   'Edit(.planning/*)',
   'Read(STATE.md)',
@@ -232,9 +232,14 @@ const GSD_CLAUDE_LEGACY_DENY_PERMISSIONS = Object.freeze([
 // mergeClaudePermissions and uninstall cleanup retire those stale entries on
 // existing installs while the current GSD_CLAUDE_ALLOW_PERMISSIONS above
 // carries the working `Edit(...)` forms.
+// #5054 — `Bash(npx gsd-core *)` is retired the same way. The project ships
+// as `@opengsd/gsd-core`; the unscoped `gsd-core` npm name belongs to someone
+// else, so the rule pre-authorized whatever that name's owner publishes next.
+// GSD never runs the bare form (update.md uses `--package=@opengsd/gsd-core`).
 const GSD_CLAUDE_LEGACY_ALLOW_PERMISSIONS = Object.freeze([
   'Write(.planning/*)',
   'Write(STATE.md)',
+  'Bash(npx gsd-core *)',
 ]);
 
 /**
@@ -249,6 +254,7 @@ const GSD_CLAUDE_LEGACY_ALLOW_PERMISSIONS = Object.freeze([
  * `Write(...)` forms from before the fix) is removed from permissions.allow,
  * so existing installs end up with the working `Edit(...)` forms instead of
  * both the dead legacy entry and its replacement sitting side by side.
+ * The same filter retires the unscoped `Bash(npx gsd-core *)` rule (#5054).
  *
  * Migration (#4221): the retired GSD_CLAUDE_LEGACY_DENY_PERMISSIONS entries
  * are removed from permissions.deny (byte-equal only). Nothing is added to
@@ -408,6 +414,26 @@ const GSD_WINDSURF_HOOK_SCRIPTS = hooksSurface.GSD_WINDSURF_HOOK_SCRIPTS;
 // two guards require so their copies cannot drift.
 const GSD_HOOK_LIB_FILES = ['git-cmd.js', 'gsd-graphify-rebuild.sh', 'cursor-workspace.js', 'injection-patterns.js'];
 
+/**
+ * Every file GSD stages under `hooks/lib/` (#5335). The install copies `hooks/dist/lib/` wholesale (and the
+ * allow-listed names from `hooks/lib/`), so a fixed list drifts the moment a helper is added: the new file is
+ * staged but never removed, which also keeps `hooks/lib/` non-empty and blocks its rmdir. The set is the
+ * allow-list plus the top-level files of the directories the installer copies from, so uninstall and the
+ * manifest cannot disagree with install. Only these names are ever removed; a user's own helper beside them
+ * is left alone.
+ */
+function gsdHookLibFiles() {
+  const names = new Set(GSD_HOOK_LIB_FILES);
+  for (const parts of [['hooks', 'dist', 'lib'], ['hooks', 'lib']]) {
+    try {
+      for (const entry of fs.readdirSync(path.join(__dirname, '..', ...parts), { withFileTypes: true })) {
+        if (entry.isFile()) names.add(entry.name);
+      }
+    } catch { /* the directory is absent from this package layout */ }
+  }
+  return [...names];
+}
+
 /**
  * Directory name GSD stages its shared hook bundle under, inside a runtime's
  * install root. Defaults to 'hooks' — the name every runtime used before #3023.
@@ -762,8 +788,11 @@ const {
   discoverInstallerMigrations,
   MANIFEST_SCHEMA_VERSION,
   readInstallManifest,
+  recordHostGeneration,
   runInstallerMigrations,
 } = require(path.join(_gsdLibDir, 'installer-migrations.cjs'));
+const { setJsoncValue, removeJsoncValue, hasJsoncFeatures, parseJsonc } = require(path.join(_gsdLibDir, 'jsonc-edit.cjs'));
+const { isGsdMcpEntry, GSD_MCP_NO_PROMPTS_FLAG } = require(path.join(_gsdLibDir, 'opencode-mcp-entry.cjs'));
 const {
   assertInstallerMigrationsUnblocked,
   resolveInstallerMigrationPromptsForNonTty,
@@ -1256,6 +1285,17 @@ const applySettingsJsonHooks = hooksSurface.applySettingsJsonHooks;
 // writeKimiHooksToml / removeKimiHooksToml: kimi's native config.toml [[hooks]]
 // surface (#2095 EoS/kimi Upgrade 1) — separate from settings.json entirely.
 const writeKimiHooksToml = hooksSurface.writeKimiHooksToml;
+
+// #4840: false when the runtime declares `context-warnings` unsupported in its
+// descriptor (`hostBehaviors.unsupportedFeatures`). gsd-context-monitor.js reads
+// the metrics bridge file only the statusline hook writes, and the statusline
+// is wired for Claude Code alone, so on any other host the hook fires on every
+// tool event, finds no file and exits silently — forever. Such a host gets no
+// monitor registration (stale ones are stripped), as Codex does since #2586.
+function runtimeSupportsContextWarnings(runtime) {
+  const unsupported = hostBehaviorsFor(runtime).unsupportedFeatures;
+  return !(Array.isArray(unsupported) && unsupported.includes('context-warnings'));
+}
 const removeKimiHooksToml = hooksSurface.removeKimiHooksToml;
 // processAttribution: pure Co-Authored-By content transform, relocated to the
 // conversion module (ADR-1508 / #1510 Phase 1). Bound here so install.js
@@ -6959,6 +6999,82 @@ function writeCopilotHookConfig(targetDir) {
  * Reads agent .md files from source, extracts metadata, writes .toml configs.
  */
 
+// #5335: ~/.gsd/defaults.json is machine-wide, so uninstalling one runtime must not strip a default another
+// still needs, nor one the user chose. A sidecar records which keys an install SET (not ones it found), the
+// value it set, and which non-Claude runtimes have installed since; uninstall reverts a key only when its
+// last such runtime is gone and the value is still the one the installer wrote.
+const DEFAULTS_PROVENANCE_NAME = 'defaults-provenance.json';
+
+function readDefaultsProvenance(gsdDir) {
+  try {
+    const p = JSON.parse(fs.readFileSync(path.join(gsdDir, DEFAULTS_PROVENANCE_NAME), 'utf8'));
+    if (p && typeof p === 'object' && p.keys && typeof p.keys === 'object') return p;
+  } catch { /* absent or unreadable */ }
+  return { version: 1, keys: {} };
+}
+
+function recordDefaultsProvenance(gsdDir, runtime, defaults, setNow) {
+  const prov = readDefaultsProvenance(gsdDir);
+  let changed = false;
+  for (const key of ['resolve_model_ids', 'runtime']) {
+    let entry = prov.keys[key];
+    if (setNow[key]) {
+      entry = { setValue: defaults[key], runtimes: [] };
+      prov.keys[key] = entry;
+      changed = true;
+    }
+    if (entry && Array.isArray(entry.runtimes) && !entry.runtimes.includes(runtime)) {
+      entry.runtimes.push(runtime);
+      changed = true;
+    }
+  }
+  if (changed) atomicWriteFileSync(path.join(gsdDir, DEFAULTS_PROVENANCE_NAME), JSON.stringify(prov, null, 2) + '\n', 'utf8');
+}
+
+/** @returns {boolean} true when it removed or reverted something */
+function revertNonClaudeDefaults(runtime) {
+  if (hostBehaviorsFor(runtime).nativeModelAliases || process.env.GSD_TEST_MODE) return false;
+  const gsdDir = path.join(resolveGsdHome(), '.gsd'); // #5017: GSD_HOME-aware, like the loader
+  const provPath = path.join(gsdDir, DEFAULTS_PROVENANCE_NAME);
+  if (!fs.existsSync(provPath)) return false;
+  let releaseLock = null;
+  try {
+    releaseLock = acquireInstallMigrationLock(gsdDir);
+    const prov = readDefaultsProvenance(gsdDir);
+    const defaultsPath = path.join(gsdDir, 'defaults.json');
+    let defaults = null;
+    try { defaults = JSON.parse(fs.readFileSync(defaultsPath, 'utf8')); } catch { /* absent or corrupt */ }
+    const reverted = [];
+    for (const [key, entry] of Object.entries(prov.keys)) {
+      if (!entry || !Array.isArray(entry.runtimes)) { delete prov.keys[key]; continue; }
+      entry.runtimes = entry.runtimes.filter((r) => r !== runtime);
+      if (entry.runtimes.length > 0) continue;
+      if (defaults && typeof defaults === 'object' && defaults[key] === entry.setValue) {
+        delete defaults[key];
+        reverted.push(key);
+      }
+      delete prov.keys[key];
+    }
+    if (reverted.length > 0 && defaults) {
+      if (Object.keys(defaults).length === 0) fs.rmSync(defaultsPath, { force: true });
+      else atomicWriteFileSync(defaultsPath, JSON.stringify(defaults, null, 2) + '\n', 'utf8');
+      console.log(`  ${green}✓${reset} Reverted ${reverted.join(', ')} in ~/.gsd/defaults.json (set by the ${runtime} install)`);
+    }
+    if (Object.keys(prov.keys).length === 0) fs.rmSync(provPath, { force: true });
+    else atomicWriteFileSync(provPath, JSON.stringify(prov, null, 2) + '\n', 'utf8');
+    return reverted.length > 0;
+  } catch (e) {
+    console.log(`  ${yellow}⚠${reset} Could not update ~/.gsd/defaults.json: ${e.message}`);
+    return false;
+  } finally {
+    if (releaseLock) {
+      try { releaseLock(); } catch { /* the stale-lock reaper clears it */ }
+    }
+    // ~/.gsd is GSD's own directory; drop it once the lock is released and nothing else lives in it.
+    try { fs.rmdirSync(gsdDir); } catch { /* other GSD state lives here */ }
+  }
+}
+
 /**
  * #2834: Write ~/.gsd/defaults.json for non-Claude runtimes — sets
  * resolve_model_ids="omit" (so resolveModelInternal() returns '' instead of
@@ -6971,7 +7087,7 @@ function writeCopilotHookConfig(targetDir) {
  */
 function writeNonClaudeDefaults(runtime) {
   if (hostBehaviorsFor(runtime).nativeModelAliases || process.env.GSD_TEST_MODE) return;
-  const gsdDir = path.join(os.homedir(), '.gsd');
+  const gsdDir = path.join(resolveGsdHome(), '.gsd'); // #5017: GSD_HOME-aware, like the loader
   const defaultsPath = path.join(gsdDir, 'defaults.json');
   let releaseLock = null;
   try {
@@ -7005,6 +7121,10 @@ function writeNonClaudeDefaults(runtime) {
       atomicWriteFileSync(defaultsPath, JSON.stringify(defaults, null, 2) + '\n', 'utf8');
       for (const message of applied) console.log(`  ${green}✓${reset} ${message}`);
     }
+    recordDefaultsProvenance(gsdDir, runtime, defaults, {
+      resolve_model_ids: shouldDefaultToOmit,
+      runtime: applied.some((m) => m.startsWith('Set runtime:')),
+    });
   } catch (e) {
     console.log(`  ${yellow}⚠${reset} Could not write ~/.gsd/defaults.json: ${e.message}`);
   } finally {
@@ -7212,7 +7332,11 @@ function convertClaudeToOpencodeFrontmatter(content, { isAgent = false, modelOve
   const newLines = [];
   let inAllowedTools = false;
   let inSkippedArray = false;
+  let inAgentTools = false;
+  let inDisallowedTools = false;
   const allowedTools = [];
+  const agentTools = [];
+  const agentDisallowed = [];
 
   for (const line of lines) {
     const trimmed = line.trim();
@@ -7228,11 +7352,31 @@ function convertClaudeToOpencodeFrontmatter(content, { isAgent = false, modelOve
       continue;
     }
 
+    // Agents: collect the `tools:` allowlist and `disallowedTools:` denylist (block-list continuation
+    // lines) so they can be rendered as `permission:` entries below (mirrors
+    // src/runtime-artifact-conversion.cts's convertClaudeToOpencodeFrontmatter, #5338).
+    if (isAgent && (inAgentTools || inDisallowedTools)) {
+      if (trimmed.startsWith('- ')) {
+        const tool = runtimeArtifactConversion._decodeToolScalar(trimmed.substring(2));
+        if (tool !== null) (inAgentTools ? agentTools : agentDisallowed).push(tool);
+        continue;
+      }
+      if (trimmed && !trimmed.startsWith('-')) {
+        inAgentTools = false;
+        inDisallowedTools = false;
+      }
+    }
+
     // Detect inline tools: field (comma-separated string)
     if (trimmed.startsWith('tools:')) {
       if (isAgent) {
-        // Agents: strip tools entirely (not supported in OpenCode agent frontmatter)
-        inSkippedArray = true;
+        const toolsValue = trimmed.substring(6).trim();
+        // A comment-only value (`tools: # note`) is not inline content: read the block list instead.
+        if (toolsValue && !toolsValue.startsWith('#')) {
+          agentTools.push(...runtimeArtifactConversion._splitToolScalars(toolsValue).map(runtimeArtifactConversion._decodeToolScalar).filter((tool) => tool !== null));
+        } else {
+          inAgentTools = true;
+        }
         continue;
       }
       const toolsValue = trimmed.substring(6).trim();
@@ -7244,8 +7388,18 @@ function convertClaudeToOpencodeFrontmatter(content, { isAgent = false, modelOve
       continue;
     }
 
-    // For agents: strip skills:, color:, memory:, maxTurns:, permissionMode:, disallowedTools:
-    if (isAgent && /^(skills|color|memory|maxTurns|permissionMode|disallowedTools):/.test(trimmed)) {
+    if (isAgent && trimmed.startsWith('disallowedTools:')) {
+      const value = trimmed.substring(16).trim();
+      if (value && !value.startsWith('#')) {
+        agentDisallowed.push(...runtimeArtifactConversion._splitToolScalars(value).map(runtimeArtifactConversion._decodeToolScalar).filter((tool) => tool !== null));
+      } else {
+        inDisallowedTools = true;
+      }
+      continue;
+    }
+
+    // For agents: strip skills:, color:, memory:, maxTurns:, permissionMode:
+    if (isAgent && /^(skills|color|memory|maxTurns|permissionMode):/.test(trimmed)) {
       inSkippedArray = true;
       continue;
     }
@@ -7318,6 +7472,7 @@ function convertClaudeToOpencodeFrontmatter(content, { isAgent = false, modelOve
     if (modelOverride) {
       newLines.push(`model: ${modelOverride}`);
     }
+    newLines.push(...runtimeArtifactConversion._buildOpencodeAgentPermissionBlock(agentTools, agentDisallowed));
   }
 
   // For commands: add tools object if we had allowed-tools or tools
@@ -8239,7 +8394,7 @@ function reclaimKimiHooksRoot(kimiHooksRoot) {
     const kimiHooksLibDir = path.join(kimiHooksDir, 'lib');
     if (fs.existsSync(kimiHooksLibDir)) {
       let removedKimiLibFiles = 0;
-      for (const file of GSD_HOOK_LIB_FILES) {
+      for (const file of gsdHookLibFiles()) {
         try {
           fs.unlinkSync(path.join(kimiHooksLibDir, file));
           removedKimiLibFiles++;
@@ -8875,7 +9030,7 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
     const hooksLibDir = path.join(hooksDir, 'lib');
     if (fs.existsSync(hooksLibDir)) {
       let removedLibFiles = 0;
-      for (const file of GSD_HOOK_LIB_FILES) {
+      for (const file of gsdHookLibFiles()) {
         const filePath = path.join(hooksLibDir, file);
         try {
           fs.unlinkSync(filePath);
@@ -8911,6 +9066,9 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
         console.log(`  ${green}✓${reset} Removed GSD hooks/package.json (CommonJS marker)`);
       }
     } catch { /* best-effort */ }
+    // Once GSD's hooks, helpers and marker are gone, an empty hooks dir is GSD's own leftover (#5335).
+    // rmdir fails on a non-empty dir, so a user's own hook scripts keep it in place.
+    try { fs.rmdirSync(hooksDir); } catch { /* not empty or absent */ }
   }
 
   // 4z. Remove the native plugin adapter (#1914, extended to Kilo by #2093).
@@ -8944,6 +9102,20 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
     // unlink above failed, pulling the marker out from under a still-present
     // CommonJS adapter would leave it unloadable. The exact content match
     // still leaves any user-authored package.json in place.
+    // The terminal-client plugin directory (OpenCode 2.x statusline): GSD's file, then its now-empty directory.
+    const _cliU = hostBehaviorsFor(runtime).nativeCliPlugin;
+    if (_cliU) {
+      const cliFile = path.join(targetDir, _cliU.dir, _cliU.file);
+      if (fs.existsSync(cliFile)) {
+        try {
+          fs.unlinkSync(cliFile);
+          removedCount++;
+          removedFromPluginsDir = true;
+          console.log(`  ${green}✓${reset} Removed terminal-client plugin (${runtime})`);
+        } catch (_) { /* best-effort */ }
+      }
+      try { fs.rmdirSync(path.join(targetDir, _cliU.dir)); } catch (_) { /* not empty or absent */ }
+    }
     if (!fs.existsSync(pluginPath) && removeCommonJsMarker(pluginsDir)) {
       removedCount++;
       removedFromPluginsDir = true;
@@ -9171,40 +9343,56 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
     }
   }
 
-  // 6. For OpenCode, clean up permissions from opencode.json or opencode.jsonc
+  // 6. For OpenCode, clean up permissions and the companion MCP entry from opencode.json or opencode.jsonc
   if (resolveInstallPlan(runtime).finishPermissionWriter === 'opencode') {
     const configPath = resolveOpencodeConfigPath(targetDir);
     if (fs.existsSync(configPath)) {
       try {
-        const config = parseJsonc(fs.readFileSync(configPath, 'utf8'));
-        let modified = false;
+        const originalText = fs.readFileSync(configPath, 'utf8');
+        const config = parseJsonc(originalText);
+        const edits = [];
 
         // Remove GSD permission entries
-        if (config.permission) {
+        if (config.permission && typeof config.permission === 'object') {
           for (const permType of ['read', 'external_directory']) {
-            if (config.permission[permType]) {
-              const keys = Object.keys(config.permission[permType]);
-              for (const key of keys) {
-                if (key.includes('gsd-core')) {
-                  delete config.permission[permType][key];
-                  modified = true;
-                }
-              }
-              // Clean up empty objects
-              if (Object.keys(config.permission[permType]).length === 0) {
-                delete config.permission[permType];
+            const section = config.permission[permType];
+            if (!section || typeof section !== 'object') continue;
+            for (const key of Object.keys(section)) {
+              if (key.includes('gsd-core')) {
+                delete section[key];
+                edits.push({ path: ['permission', permType, key], remove: true });
               }
             }
+            // Clean up empty objects
+            if (Object.keys(section).length === 0) delete config.permission[permType];
           }
-          if (Object.keys(config.permission).length === 0) {
-            delete config.permission;
+          if (Object.keys(config.permission).length === 0) delete config.permission;
+        }
+
+        // #5333: remove the companion MCP entry, but only while it is still the entry GSD wrote — a
+        // user-edited or user-defined `gsd` server stays. Both OpenCode generations' shapes: the 1.x
+        // `mcp.gsd` and the 2.x native `mcp.servers.gsd`.
+        let mcpRemoved = false;
+        if (config.mcp && typeof config.mcp === 'object') {
+          if (isGsdMcpEntry(config.mcp.gsd)) {
+            delete config.mcp.gsd;
+            edits.push({ path: ['mcp', 'gsd'], remove: true });
+            mcpRemoved = true;
           }
+          const servers = config.mcp.servers;
+          if (servers && typeof servers === 'object' && isGsdMcpEntry(servers.gsd)) {
+            delete servers.gsd;
+            edits.push({ path: ['mcp', 'servers', 'gsd'], remove: true });
+            if (Object.keys(servers).length === 0) delete config.mcp.servers;
+            mcpRemoved = true;
+          }
+          if (Object.keys(config.mcp).length === 0) delete config.mcp;
         }
 
-        if (modified) {
-          fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
+        if (edits.length > 0) {
+          writeJsoncConfig(configPath, originalText, config, edits);
           removedCount++;
-          console.log(`  ${green}✓${reset} Removed GSD permissions from ${path.basename(configPath)}`);
+          console.log(`  ${green}✓${reset} Removed GSD permissions${mcpRemoved ? ' and MCP server' : ''} from ${path.basename(configPath)}`);
         }
       } catch (e) {
         // Ignore JSON parse errors
@@ -9219,8 +9407,9 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
     const configPath = resolveKiloConfigPath(targetDir);
     if (fs.existsSync(configPath)) {
       try {
-        const config = parseJsonc(fs.readFileSync(configPath, 'utf8'));
-        let modified = false;
+        const originalText = fs.readFileSync(configPath, 'utf8');
+        const config = parseJsonc(originalText);
+        const edits = [];
 
         // Remove GSD permission entries
         if (config.permission) {
@@ -9230,7 +9419,7 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
               for (const key of keys) {
                 if (key.includes('gsd-core')) {
                   delete config.permission[permType][key];
-                  modified = true;
+                  edits.push({ path: ['permission', permType, key], remove: true });
                 }
               }
               // Clean up empty objects
@@ -9244,8 +9433,8 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
           }
         }
 
-        if (modified) {
-          fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
+        if (edits.length > 0) {
+          writeJsoncConfig(configPath, originalText, config, edits);
           removedCount++;
           console.log(`  ${green}✓${reset} Removed GSD permissions from ${path.basename(configPath)}`);
         }
@@ -9287,6 +9476,67 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
     console.log(`  ${green}✓${reset} Removed ${MANIFEST_NAME}`);
   }
 
+  // #5335: the installer's own bookkeeping goes with it — the applied-migrations state and the migration
+  // journal. The journal's `-backups/` folders hold copies of files the USER had modified, so a folder that
+  // still has content is kept; everything GSD generated for itself (run records, rollback snapshots, empty
+  // folders) is removed.
+  const installStatePath = path.join(targetDir, 'gsd-install-state.json');
+  if (fs.existsSync(installStatePath)) {
+    fs.rmSync(installStatePath, { force: true });
+    removedCount++;
+    console.log(`  ${green}✓${reset} Removed gsd-install-state.json`);
+  }
+  const journalDir = path.join(targetDir, 'gsd-migration-journal');
+  if (fs.existsSync(journalDir)) {
+    let journalEntriesRemoved = 0;
+    try {
+      for (const entry of fs.readdirSync(journalDir, { withFileTypes: true })) {
+        const full = path.join(journalDir, entry.name);
+        if (entry.isSymbolicLink()) continue;
+        if (entry.isFile() && entry.name.endsWith('.json')) {
+          fs.rmSync(full, { force: true });
+          journalEntriesRemoved++;
+        } else if (entry.isDirectory() && entry.name.endsWith('-rollback')) {
+          fs.rmSync(full, { recursive: true, force: true });
+          journalEntriesRemoved++;
+        } else if (entry.isDirectory() && entry.name.endsWith('-backups')) {
+          try { fs.rmdirSync(full); journalEntriesRemoved++; } catch { /* holds the user's backed-up files: keep */ }
+        }
+      }
+      fs.rmdirSync(journalDir);
+    } catch { /* a non-empty journal dir (kept backups) stays */ }
+    if (journalEntriesRemoved > 0) {
+      removedCount++;
+      console.log(`  ${green}✓${reset} Removed gsd-migration-journal/ records`);
+    }
+  }
+
+  // #5335: the installer's user-artifact staging area is empty once the install it served is over. rmdir only
+  // succeeds on an empty directory, so anything still staged there is left for its owner.
+  try {
+    fs.rmdirSync(path.join(targetDir, '.gsd-staging', 'user-artifacts'));
+    fs.rmdirSync(path.join(targetDir, '.gsd-staging'));
+  } catch { /* absent or not empty */ }
+
+  // #5335: OpenCode never reads settings.json, but the shared-settings install step creates it as `{}`.
+  // An empty one carries nothing of the user's; a populated one is left alone.
+  if (resolveInstallPlan(runtime).finishPermissionWriter === 'opencode') {
+    const emptySettingsPath = path.join(targetDir, 'settings.json');
+    try {
+      const parsed = JSON.parse(fs.readFileSync(emptySettingsPath, 'utf8'));
+      if (parsed && typeof parsed === 'object' && !Array.isArray(parsed) && Object.keys(parsed).length === 0) {
+        fs.rmSync(emptySettingsPath, { force: true });
+        removedCount++;
+        console.log(`  ${green}✓${reset} Removed empty settings.json`);
+      }
+    } catch { /* absent, unreadable or populated: leave it */ }
+  }
+
+  // #5335: the machine-wide defaults the install wrote for this runtime, when nothing else needs them.
+  if (revertNonClaudeDefaults(runtime)) {
+    removedCount++;
+  }
+
   if (removedCount === 0) {
     console.log(`  ${yellow}⚠${reset} No GSD files found to remove.`);
   }
@@ -9298,64 +9548,30 @@ function uninstall(isGlobal, runtime = DEFAULT_RUNTIME) {
 }
 
 /**
- * Parse JSONC (JSON with Comments) by stripping comments and trailing commas.
- * OpenCode supports JSONC format via jsonc-parser, so users may have comments.
- * This is a lightweight inline parser to avoid adding dependencies.
- */
-function parseJsonc(content) {
-  // Strip BOM if present
-  if (content.charCodeAt(0) === 0xFEFF) {
-    content = content.slice(1);
-  }
-
-  // Remove single-line and block comments while preserving strings
-  let result = '';
-  let inString = false;
-  let i = 0;
-  while (i < content.length) {
-    const char = content[i];
-    const next = content[i + 1];
-
-    if (inString) {
-      result += char;
-      // Handle escape sequences
-      if (char === '\\' && i + 1 < content.length) {
-        result += next;
-        i += 2;
-        continue;
-      }
-      if (char === '"') {
-        inString = false;
-      }
-      i++;
-    } else {
-      if (char === '"') {
-        inString = true;
-        result += char;
-        i++;
-      } else if (char === '/' && next === '/') {
-        // Skip single-line comment until end of line
-        while (i < content.length && content[i] !== '\n') {
-          i++;
-        }
-      } else if (char === '/' && next === '*') {
-        // Skip block comment
-        i += 2;
-        while (i < content.length - 1 && !(content[i] === '*' && content[i + 1] === '/')) {
-          i++;
-        }
-        i += 2; // Skip closing */
-      } else {
-        result += char;
-        i++;
-      }
+ * Write back an OpenCode/Kilo config the installer changed (#5334).
+ *
+ * A file that carries JSONC syntax (a `.jsonc` name, comments or trailing commas) is edited as text, so
+ * only the keys GSD owns change and the user's annotations and layout survive. Anything the text editor
+ * cannot handle, and plain JSON, keeps the previous `JSON.stringify` rewrite.
+ *
+ * @param {string} configPath
+ * @param {string|null} originalText  current file text, or null when the file is new
+ * @param {object} config             the mutated parsed config (used for the fallback)
+ * @param {Array<{path: string[], value?: unknown, remove?: boolean}>} edits
+ */
+function writeJsoncConfig(configPath, originalText, config, edits) {
+  if (typeof originalText === 'string' && (configPath.endsWith('.jsonc') || hasJsoncFeatures(originalText))) {
+    let text = originalText;
+    for (const edit of edits) {
+      text = edit.remove ? removeJsoncValue(text, edit.path) : setJsoncValue(text, edit.path, edit.value);
+      if (text === null) break;
+    }
+    if (text !== null) {
+      fs.writeFileSync(configPath, text);
+      return;
     }
   }
-
-  // Remove trailing commas before } or ]
-  result = result.replace(/,(\s*[}\]])/g, '$1');
-
-  return JSON.parse(result);
+  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
 }
 
 /**
@@ -9377,9 +9593,11 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
 
   // Read existing config or create empty object
   let config = {};
+  let originalText = null;
   if (fs.existsSync(configPath)) {
     try {
       const content = fs.readFileSync(configPath, 'utf8');
+      originalText = content;
       config = parseJsonc(content);
     } catch (e) {
       // Cannot parse - DO NOT overwrite user's config
@@ -9410,6 +9628,7 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
     : `${opencodeConfigDir.replace(/\\/g, '/')}/gsd-core/*`;
 
   let modified = false;
+  const edits = [];
 
   // Configure read permission
   if (!config.permission.read || typeof config.permission.read !== 'object') {
@@ -9417,6 +9636,7 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
   }
   if (config.permission.read[gsdPath] !== 'allow') {
     config.permission.read[gsdPath] = 'allow';
+    edits.push({ path: ['permission', 'read', gsdPath], value: 'allow' });
     modified = true;
   }
 
@@ -9426,6 +9646,7 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
   }
   if (config.permission.external_directory[gsdPath] !== 'allow') {
     config.permission.external_directory[gsdPath] = 'allow';
+    edits.push({ path: ['permission', 'external_directory', gsdPath], value: 'allow' });
     modified = true;
   }
 
@@ -9442,9 +9663,10 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
   if (config.mcp.gsd === undefined) {
     config.mcp.gsd = {
       type: 'local',
-      command: ['npx', '-y', '-p', PACKAGE_NAME, 'gsd-mcp-server'],
+      command: ['npx', '-y', '-p', PACKAGE_NAME, 'gsd-mcp-server', GSD_MCP_NO_PROMPTS_FLAG],
       enabled: true,
     };
+    edits.push({ path: ['mcp', 'gsd'], value: config.mcp.gsd });
     modified = true;
   }
 
@@ -9453,7 +9675,7 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
   }
 
   // Write config back
-  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
+  writeJsoncConfig(configPath, originalText, config, edits);
   console.log(`  ${green}✓${reset} Configured read permission for GSD docs`);
 }
 
@@ -9476,9 +9698,11 @@ function configureKiloPermissions(isGlobal = true, configDir = null) {
 
   // Read existing config or create empty object
   let config = {};
+  let originalText = null;
   if (fs.existsSync(configPath)) {
     try {
       const content = fs.readFileSync(configPath, 'utf8');
+      originalText = content;
       config = parseJsonc(content);
     } catch (e) {
       // Cannot parse - DO NOT overwrite user's config
@@ -9503,6 +9727,7 @@ function configureKiloPermissions(isGlobal = true, configDir = null) {
     : `${kiloConfigDir.replace(/\\/g, '/')}/gsd-core/*`;
 
   let modified = false;
+  const edits = [];
 
   // Configure read permission
   if (!config.permission.read || typeof config.permission.read !== 'object') {
@@ -9510,6 +9735,7 @@ function configureKiloPermissions(isGlobal = true, configDir = null) {
   }
   if (config.permission.read[gsdPath] !== 'allow') {
     config.permission.read[gsdPath] = 'allow';
+    edits.push({ path: ['permission', 'read', gsdPath], value: 'allow' });
     modified = true;
   }
 
@@ -9519,6 +9745,7 @@ function configureKiloPermissions(isGlobal = true, configDir = null) {
   }
   if (config.permission.external_directory[gsdPath] !== 'allow') {
     config.permission.external_directory[gsdPath] = 'allow';
+    edits.push({ path: ['permission', 'external_directory', gsdPath], value: 'allow' });
     modified = true;
   }
 
@@ -9527,7 +9754,7 @@ function configureKiloPermissions(isGlobal = true, configDir = null) {
   }
 
   // Write config back
-  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
+  writeJsoncConfig(configPath, originalText, config, edits);
   console.log(`  ${green}✓${reset} Configured read permission for GSD docs`);
 }
 
@@ -10012,8 +10239,9 @@ function writeManifest(configDir, runtime = DEFAULT_RUNTIME, options = {}) {
       // to git-cmd.js (validate-commit classifier) and gsd-graphify-rebuild.sh.
       const hooksLibDir = path.join(hooksDir, 'lib');
       if (fs.existsSync(hooksLibDir)) {
+        const hookLibNames = new Set(gsdHookLibFiles());
         for (const file of fs.readdirSync(hooksLibDir)) {
-          if (GSD_HOOK_LIB_FILES.includes(file)) {
+          if (hookLibNames.has(file)) {
             manifest.files[sharedHooksDirName + '/lib/' + file] = fileHash(path.join(hooksLibDir, file));
           }
         }
@@ -10063,6 +10291,14 @@ function writeManifest(configDir, runtime = DEFAULT_RUNTIME, options = {}) {
       manifest.files[`${_npM.dir}/${_npM.file}`] = fileHash(pluginInstallPath);
     }
   }
+  // The OpenCode 2.x terminal-client plugin (statusline / update banner) is tracked beside it.
+  const _cliM = hostBehaviorsFor(runtime).nativeCliPlugin;
+  if (_cliM) {
+    const cliInstallPath = path.join(configDir, _cliM.dir, _cliM.file);
+    if (fs.existsSync(cliInstallPath)) {
+      manifest.files[`${_cliM.dir}/${_cliM.file}`] = fileHash(cliInstallPath);
+    }
+  }
 
   fs.writeFileSync(path.join(configDir, MANIFEST_NAME), JSON.stringify(manifest, null, 2));
   return manifest;
@@ -12330,6 +12566,41 @@ function install(isGlobal, runtime = DEFAULT_RUNTIME, options = {}) {
           }
         }
       }
+      // #5123: the Copilot and Antigravity converters write their DEFAULT home
+      // into `@` includes and Kimi's prompt converter leaves a prose "GSD core/"
+      // path, none of which exist when the payload lives somewhere else. Point
+      // them at the real install root (the same `$HOME/…` / absolute prefix the
+      // other runtimes use). Global installs only: a local install resolves
+      // against its project, which the converters already handle.
+      const includeRetarget = hostBehaviorsFor(runtime);
+      if (isGlobal && (includeRetarget.defaultHomeIncludeRoot || includeRetarget.retargetsGsdCoreProsePath === true)) {
+        const includePrefix = runtimeArtifactConversion._computePathPrefix({
+          isGlobal: true,
+          isOpencode: false,
+          resolvedTarget: targetDir,
+          homeDir: os.homedir(),
+        });
+        for (const relPath of manifestFiles) {
+          const fileName = path.basename(relPath);
+          if (!(fileName.endsWith('.md') || fileName.endsWith('.toml'))) continue;
+          if (fileName === 'CHANGELOG.md') continue;
+          const retargetPath = path.join(targetDir, relPath);
+          let retargetContent;
+          try {
+            retargetContent = fs.readFileSync(retargetPath, 'utf8');
+          } catch (_retargetReadErr) {
+            continue; // inaccessible or missing — never fail the install over this pass
+          }
+          const retargeted = runtimeArtifactConversion.retargetInstalledIncludes(retargetContent, includeRetarget, includePrefix);
+          if (retargeted !== retargetContent) {
+            try {
+              fs.writeFileSync(retargetPath, retargeted);
+            } catch (_retargetWriteErr) {
+              continue;
+            }
+          }
+        }
+      }
       for (const relPath of manifestFiles) {
         const fileName = path.basename(relPath);
         if (!(fileName.endsWith('.md') || fileName.endsWith('.toml'))) continue;
@@ -13024,7 +13295,7 @@ function install(isGlobal, runtime = DEFAULT_RUNTIME, options = {}) {
       }
       const kimiHookOpts = { portableHooks: hasPortableHooks, runtime };
       const kimiHooksTomlPath = path.join(kimiHooksRoot, 'config.toml');
-      const kimiHooksResult = writeKimiHooksToml(kimiHooksTomlPath, kimiHooksRoot, { hookOpts: kimiHookOpts });
+      const kimiHooksResult = writeKimiHooksToml(kimiHooksTomlPath, kimiHooksRoot, { hookOpts: kimiHookOpts, contextWarnings: runtimeSupportsContextWarnings(runtime) });
       configuredEntrypoints.push(...kimiHooksResult.configuredEntrypoints);
       if (kimiHooksResult.changed) {
         console.log(`  ${green}✓${reset} Configured ${kimiHooksResult.entryCount} GSD hook(s) in ${kimiHooksTomlPath}`);
@@ -13306,6 +13577,9 @@ function install(isGlobal, runtime = DEFAULT_RUNTIME, options = {}) {
   const updateCheckCommand = isGlobal
     ? buildHookCommand(targetDir, 'gsd-check-update.js', hookOpts)
     : localCmd('gsd-check-update.js');
+  // #4840: no metrics writer on this host -> no monitor to register (see runtimeSupportsContextWarnings).
+  const contextWarnings = runtimeSupportsContextWarnings(runtime);
+  // The command stays built: the extended lifecycle events (SubagentStop, PreCompact, ...) still route to it.
   const contextMonitorCommand = isGlobal
     ? buildHookCommand(targetDir, 'gsd-context-monitor.js', hookOpts)
     : localCmd('gsd-context-monitor.js');
@@ -13350,6 +13624,7 @@ function install(isGlobal, runtime = DEFAULT_RUNTIME, options = {}) {
     hooksSurface: plan.hooksSurface,
     updateCheckCommand,
     contextMonitorCommand,
+    contextWarnings,
     promptGuardCommand,
     readGuardCommand,
     readInjectionScannerCommand,
@@ -13358,6 +13633,9 @@ function install(isGlobal, runtime = DEFAULT_RUNTIME, options = {}) {
     localCmd,
     localShellCmd,
   });
+  if (!contextWarnings) {
+    console.log(`  ${dim}↳${reset} ${getRuntimeLabel(runtime)}: agent-facing context warnings are unsupported (no statusline writes the context metrics the monitor reads), so the context monitor hook is not registered`);
+  }
 
   // Compute the update-banner hook command alongside the others so
   // installAllRuntimes can register it at finalize time when the user opts
@@ -13626,6 +13904,31 @@ function finishInstall(settingsPath, settings, statuslineCommand, shouldInstallS
   // Configure OpenCode permissions
   if (plan.finishPermissionWriter === 'opencode' && !process.env.GSD_TEST_MODE) {
     configureOpencodePermissions(isGlobal, configDir);
+    // ADR-5331: say which OpenCode generation this install will run under. Informational only —
+    // a failed probe never affects the install.
+    try {
+      const ocv = require('../gsd-core/bin/lib/opencode-version.cjs');
+      const gen = ocv.detectOpencodeGeneration();
+      if (gen.generation !== null && typeof configDir === 'string' && configDir) {
+        recordHostGeneration(configDir, { generation: gen.generation, version: gen.version });
+      }
+      if (gen.generation === 2) {
+        console.log(`  ${green}✓${reset} OpenCode ${gen.version || '2.x'} detected — GSD loads its OpenCode 2.x plugin entrypoint`);
+      } else if (gen.generation === 1) {
+        console.log(`  ${green}✓${reset} OpenCode ${gen.version || '1.x'} detected — GSD loads its OpenCode 1.x plugin entrypoint`);
+      }
+      // ADR-5331 D6 / E8: OpenCode 2.x migrates its data directory one way. Say so before it happens, and say
+      // when 1.x is installed over a data directory 2.x already migrated (1.x cannot open it).
+      const dataDir = ocv.resolveOpencodeDataDir();
+      const notice = ocv.describeDataDirNotice(gen.generation, ocv.classifyOpencodeDatabase(path.join(dataDir, 'opencode.db')), dataDir);
+      if (notice) {
+        console.log(notice.level === 'warn' ? `  ${yellow}⚠${reset} ${notice.text}` : `  ${dim}${notice.text}${reset}`);
+      }
+      // Phase 3 (#5339): OpenCode 1.x is bug-fix-only until the freeze date. The `opencode` runtime only —
+      // this block does not run for Kilo.
+      const deprecation = ocv.describeDeprecationNotice(gen.generation);
+      if (deprecation) console.log(`  ${yellow}⚠${reset} ${deprecation}`);
+    } catch { /* detection is advisory */ }
   }
 
   // Configure Kilo permissions