@opengsd/gsd-core 1.5.0-rc.2 → 1.5.0-rc.3

package/gsd-core/bin/lib/state.cjs

@@ -245,34 +245,76 @@ function updateCurrentPositionFields(content, fields) {
     let posBody = posMatch[2];
     const statusDefaults = state_document_cjs_1.KNOWN_TEMPLATE_DEFAULTS['Status'];
     const lastActivityDefaults = state_document_cjs_1.KNOWN_TEMPLATE_DEFAULTS['Last Activity'];
-    if (fields.status && /^Status:/m.test(posBody)) {
-        // Only replace when the existing Current Position Status is a known template default.
-        const existingStatusMatch = posBody.match(/^Status:\s*(.+)$/m);
-        const existingStatus = existingStatusMatch ? existingStatusMatch[1].trim() : null;
-        const isInList = existingStatus && statusDefaults.some(d => d.toLowerCase() === existingStatus.toLowerCase());
-        const matchesPattern = existingStatus && state_document_cjs_1.KNOWN_STATUS_PATTERNS.some(p => p.test(existingStatus));
-        const isDefault = !existingStatus || isInList || matchesPattern;
-        if (isDefault) {
-            posBody = posBody.replace(/^Status:.*$/m, `Status: ${fields.status}`);
-        }
-    }
-    if (fields.lastActivity && /^Last activity:/im.test(posBody)) {
-        // Only replace when the existing Current Position Last activity is a known template
-        // default (a bare ISO date).  Executor-authored narrative prose is preserved.
-        const existingActivityMatch = posBody.match(/^Last activity:\s*(.+)$/im);
-        const existingActivity = existingActivityMatch ? existingActivityMatch[1].trim() : null;
-        // A bare ISO date (YYYY-MM-DD with nothing after) is handler-generated.
-        // A date with a narrative suffix (e.g. "2026-02-15 -- blocked by infra...")
-        // was authored by the executor and must be preserved.
-        const isDateShape = existingActivity && /^\d{4}-\d{2}-\d{2}$/.test(existingActivity);
-        const inList = existingActivity && lastActivityDefaults.some(d => d.toLowerCase() === existingActivity.toLowerCase());
-        const isDefault = !existingActivity || isDateShape || inList;
-        if (isDefault) {
-            posBody = posBody.replace(/^Last activity:.*$/im, `Last activity: ${fields.lastActivity}`);
-        }
-    }
-    if (fields.plan && /^Plan:/m.test(posBody)) {
-        posBody = posBody.replace(/^Plan:.*$/m, `Plan: ${fields.plan}`);
+    if (fields.status) {
+        if (/^Status:/m.test(posBody)) {
+            // Inline format: Status: value — only replace when the existing value is a
+            // known template default (Knuth invariant: preserve executor-authored values).
+            const existingStatusMatch = posBody.match(/^Status:\s*(.+)$/m);
+            const existingStatus = existingStatusMatch ? existingStatusMatch[1].trim() : null;
+            const isInList = existingStatus && statusDefaults.some(d => d.toLowerCase() === existingStatus.toLowerCase());
+            const matchesPattern = existingStatus && state_document_cjs_1.KNOWN_STATUS_PATTERNS.some(p => p.test(existingStatus));
+            const isDefault = !existingStatus || isInList || matchesPattern;
+            if (isDefault) {
+                posBody = posBody.replace(/^Status:.*$/m, `Status: ${fields.status}`);
+            }
+        }
+        else {
+            // Table format: | Status | value | — apply the same preserve-authored guard
+            // as the inline branch: only overwrite a known template default.
+            // (Finding 2 code-review: the table branch was unconditional before this fix.)
+            const existingStatus = (0, state_document_cjs_1.stateExtractField)(posBody, 'Status');
+            const isInList = existingStatus && statusDefaults.some(d => d.toLowerCase() === existingStatus.toLowerCase());
+            const matchesPattern = existingStatus && state_document_cjs_1.KNOWN_STATUS_PATTERNS.some(p => p.test(existingStatus));
+            const isDefault = !existingStatus || isInList || matchesPattern;
+            if (isDefault) {
+                const replaced = (0, state_document_cjs_1.stateReplaceField)(posBody, 'Status', fields.status);
+                if (replaced !== null)
+                    posBody = replaced;
+            }
+        }
+    }
+    if (fields.lastActivity) {
+        if (/^Last activity:/im.test(posBody)) {
+            // Inline format — only replace when the existing value is a known template
+            // default (a bare ISO date).  Executor-authored narrative prose is preserved.
+            const existingActivityMatch = posBody.match(/^Last activity:\s*(.+)$/im);
+            const existingActivity = existingActivityMatch ? existingActivityMatch[1].trim() : null;
+            // A bare ISO date (YYYY-MM-DD with nothing after) is handler-generated.
+            // A date with a narrative suffix (e.g. "2026-02-15 -- blocked by infra...")
+            // was authored by the executor and must be preserved.
+            const isDateShape = existingActivity && /^\d{4}-\d{2}-\d{2}$/.test(existingActivity);
+            const inList = existingActivity && lastActivityDefaults.some(d => d.toLowerCase() === existingActivity.toLowerCase());
+            const isDefault = !existingActivity || isDateShape || inList;
+            if (isDefault) {
+                posBody = posBody.replace(/^Last activity:.*$/im, `Last activity: ${fields.lastActivity}`);
+            }
+        }
+        else {
+            // Table format — apply the same preserve-authored guard as the inline branch:
+            // only overwrite a bare ISO date or a known default; preserve narrative prose.
+            // (Finding 2 code-review: the table branch was unconditional before this fix.)
+            const existingActivity = (0, state_document_cjs_1.stateExtractField)(posBody, 'Last Activity')
+                ?? (0, state_document_cjs_1.stateExtractField)(posBody, 'Last activity');
+            const isDateShape = existingActivity && /^\d{4}-\d{2}-\d{2}$/.test(existingActivity);
+            const inList = existingActivity && lastActivityDefaults.some(d => d.toLowerCase() === existingActivity.toLowerCase());
+            const isDefault = !existingActivity || isDateShape || inList;
+            if (isDefault) {
+                const replaced = (0, state_document_cjs_1.stateReplaceField)(posBody, 'Last Activity', fields.lastActivity)
+                    ?? (0, state_document_cjs_1.stateReplaceField)(posBody, 'Last activity', fields.lastActivity);
+                if (replaced !== null)
+                    posBody = replaced;
+            }
+        }
+    }
+    if (fields.plan) {
+        if (/^Plan:/m.test(posBody)) {
+            posBody = posBody.replace(/^Plan:.*$/m, `Plan: ${fields.plan}`);
+        }
+        else {
+            const replaced = (0, state_document_cjs_1.stateReplaceField)(posBody, 'Plan', fields.plan);
+            if (replaced !== null)
+                posBody = replaced;
+        }
     }
     return content.replace(posPattern, () => `${posMatch[1]}${posBody}`);
 }
@@ -560,6 +602,101 @@ function cmdStateAddBlocker(cwd, text, raw) {
         result['created'] = true;
     output(result, raw, 'true');
 }
+function cmdStateAddRoadmapEvolution(cwd, options, raw) {
+    const statePath = planningPaths(cwd).state;
+    if (!node_fs_1.default.existsSync(statePath)) {
+        output({ error: 'STATE.md not found' }, raw, undefined);
+        return;
+    }
+    const { phase, action, after, note, note_file, urgent } = options;
+    let noteText = undefined;
+    try {
+        noteText = readTextArgOrFile(cwd, note, note_file, 'note');
+    }
+    catch (err) {
+        output({ added: false, reason: err.message }, raw, 'false');
+        return;
+    }
+    // Reject missing / empty / whitespace-only notes — an evolution entry with no
+    // narrative is meaningless and would corrupt the section with a dangling bullet.
+    if (!noteText || !noteText.trim()) {
+        output({ error: 'note required' }, raw, undefined);
+        return;
+    }
+    // Flatten line breaks so the entry is always a single Markdown bullet. The
+    // dedupe + rendering contract is line-oriented; a multiline --note-file would
+    // otherwise spill continuation lines outside the bullet and defeat dedupe.
+    // Internal spacing (e.g. dollar columns) is preserved.
+    const flatNote = noteText.replace(/\s*[\r\n]+\s*/g, ' ').trim();
+    const actionText = (action && action.trim()) || 'changed';
+    const afterText = after && after.trim() ? ` after Phase ${after.trim()}` : '';
+    const urgentText = urgent ? ' (URGENT)' : '';
+    const entry = `- Phase ${phase || '?'} ${actionText}${afterText}: ${flatNote}${urgentText}`;
+    let duplicate = false;
+    let created = false;
+    let subsectionCreated = false;
+    // The Roadmap Evolution subsection lives under `## Accumulated Context`. Scope
+    // every lookup to that section's body so a `### Roadmap Evolution` heading in an
+    // unrelated h2 section (or a fenced example) can never be matched or mutated.
+    // The accBody lookahead stops only at the next h2 (`\n##[^#]`), so nested h3
+    // subsections stay inside the captured Accumulated Context body.
+    // Section boundaries mirror the sibling handlers (add-decision/add-blocker):
+    // a trailing CR on a CRLF STATE.md is absorbed by the lazy body and trimmed,
+    // so following sections are preserved without data loss (see the CRLF test).
+    readModifyWriteStateMd(statePath, (content) => {
+        const accPattern = /(##\s*Accumulated Context\s*\n)([\s\S]*?)(?=\n##[^#]|$)/i;
+        const accMatch = content.match(accPattern);
+        if (accMatch) {
+            const accHeader = accMatch[1];
+            const accBody = accMatch[2];
+            // Find `### Roadmap Evolution` WITHIN the Accumulated Context body only.
+            // Bounded by the next h3/h2 or the end of the section body.
+            const subPattern = /(###\s*Roadmap Evolution\s*\n)([\s\S]*?)(?=\n###?|$)/i;
+            const subMatch = accBody.match(subPattern);
+            if (subMatch) {
+                let subBody = subMatch[2];
+                // Dedupe: exact (trimmed) line already present is a no-op replay.
+                if (subBody.split('\n').some((line) => line.trim() === entry.trim())) {
+                    duplicate = true;
+                    return content;
+                }
+                subBody = subBody.replace(/None yet\.?\s*\n?/gi, '');
+                subBody = subBody.trimEnd() + '\n' + entry + '\n';
+                const newAccBody = accBody.replace(subPattern, (_m, header) => `${header}${subBody}`);
+                return content.replace(accPattern, () => `${accHeader}${newAccBody}`);
+            }
+            // Subsection missing — append it at the end of the Accumulated Context body.
+            subsectionCreated = true;
+            const trimmedAcc = accBody.trimEnd();
+            const block = `${trimmedAcc ? `${trimmedAcc}\n\n` : ''}### Roadmap Evolution\n\n${entry}\n`;
+            return content.replace(accPattern, () => `${accHeader}${block}`);
+        }
+        // No `## Accumulated Context` — DWIM: create both at end of file.
+        // Mirrors the add-decision / add-blocker auto-create behavior.
+        created = true;
+        subsectionCreated = true;
+        const scaffold = [
+            '',
+            '## Accumulated Context',
+            '',
+            '### Roadmap Evolution',
+            '',
+            entry,
+            '',
+        ].join('\n');
+        return content.trimEnd() + '\n' + scaffold;
+    }, cwd);
+    if (duplicate) {
+        output({ added: false, reason: 'duplicate', entry }, raw, 'false');
+        return;
+    }
+    const result = { added: true, entry };
+    if (created)
+        result['created'] = true;
+    if (subsectionCreated)
+        result['subsection_created'] = true;
+    output(result, raw, 'true');
+}
 function cmdStateResolveBlocker(cwd, text, raw) {
     const statePath = planningPaths(cwd).state;
     if (!node_fs_1.default.existsSync(statePath)) {
@@ -679,7 +816,9 @@ function cmdStateRecordSession(cwd, options, raw) {
         // newly-written Stopped at / Resume file end up in the second (invisible) block.
         // Fix: when a `## Session` heading already exists, normalize THAT block in place
         // (insert / replace canonical bold-label lines within the existing section).
-        // Only append a brand-new section when NO `## Session` heading exists at all.
+        // A `## Session Continuity` heading (bootstrap shape) is handled additively —
+        // missing canonical fields are inserted while the heading and any prose are
+        // preserved (#1101). Only append a brand-new section when NEITHER heading exists.
         const callerSuppliedValues = !!(options.stopped_at || (options.resume_file !== undefined && options.resume_file !== null));
         const needsStoppedAt = options.stopped_at && !updated.includes('Stopped At');
         const needsResumeFile = options.resume_file !== undefined && options.resume_file !== null && !updated.includes('Resume File');
@@ -689,9 +828,14 @@ function cmdStateRecordSession(cwd, options, raw) {
                 ? options.resume_file
                 : 'None';
             const stoppedAtValue = options.stopped_at || 'None';
-            // Determine whether a ## Session heading already exists in the body.
-            const existingSessionHeading = /^## Session\s*$/im.test(content);
-            if (existingSessionHeading) {
+            // Determine whether a session heading already exists in the body. The
+            // canonical normalized form is `## Session`; the bootstrap templates
+            // (workstream.cts, gsd2-import.cts, templates/state.md) instead emit
+            // `## Session Continuity`. Treat each separately so we never append a
+            // duplicate section alongside an existing one.
+            const existingCanonicalSession = /^## Session[ \t]*$/im.test(content);
+            const existingSessionContinuity = /^## Session Continuity[ \t]*$/im.test(content);
+            if (existingCanonicalSession) {
                 // Normalize in place: replace the ENTIRE BODY of the existing ## Session
                 // section (heading + all content up to the next ## heading or EOF) with
                 // canonical bold-label lines. The negative-lookahead per-line pattern
@@ -708,8 +852,31 @@ function cmdStateRecordSession(cwd, options, raw) {
                     '',
                 ].join('\n'));
             }
+            else if (existingSessionContinuity) {
+                // #1101: a `## Session Continuity` section already exists (bootstrap
+                // shape). Previously this fell through to the append branch and created
+                // a SECOND `## Session` block — a duplicate. Instead, insert only the
+                // canonical fields that are still missing, right after the heading,
+                // preserving the `## Session Continuity` heading and ALL existing lines
+                // (e.g. prose like "Next recommended action"). Fields already updated in
+                // place above (needs* false) are not re-inserted. A function replacement
+                // is used so `$`-bearing caller values are inserted literally (#3454).
+                const linesToInsert = [];
+                if (needsLastSession)
+                    linesToInsert.push(`**Last session:** ${now}`);
+                if (needsStoppedAt)
+                    linesToInsert.push(`**Stopped at:** ${stoppedAtValue}`);
+                if (needsResumeFile)
+                    linesToInsert.push(`**Resume file:** ${resumeValue}`);
+                if (linesToInsert.length > 0) {
+                    // Case-insensitive to match the `existingSessionContinuity` detection
+                    // above (#1101 review F3) — otherwise a lowercase heading would detect
+                    // but no-op the insert while still reporting the fields as updated.
+                    content = content.replace(/^(## Session Continuity[ \t]*\n)/im, (_m, heading) => heading + linesToInsert.join('\n') + '\n');
+                }
+            }
             else {
-                // No ## Session heading exists at all — append a new canonical section.
+                // No session heading exists at all — append a new canonical section.
                 const scaffold = [
                     '',
                     '## Session',
@@ -741,6 +908,20 @@ function cmdStateRecordSession(cwd, options, raw) {
         output({ recorded: false, reason: 'No session fields found in STATE.md' }, raw, 'false');
     }
 }
+/**
+ * Match the session section body from a STATE.md body. #1101: recognise the
+ * bootstrap `## Session Continuity` heading but PREFER the normalized `## Session`
+ * block when both exist (legacy duplicate files), so the reader agrees with the
+ * writer (which updates `## Session` first). `(?:^|\n)` line-anchors (kept out of
+ * `/m` so `$` stays end-of-string for the `(?=\n##|$)` section boundary), which
+ * excludes an h3 `### Session Continuity`; the trailing-` Archive` boundary still
+ * excludes `## Session Continuity Archive` (preserving the #2444 scoping).
+ * Returns the match whose group 1 is the section body, or null.
+ */
+function matchSessionSection(body) {
+    return body.match(/(?:^|\n)##[ \t]*Session[ \t]*\n([\s\S]*?)(?=\n##|$)/i)
+        || body.match(/(?:^|\n)##[ \t]*Session Continuity[ \t]*\n([\s\S]*?)(?=\n##|$)/i);
+}
 function cmdStateSnapshot(cwd, raw) {
     const statePath = planningPaths(cwd).state;
     if (!node_fs_1.default.existsSync(statePath)) {
@@ -816,7 +997,9 @@ function cmdStateSnapshot(cwd, raw) {
         stopped_at: null,
         resume_file: null,
     };
-    const sessionMatch = body.match(/##\s*Session\s*\n([\s\S]*?)(?=\n##|$)/i);
+    // #1101: prefer the canonical `## Session` block, falling back to the bootstrap
+    // `## Session Continuity` heading. See matchSessionSection for the anchoring.
+    const sessionMatch = matchSessionSection(body);
     if (sessionMatch) {
         const sessionSection = sessionMatch[1];
         // Accept both `**Last Date:**` (canonical template form) and `**Last session:**`
@@ -872,7 +1055,9 @@ function buildStateFrontmatter(bodyContent, cwd) {
     // historical "Stopped at:" prose elsewhere in the body (e.g. in a
     // Session Continuity Archive section) never overwrites the current value.
     // Fall back to full-body search only when no ## Session section exists.
-    const sessionSectionMatch = bodyContent.match(/##\s*Session\s*\n([\s\S]*?)(?=\n##|$)/i);
+    // #1101: prefer the canonical `## Session` block, falling back to the bootstrap
+    // `## Session Continuity` heading. See matchSessionSection for the anchoring.
+    const sessionSectionMatch = matchSessionSection(bodyContent);
     const sessionBodyScope = sessionSectionMatch ? sessionSectionMatch[1] : bodyContent;
     const stoppedAt = (0, state_document_cjs_1.stateExtractField)(sessionBodyScope, 'Stopped At') || (0, state_document_cjs_1.stateExtractField)(sessionBodyScope, 'Stopped at');
     const pausedAt = (0, state_document_cjs_1.stateExtractField)(bodyContent, 'Paused At');
@@ -2146,6 +2331,7 @@ module.exports = {
     cmdStateUpdateProgress,
     cmdStateAddDecision,
     cmdStateAddBlocker,
+    cmdStateAddRoadmapEvolution,
     cmdStateResolveBlocker,
     cmdStateRecordSession,
     cmdStateSnapshot,

package/gsd-core/bin/lib/verify.cjs

@@ -1352,7 +1352,7 @@ function cmdVerifySchemaDrift(cwd, phaseArg, skipFlag, raw) {
     const pDir = planningDir(cwd);
     const phasesDir = node_path_1.default.join(pDir, 'phases');
     if (!node_fs_1.default.existsSync(phasesDir)) {
-        output({ drift_detected: false, blocking: false, message: 'No phases directory' }, raw);
+        output({ block: false, drift_detected: false, blocking: false, message: 'No phases directory' }, raw);
         return;
     }
     let phaseDir = null;
@@ -1369,7 +1369,7 @@ function cmdVerifySchemaDrift(cwd, phaseArg, skipFlag, raw) {
             phaseDir = exact;
     }
     if (!phaseDir) {
-        output({ drift_detected: false, blocking: false, message: `Phase directory not found: ${phaseArg}` }, raw);
+        output({ block: false, drift_detected: false, blocking: false, message: `Phase directory not found: ${phaseArg}` }, raw);
         return;
     }
     const allFiles = [];
@@ -1392,14 +1392,20 @@ function cmdVerifySchemaDrift(cwd, phaseArg, skipFlag, raw) {
         executionLog += '\n' + gitLog.stdout;
     }
     const result = (0, schema_detect_cjs_1.checkSchemaDrift)(allFiles, executionLog, { skipCheck: !!skipFlag });
+    const isSkipped = !!result['skipped'];
     output({
+        // Uniform gate contract: `block` = true means "this gate's bad condition is met".
+        // When skipCheck is true (GSD_SKIP_SCHEMA_CHECK=true), the gate is bypassed —
+        // block must be false regardless of whether drift was detected.
+        // drift_detected and blocking are kept for compatibility.
+        block: isSkipped ? false : !!result['driftDetected'],
         drift_detected: result['driftDetected'],
         blocking: result['blocking'],
         schema_files: result['schemaFiles'],
         orms: result['orms'],
         unpushed_orms: result['unpushedOrms'],
         message: result['message'],
-        skipped: result['skipped'] || false,
+        skipped: isSkipped,
     }, raw);
 }
 function cmdVerifyCodebaseDrift(cwd, raw) {
@@ -1412,6 +1418,8 @@ function cmdVerifyCodebaseDrift(cwd, raw) {
         const structurePath = node_path_1.default.join(codebaseDir, 'STRUCTURE.md');
         if (!node_fs_1.default.existsSync(structurePath)) {
             emit({
+                // Uniform gate contract: block = action_required (false when skipped).
+                block: false,
                 skipped: true,
                 reason: 'no-structure-md',
                 action_required: false,
@@ -1426,6 +1434,7 @@ function cmdVerifyCodebaseDrift(cwd, raw) {
         }
         catch (err) {
             emit({
+                block: false,
                 skipped: true,
                 reason: 'cannot-read-structure-md: ' + (err instanceof Error ? err.message : String(err)),
                 action_required: false,
@@ -1438,6 +1447,7 @@ function cmdVerifyCodebaseDrift(cwd, raw) {
         const revProbe = (0, shell_command_projection_cjs_1.execGit)(['rev-parse', 'HEAD'], { cwd });
         if (revProbe.exitCode !== 0) {
             emit({
+                block: false,
                 skipped: true,
                 reason: 'not-a-git-repo',
                 action_required: false,
@@ -1459,6 +1469,7 @@ function cmdVerifyCodebaseDrift(cwd, raw) {
         const diff = (0, shell_command_projection_cjs_1.execGit)(['diff', '--name-status', base, 'HEAD'], { cwd });
         if (diff.exitCode !== 0) {
             emit({
+                block: false,
                 skipped: true,
                 reason: 'git-diff-failed',
                 action_required: false,
@@ -1500,10 +1511,13 @@ function cmdVerifyCodebaseDrift(cwd, raw) {
             action,
             runtime: (0, runtime_slash_cjs_1.resolveRuntime)(cwd),
         });
+        const actionRequired = !!driftResult['actionRequired'];
         emit({
+            // Uniform gate contract: block = action_required.
+            block: actionRequired,
             skipped: !!driftResult['skipped'],
             reason: driftResult['reason'] || null,
-            action_required: !!driftResult['actionRequired'],
+            action_required: actionRequired,
             directive: driftResult['directive'],
             spawn_mapper: !!driftResult['spawnMapper'],
             affected_paths: driftResult['affectedPaths'] || [],
@@ -1516,6 +1530,7 @@ function cmdVerifyCodebaseDrift(cwd, raw) {
     }
     catch (err) {
         emit({
+            block: false,
             skipped: true,
             reason: 'exception: ' + (err && err instanceof Error ? err.message : String(err)),
             action_required: false,

package/gsd-core/bin/shared/config-defaults.manifest.json

@@ -13,7 +13,7 @@
   "project_code": null,
   "phase_id_convention": null,
   "mode": "interactive",
-  "claude_md_path": "./CLAUDE.md",
+  "claude_md_path": "./.claude/CLAUDE.md",
   "git": {
     "branching_strategy": "none",
     "create_tag": true,
@@ -28,7 +28,6 @@
     "verifier": true,
     "nyquist_validation": true,
     "ai_integration_phase": true,
-    "tdd_mode": false,
     "human_verify_mode": "end-of-phase",
     "auto_advance": false,
     "_auto_chain_active": false,

package/gsd-core/bin/shared/config-schema.manifest.json

@@ -10,17 +10,11 @@
     "brave_search",
     "firecrawl",
     "exa_search",
-    "workflow.research",
     "workflow.plan_check",
     "workflow.verifier",
-    "workflow.nyquist_validation",
-    "workflow.ai_integration_phase",
-    "workflow.ui_phase",
-    "workflow.ui_safety_gate",
     "workflow.auto_advance",
     "workflow.node_repair",
     "workflow.node_repair_budget",
-    "workflow.tdd_mode",
     "workflow.human_verify_mode",
     "workflow.text_mode",
     "workflow.research_before_questions",
@@ -29,21 +23,12 @@
     "workflow.auto_prune_state",
     "workflow.use_worktrees",
     "workflow.worktree_skip_hooks",
-    "workflow.code_review",
-    "workflow.code_review_depth",
     "workflow.code_review_command",
-    "workflow.pattern_mapper",
     "workflow.plan_bounce",
     "workflow.plan_bounce_script",
     "workflow.plan_bounce_passes",
     "workflow.plan_chunked",
     "workflow.plan_review_convergence",
-    "workflow.post_planning_gaps",
-    "workflow.security_enforcement",
-    "workflow.security_asvs_level",
-    "workflow.security_block_on",
-    "workflow.drift_threshold",
-    "workflow.drift_action",
     "code_quality.fallow.enabled",
     "code_quality.fallow.scope",
     "code_quality.fallow.profile",
@@ -76,7 +61,6 @@
     "workflow.context_coverage_gate",
     "statusline.show_last_command",
     "statusline.context_position",
-    "workflow.ui_review",
     "workflow.max_discuss_passes",
     "features.thinking_partner",
     "context",
@@ -90,8 +74,6 @@
     "manager.flags.execute",
     "response_language",
     "context_window",
-    "intel.enabled",
-    "graphify.enabled",
     "graphify.build_timeout",
     "graphify.auto_update",
     "claude_md_path",

package/gsd-core/bin/shared/model-catalog.json

@@ -153,6 +153,7 @@
     "gsd-eval-planner":           { "golden": "opus",   "balanced": "opus",   "budget": "sonnet", "phaseType": "planning",     "routingTier": "heavy" },
     "gsd-framework-selector":     { "golden": "opus",   "balanced": "sonnet", "budget": "sonnet", "phaseType": "planning",     "routingTier": "heavy" },
     "gsd-intel-updater":          { "golden": "opus",   "balanced": "sonnet", "budget": "haiku",  "phaseType": "research",     "routingTier": "light" },
+    "gsd-mempalace-curator":      { "golden": "sonnet", "balanced": "sonnet", "budget": "haiku",  "phaseType": "research",     "routingTier": "light" },
     "gsd-security-auditor":       { "golden": "opus",   "balanced": "sonnet", "budget": "sonnet", "phaseType": "verification", "routingTier": "heavy" },
     "gsd-user-profiler":          { "golden": "opus",   "balanced": "sonnet", "budget": "sonnet", "phaseType": "research",     "routingTier": "heavy" }
   }

package/gsd-core/references/loop-hook-dispatch.md

@@ -0,0 +1,61 @@
+# Loop Hook Dispatch Contract
+
+Generic reference for consuming the `--raw` JSON output of `gsd_run loop render-hooks <point>`
+in any host-loop workflow. This document is point-agnostic — it applies to every loop
+extension point (discuss:pre, discuss:post, plan:pre, plan:post, execute:pre, execute:wave:pre,
+execute:wave:post, execute:post, verify:pre, verify:post, ship:pre, ship:post).
+
+## Envelope shape
+
+```json
+{
+  "point": "discuss:pre",
+  "activeHooks": [
+    { "kind": "contribution", "into": "orchestrator", "fragment": { "inline": "..." } },
+    { "kind": "step", "ref": { "skill": "my-skill" } },
+    { "kind": "gate", "check": { "query": "..." }, "blocking": true, "onError": "skip" }
+  ],
+  "rendered": "..."
+}
+```
+
+`activeHooks` is an array of enabled hook entries for the named point. It is empty (or absent)
+when no capability has registered an active hook at this point — treat that as a no-op.
+
+## Dispatch rules by `kind`
+
+### `contribution`
+
+Inject `fragment.inline` verbatim into the context for the role named in `into`
+(e.g. `orchestrator`, `planner`). Do not paraphrase — the text is the product.
+
+### `step`
+
+Dispatch the referenced unit:
+
+- `ref.skill` present → dispatch via the Skill tool with skill id `gsd-<ref.skill>`.
+- `ref.agent` present → dispatch via the Agent tool with `subagent_type` = `ref.agent`.
+  Before dispatching an agent, print the canonical liveness banner so users know silence
+  is expected and do not kill a healthy agent:
+
+  ```
+  ◆ Spawning <agent>... (runs in a subagent — no output until it returns; expected, not a freeze)
+  ```
+
+Wait for the result before continuing to the next hook or the next step.
+
+### `gate`
+
+Evaluate `check` (one of `query`, `predicate`, or `agentVerdict`). Then honor `blocking`:
+
+- `blocking: true` → if the check returns `block: true`, surface `check.message` to the user
+  and stop the current step. Do not continue.
+- `blocking: false` → advisory only; surface the message but continue regardless of outcome.
+
+Honor `onError` if the check itself errors: `skip` means treat as non-blocking and continue;
+`fail` means surface the error and stop.
+
+## Empty / absent `activeHooks`
+
+If `activeHooks` is absent, null, or an empty array, skip silently and continue to the next
+step in the workflow. No output to the user is needed.

package/gsd-core/templates/config.json

@@ -58,5 +58,5 @@
   },
   "project_code": null,
   "agent_skills": {},
-  "claude_md_path": "./CLAUDE.md"
+  "claude_md_path": "./.claude/CLAUDE.md"
 }

package/gsd-core/workflows/audit-milestone.md

@@ -143,13 +143,15 @@ For each REQ-ID, determine status using all three sources:
 
 ## 5.5. Nyquist Compliance Discovery
 
-Skip if `workflow.nyquist_validation` is explicitly `false` (absent = enabled).
+Skip if the Nyquist capability is inactive.
 
 ```bash
-NYQUIST_CONFIG=$(gsd_run query config-get workflow.nyquist_validation --raw --default true 2>/dev/null)
+VERIFY_POST_HOOKS_JSON=$(gsd_run loop render-hooks verify:post --raw)
 ```
 
-If `false`: skip entirely.
+Resolve active step hooks from `VERIFY_POST_HOOKS_JSON` where `kind == "step"` and `ref.skill == "validate-phase"`.
+
+If no active validate-phase step hook exists: skip entirely.
 
 For each phase directory, check `*-VALIDATION.md`. If exists, parse frontmatter (`nyquist_compliant`, `wave_0_complete`).
 

package/gsd-core/workflows/autonomous.md

@@ -453,17 +453,22 @@ Skill(skill="gsd-execute-phase", args="${PHASE_NUM} --no-transition")
 
 Auto-invoke code review and fix chain. Autonomous mode chains both review and fix (unlike execute-phase/quick which only suggest fix).
 
-**Config gate:**
+**Capability dispatch:**
 ```bash
-CODE_REVIEW_ENABLED=$(gsd_run query config-get workflow.code_review 2>/dev/null || echo "true")
+EXECUTE_POST_HOOKS_JSON=$(gsd_run loop render-hooks execute:post --raw)
 ```
-If `"false"`: display "Code review skipped (workflow.code_review=false)" and proceed to 3d.
+
+Resolve active step hooks from `EXECUTE_POST_HOOKS_JSON` where `kind == "step"` and `ref.skill == "code-review"`.
+
+If no active code-review step hook exists: display "Code review skipped (code-review capability inactive)" and proceed to 3d. This covers `workflow.code_review=false` through the Capability Registry; do not query the code-review toggle directly here.
+
+For each active code-review step hook, dispatch the skill using the registry-provided stem:
 
 ```
-Skill(skill="gsd-code-review", args="${PHASE_NUM}")
+Skill(skill="gsd-${ref.skill}", args="${PHASE_NUM}")
 ```
 
-Parse status from REVIEW.md frontmatter. If "clean" or "skipped": proceed to 3d. If findings found: auto-invoke:
+Parse status from REVIEW.md frontmatter. If "clean" or "skipped": proceed to 3d. If findings found after the capability-dispatched review, auto-invoke the consolidated fix entry point:
 ```
 Skill(skill="gsd-code-review", args="${PHASE_NUM} --fix --auto")
 ```