@opengsd/gsd-core 1.5.0-rc.4 → 1.5.0

package/gsd-core/bin/lib/capability-activation.cjs

@@ -55,32 +55,59 @@ function _readRawConfigKey(filePath, dotKey) {
         return { found: false, value: undefined };
     }
 }
-function _resolveActivationValue(dotKey, config, cwd, registry) {
+/**
+ * Resolve the raw value for a dotted config key using the four-level precedence
+ * walk. Returns { found, value } with the RAW value (not coerced to boolean),
+ * so callers can decide how to interpret the value (boolean gate vs. raw config
+ * value for numeric/string settings like security_asvs_level).
+ *
+ * Precedence (mirrors _resolveActivationValue):
+ *   1. loadConfig result (config arg) — guarded nested-lookup.
+ *   2. Workstream config.json at planningDir(cwd)/config.json.
+ *   3. Root config.json at planningRoot(cwd)/config.json (only if path differs).
+ *   4. registry.configSchema[dotKey].default — schema default.
+ *   5. Absent → { found: false, value: undefined }.
+ */
+function resolveConfigKey(dotKey, opts) {
+    const { config, cwd, registry } = opts;
+    // Level 1: loadConfig result
     const fromConfig = _getNestedConfigValue(config, dotKey);
     if (fromConfig.found)
-        return Boolean(fromConfig.value);
+        return { found: true, value: fromConfig.value };
+    // Level 2 + 3: raw config.json files (only when cwd is available)
     if (cwd) {
         const wsConfigPath = node_path_1.default.join(planningDir(cwd), 'config.json');
         const rootConfigPath = node_path_1.default.join(planningRoot(cwd), 'config.json');
         const fromWs = _readRawConfigKey(wsConfigPath, dotKey);
         if (fromWs.found)
-            return Boolean(fromWs.value);
+            return { found: true, value: fromWs.value };
         if (wsConfigPath !== rootConfigPath) {
             const fromRoot = _readRawConfigKey(rootConfigPath, dotKey);
             if (fromRoot.found)
-                return Boolean(fromRoot.value);
+                return { found: true, value: fromRoot.value };
         }
     }
-    const schemaEntry = registry['configSchema']?.[dotKey];
-    if (schemaEntry && typeof schemaEntry === 'object' && schemaEntry !== null) {
-        const def = schemaEntry['default'];
-        if (def !== undefined)
-            return Boolean(def);
+    // Level 4: registry configSchema default
+    const schemaMap = registry['configSchema'];
+    if (schemaMap && typeof schemaMap === 'object' && !Array.isArray(schemaMap)
+        && Object.prototype.hasOwnProperty.call(schemaMap, dotKey)) {
+        const schemaEntry = schemaMap[dotKey];
+        if (schemaEntry && typeof schemaEntry === 'object' && schemaEntry !== null) {
+            const def = schemaEntry['default'];
+            if (def !== undefined)
+                return { found: true, value: def };
+        }
     }
-    return false;
+    // Level 5: absent
+    return { found: false, value: undefined };
+}
+function _resolveActivationValue(dotKey, config, cwd, registry) {
+    const r = resolveConfigKey(dotKey, { config, cwd, registry });
+    return r.found ? Boolean(r.value) : false;
 }
 module.exports = {
     _getNestedConfigValue,
     _readRawConfigKey,
     _resolveActivationValue,
+    resolveConfigKey,
 };

package/gsd-core/bin/lib/capability-registry.cjs

@@ -762,6 +762,7 @@ const capabilities = {
       "graphify"
     ],
     "agents": [],
+    "activationKey": "graphify.enabled",
     "config": {
       "graphify.enabled": {
         "type": "boolean",
@@ -845,6 +846,7 @@ const capabilities = {
     },
     "skills": [],
     "agents": [],
+    "activationKey": "intel.enabled",
     "config": {
       "intel.enabled": {
         "type": "boolean",

package/gsd-core/bin/lib/capability-state.cjs

@@ -18,14 +18,15 @@
  * pure, config-only resolution with no filesystem I/O.
  * cmdCapabilityState is the I/O handler.
  *
- * Dependencies (leaf modules only — no core.cjs circular risk):
+ * Dependencies (leaf modules only — no circular risk):
  *   - node:path
- *   - ./core.cjs               (output, error)
+ *   - ./io.cjs                 (output, error)
  *   - ./capability-activation.cjs (_resolveActivationValue)
  *   - ./install-profiles.cjs   (readActiveProfile, loadSkillsManifest, resolveProfile)
  *   - ./surface.cjs            (resolveSurface)
  *   - ./config-loader.cjs      (loadConfig)
  *   - ./runtime-homes.cjs      (getGlobalConfigDir — for runtimeConfigDir auto-detection)
+ *   - ./runtime-slash.cjs      (resolveRuntime — GSD_RUNTIME > config.runtime > 'claude' precedence)
  *   - capability-registry.cjs  (loaded at call time)
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
@@ -34,8 +35,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-const core = require("./core.cjs");
-const { output: coreOutput, error: coreError } = core;
+const ioMod = require("./io.cjs");
+const { output: coreOutput, error: coreError } = ioMod;
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const activationMod = require("./capability-activation.cjs");
 const { _resolveActivationValue } = activationMod;
@@ -135,6 +136,19 @@ function resolveCapabilityState(input) {
             surfaced = skills.every((s) => surfacedSkills.has(s));
         }
         const enabled = installed && surfaced;
+        // ── per-capability config activation ──────────────────────────────────────
+        // Resolve the capability's own activationKey (if present). This is the
+        // config-level toggle that gates the whole capability — separate from the
+        // per-hook `when` keys that gate individual hooks. When activationKey is
+        // absent, configActivation defaults to true (no config gate on the cap).
+        // active = enabled && configActivation  (enabled unchanged: installed && surfaced)
+        const activationKey = typeof capObj['activationKey'] === 'string' && capObj['activationKey'].length > 0
+            ? capObj['activationKey']
+            : undefined;
+        const configActivation = activationKey !== undefined
+            ? _resolveActivationValue(activationKey, config, cwd, registry)
+            : true;
+        const active = enabled && configActivation;
         // ── hooks ──────────────────────────────────────────────────────────────────
         // Collect from steps, gates, contributions. Each may have a `when` key.
         // Activation semantics (mirrors loop-resolver.isActive exactly):
@@ -165,7 +179,12 @@ function resolveCapabilityState(input) {
                     // (mirrors loop-resolver.isActive: `typeof when !== 'string' || when.length === 0` → false)
                     configured = false;
                 }
-                hooks.push({ point, kind, when: whenRaw, configured, active: enabled && configured });
+                // Hook active = capability-level active AND hook's own config gate.
+                // The capability's `active` constant (= enabled && configActivation) is
+                // used here so that a config-disabled capability (active=false) cannot
+                // produce active hooks even when the hook's own `when` is unconditional
+                // (configured=true). The capability gate cascades to all its hooks.
+                hooks.push({ point, kind, when: whenRaw, configured, active: active && configured });
             }
         }
         const stepsRaw = capObj['steps'];
@@ -174,7 +193,7 @@ function resolveCapabilityState(input) {
         processHooks(Array.isArray(stepsRaw) ? stepsRaw : [], 'step');
         processHooks(Array.isArray(gatesRaw) ? gatesRaw : [], 'gate');
         processHooks(Array.isArray(contributionsRaw) ? contributionsRaw : [], 'contribution');
-        results.push({ id: capId, tier, skills, installed, surfaced, enabled, hooks });
+        results.push({ id: capId, tier, skills, installed, surfaced, enabled, active, hooks });
     }
     // Deterministic sort by id for stable output across calls
     results.sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
@@ -283,16 +302,20 @@ function _resolveManifest(commandsGsdDir, configDir) {
 }
 /**
  * Command entry point: resolve install profile, surface, and config; compute
- * capability state; emit the envelope via core.output.
+ * capability state; emit the envelope via io.output.
  *
  * Envelope: { runtimeConfigDir, warnings?: string[], capabilities: CapabilityStateEntry[] }
  *
  * runtimeConfigDir resolution (when not provided or empty):
- *   Uses the canonical getGlobalConfigDir from runtime-homes.cjs to detect the
- *   active runtime's config dir — the same resolver used by install.js. This
- *   correctly handles all supported runtimes (claude, codex, cursor, gemini,
- *   opencode, grok, etc.) and their env-var overrides. Defaults to claude
- *   (falls back to ~/.claude) if the resolver throws.
+ *   Detects the active runtime via the canonical precedence:
+ *     process.env.GSD_RUNTIME → config.runtime → 'claude'
+ *   (using resolveRuntime() from runtime-slash.cjs, the same precedence used
+ *   by profile-output.cjs and the rest of the runtime resolution chain).
+ *   Then calls getGlobalConfigDir(detectedRuntime) from runtime-homes.cjs —
+ *   the same resolver used by install.js. This correctly handles all supported
+ *   runtimes (claude, codex, cursor, gemini, opencode, grok, etc.) and their
+ *   env-var overrides (CLAUDE_CONFIG_DIR, CODEX_HOME, CURSOR_CONFIG_DIR, …).
+ *   Defaults to ~/.claude if either resolver throws.
  *
  * Failure surfacing: genuine resolution failures (manifest/profile/surface
  * errors) are reported in the `warnings` array in the envelope. The output
@@ -308,15 +331,18 @@ function _resolveManifest(commandsGsdDir, configDir) {
  *                         Providing a value without a next token (e.g. the flag
  *                         is last in argv with no following value) should be
  *                         caught by the caller before invoking this function.
- * @param raw              Whether to emit raw JSON (core.output raw mode)
+ * @param raw              Whether to emit raw JSON (io.output raw mode)
  * @param _options         Reserved for future use
  */
-function resolveCapabilityRuntimeState(cwd, runtimeConfigDir) {
+function resolveCapabilityRuntimeState(cwd, runtimeConfigDir, configOverride) {
     const warnings = [];
     // Resolve runtimeConfigDir using the canonical runtime-homes resolver.
-    // When not provided, getGlobalConfigDir(runtime) is called with 'claude'
-    // as the default runtime — the same fallback as install.js. The canonical
-    // resolver handles all env-var overrides (CLAUDE_CONFIG_DIR, CODEX_HOME,
+    // When not provided, the active runtime is detected via the canonical
+    // precedence:  process.env.GSD_RUNTIME → config.runtime → 'claude'
+    // (mirrors resolveRuntime() from runtime-slash.cjs and the precedence used
+    // by profile-output.cjs and the rest of the runtime resolution chain).
+    // getGlobalConfigDir(detectedRuntime) is then called, which honours the
+    // runtime-specific env-var override (CLAUDE_CONFIG_DIR, CODEX_HOME,
     // CURSOR_CONFIG_DIR, GROK_AGENTS_HOME, etc.) correctly and without
     // fabricating env vars that don't exist upstream.
     let resolvedConfigDir = runtimeConfigDir || '';
@@ -324,13 +350,13 @@ function resolveCapabilityRuntimeState(cwd, runtimeConfigDir) {
         try {
             // eslint-disable-next-line @typescript-eslint/no-require-imports
             const runtimeHomes = require('./runtime-homes.cjs');
-            // Delegate runtime detection entirely to getGlobalConfigDir: calling it
-            // with 'claude' causes it to check CLAUDE_CONFIG_DIR first, falling back
-            // to ~/.claude. The canonical resolver already encodes the correct env-var
-            // precedence for each runtime — we do not re-implement that logic here.
-            // For non-claude runtimes, the caller should pass --config-dir explicitly
-            // (or set the runtime-specific env var, which getGlobalConfigDir honors).
-            resolvedConfigDir = runtimeHomes.getGlobalConfigDir('claude');
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const runtimeSlash = require('./runtime-slash.cjs');
+            // Detect the active runtime via GSD_RUNTIME → config.runtime → 'claude'.
+            // resolveRuntime reads config.json directly (no side effects) and returns
+            // a lowercased canonical runtime name.
+            const detectedRuntime = runtimeSlash.resolveRuntime(cwd);
+            resolvedConfigDir = runtimeHomes.getGlobalConfigDir(detectedRuntime);
         }
         catch {
             // Defensive fallback: use ~/.claude if the canonical resolver throws.
@@ -392,12 +418,20 @@ function resolveCapabilityRuntimeState(cwd, runtimeConfigDir) {
         surfacedSkills = new Set();
     }
     // ── Load config ───────────────────────────────────────────────────────────────
+    // When the caller already holds a loadConfig snapshot (e.g. cmdLoopRenderHooks),
+    // accept it via configOverride so capability `active` and hook resolution
+    // share the SAME config object — single snapshot, no TOCTOU window.
     let config;
-    try {
-        config = loadConfig(cwd);
+    if (configOverride !== undefined) {
+        config = configOverride;
     }
-    catch {
-        config = {};
+    else {
+        try {
+            config = loadConfig(cwd);
+        }
+        catch {
+            config = {};
+        }
     }
     // ── Resolve state ────────────────────────────────────────────────────────────
     const result = resolveCapabilityState({
@@ -410,8 +444,6 @@ function resolveCapabilityRuntimeState(cwd, runtimeConfigDir) {
     return {
         runtimeConfigDir: resolvedConfigDir,
         warnings,
-        registry,
-        config,
         capabilities: result.capabilities,
     };
 }
@@ -431,9 +463,27 @@ function cmdCapabilityState(cwd, runtimeConfigDir, raw, _options = {}) {
     }
     coreOutput(envelope, raw);
 }
+/**
+ * Convenience predicate: returns true if the capability identified by `capId`
+ * is active (installed && surfaced && config-enabled) in the current runtime
+ * environment at `cwd`.
+ *
+ * Internally calls `resolveCapabilityRuntimeState(cwd, undefined)` and returns
+ * the `active` field of the matching CapabilityStateEntry.
+ * Returns `false` when the capability is not found in the registry.
+ *
+ * @param capId  Capability identifier (e.g. 'graphify', 'intel')
+ * @param cwd    Project root directory for config resolution
+ */
+function isCapabilityActive(capId, cwd) {
+    const result = resolveCapabilityRuntimeState(cwd, undefined);
+    const entry = result.capabilities.find((c) => c.id === capId);
+    return entry !== undefined ? entry.active : false;
+}
 module.exports = {
     resolveCapabilityState,
     resolveCapabilityRuntimeState,
+    isCapabilityActive,
     cmdCapabilityState,
     // Exported for tests
     _resolveCommandsGsdDir,

package/gsd-core/bin/lib/capability-writer.cjs

@@ -14,7 +14,7 @@
  *   - re-resolve: always calls resolveCapabilityRuntimeState for the return value
  *
  * Dependencies (leaf modules only — no circular risk):
- *   - ./core.cjs               (output, error)
+ *   - ./io.cjs                 (output, error)
  *   - ./capability-state.cjs   (resolveCapabilityRuntimeState, _resolveManifest, _resolveCommandsGsdDir)
  *   - ./surface.cjs            (readSurface, writeSurface, applySurface)
  *   - ./install-profiles.cjs   (readActiveProfile)
@@ -23,8 +23,8 @@
  *   - capability-registry.cjs  (loaded at call time)
  */
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-const core = require("./core.cjs");
-const { output: coreOutput, error: coreError } = core;
+const ioMod = require("./io.cjs");
+const { output: coreOutput, error: coreError } = ioMod;
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const capabilityStateMod = require("./capability-state.cjs");
 const { resolveCapabilityRuntimeState, _resolveManifest, _resolveCommandsGsdDir } = capabilityStateMod;
@@ -71,7 +71,8 @@ function setCapabilityState(cwd, runtimeConfigDir, desired, opts) {
     const before = resolveCapabilityRuntimeState(cwd, runtimeConfigDir);
     const resolvedConfigDir = before.runtimeConfigDir;
     // ── Load registry ─────────────────────────────────────────────────────────
-    const registry = before.registry;
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const registry = require('./capability-registry.cjs');
     const capabilitiesMap = (registry['capabilities'] && typeof registry['capabilities'] === 'object' && !Array.isArray(registry['capabilities'])
         ? registry['capabilities']
         : {});

package/gsd-core/bin/lib/check-command-router.cjs

@@ -13,8 +13,14 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_child_process_1 = require("node:child_process");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-const core = require("./core.cjs");
-const { output, error, ERROR_REASON } = core;
+const io = require("./io.cjs");
+const { output, error, ERROR_REASON } = io;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const planningWorkspaceMod = require("./planning-workspace.cjs");
+const { planningDir } = planningWorkspaceMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const phaseLocatorMod = require("./phase-locator.cjs");
+const { findPhaseInternal } = phaseLocatorMod;
 const decisions_cjs_1 = require("./decisions.cjs");
 const ui_safety_gate_cjs_1 = require("./ui-safety-gate.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
@@ -26,6 +32,7 @@ const { getRoadmapPhaseWithFallback } = roadmapModule;
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const gapCheckerModule = require("./gap-checker.cjs");
 const { runGapAnalysis } = gapCheckerModule;
+const prohibition_enforcement_cjs_1 = require("./prohibition-enforcement.cjs");
 // ─── Helpers ──────────────────────────────────────────────────────────────────
 function normalizePhrase(text) {
     // eslint-disable-next-line @typescript-eslint/no-base-to-string
@@ -341,7 +348,7 @@ function cmdDecisionCoverageVerify(projectDir, args, raw) {
  * Invocable as: gsd_run check ui-plan-gate <phase>
  *
  * Uses checkUiPresence from ui-safety-gate.cjs — does NOT reimplement frontend detection.
- * Uses getRoadmapPhaseInternal + findPhaseInternal from core.cjs for phase data.
+ * Uses getRoadmapPhaseWithFallback + findPhaseInternal from leaf modules for phase data.
  */
 function findUiSpecInDir(phaseDir) {
     if (!phaseDir || !node_fs_1.default.existsSync(phaseDir))
@@ -368,7 +375,7 @@ function findUiSpecInDir(phaseDir) {
  *       surface the miss — we do NOT silently degrade to frontend:false if the roadmap
  *       exists but the phase header is absent.
  *   (b) Runs checkUiPresence (frontend detection) — no reimplementation.
- *   (c) Resolves the phase directory via core.findPhaseInternal; checks for *-UI-SPEC.md.
+ *   (c) Resolves the phase directory via findPhaseInternal (phase-locator.cjs); checks for *-UI-SPEC.md.
  *
  * Returns: { frontend, hasUiSpec, block, uiSpecPath, phaseLookupFailed }
  *   block = frontend && !hasUiSpec
@@ -385,10 +392,8 @@ function computeUiPlanGate(projectDir, phase) {
         const section = getRoadmapPhaseWithFallback(projectDir, phase);
         if (section === null) {
             // Distinguish: ROADMAP.md missing (no-roadmap project) vs phase not found in ROADMAP.
-            // core.planningDir(cwd) resolves the .planning/ root for workstream-aware paths.
-            const planDir = typeof core['planningDir'] === 'function'
-                ? core['planningDir'](projectDir)
-                : node_path_1.default.join(projectDir, '.planning');
+            // planningDir(cwd) resolves the .planning/ root for workstream-aware paths.
+            const planDir = planningDir(projectDir);
             const roadmapPath = node_path_1.default.join(planDir, 'ROADMAP.md');
             if (node_fs_1.default.existsSync(roadmapPath)) {
                 // ROADMAP.md exists but phase was not found → surface the miss
@@ -405,24 +410,20 @@ function computeUiPlanGate(projectDir, phase) {
     const presenceResult = (0, ui_safety_gate_cjs_1.checkUiPresence)(phaseSection);
     const frontend = presenceResult.hasUI;
     // (c) Resolve phase directory via findPhaseInternal and check for *-UI-SPEC.md
-    const coreModule = core;
     let phaseDir = '';
     try {
-        const findPhase = coreModule['findPhaseInternal'];
-        if (typeof findPhase === 'function') {
-            const result = findPhase(projectDir, phase);
-            if (result && typeof result === 'object') {
-                // findPhaseInternal returns { directory: '<relative-posix-path>', ... }
-                // directory is relative to cwd — resolve it to absolute.
-                const relDir = typeof result['directory'] === 'string' ? result['directory'] : '';
-                if (relDir) {
-                    phaseDir = node_path_1.default.resolve(projectDir, relDir);
-                }
-            }
-            else if (typeof result === 'string') {
-                phaseDir = result;
+        const result = findPhaseInternal(projectDir, phase);
+        if (result && typeof result === 'object') {
+            // findPhaseInternal returns { directory: '<relative-posix-path>', ... }
+            // directory is relative to cwd — resolve it to absolute.
+            const relDir = typeof result['directory'] === 'string' ? result['directory'] : '';
+            if (relDir) {
+                phaseDir = node_path_1.default.resolve(projectDir, relDir);
             }
         }
+        else if (typeof result === 'string') {
+            phaseDir = result;
+        }
     }
     catch { /* phase dir lookup failure → hasUiSpec=false */ }
     const uiSpecPath = findUiSpecInDir(phaseDir);
@@ -475,7 +476,7 @@ const UI_PATH_PATTERNS_RE = /\/(components|pages|views|screens|layouts|ui|fronte
  *       same lookup as computeUiPlanGate — to determine if this is a frontend phase.
  *   (b) Runs checkUiPresence (frontend detection) — no reimplementation.
  *   (c) Checks git diff HEAD~1..HEAD for UI file changes in the current worktree.
- *   (d) Resolves the phase directory via core.findPhaseInternal; checks for *-UI-SPEC.md.
+ *   (d) Resolves the phase directory via findPhaseInternal (phase-locator.cjs); checks for *-UI-SPEC.md.
  *
  * Returns: { frontend, hasUiFiles, hasUiSpec, block, message?, phaseLookupFailed? }
  *   block = frontend && hasUiFiles && !hasUiSpec
@@ -488,9 +489,7 @@ function computeUiSafetyGate(projectDir, phase) {
     try {
         const section = getRoadmapPhaseWithFallback(projectDir, phase);
         if (section === null) {
-            const planDir = typeof core['planningDir'] === 'function'
-                ? core['planningDir'](projectDir)
-                : node_path_1.default.join(projectDir, '.planning');
+            const planDir = planningDir(projectDir);
             const roadmapPath = node_path_1.default.join(planDir, 'ROADMAP.md');
             if (node_fs_1.default.existsSync(roadmapPath)) {
                 phaseLookupFailed = true;
@@ -519,22 +518,18 @@ function computeUiSafetyGate(projectDir, phase) {
     }
     catch { /* git unavailable or no prior commit — treat as no UI files changed */ }
     // (d) Resolve phase directory and check for *-UI-SPEC.md (same as computeUiPlanGate)
-    const coreModule = core;
     let phaseDir = '';
     try {
-        const findPhase = coreModule['findPhaseInternal'];
-        if (typeof findPhase === 'function') {
-            const result = findPhase(projectDir, phase);
-            if (result && typeof result === 'object') {
-                const relDir = typeof result['directory'] === 'string' ? result['directory'] : '';
-                if (relDir) {
-                    phaseDir = node_path_1.default.resolve(projectDir, relDir);
-                }
-            }
-            else if (typeof result === 'string') {
-                phaseDir = result;
+        const result = findPhaseInternal(projectDir, phase);
+        if (result && typeof result === 'object') {
+            const relDir = typeof result['directory'] === 'string' ? result['directory'] : '';
+            if (relDir) {
+                phaseDir = node_path_1.default.resolve(projectDir, relDir);
             }
         }
+        else if (typeof result === 'string') {
+            phaseDir = result;
+        }
     }
     catch { /* phase dir lookup failure → hasUiSpec=false */ }
     const uiSpecPath = findUiSpecInDir(phaseDir);
@@ -567,20 +562,16 @@ function cmdTddReviewCheckpoint(projectDir, args, raw) {
         return;
     }
     // Resolve phase directory
-    const coreModule = core;
     let phaseDir = '';
     try {
-        const findPhase = coreModule['findPhaseInternal'];
-        if (typeof findPhase === 'function') {
-            const result = findPhase(projectDir, phase);
-            if (result && typeof result === 'object') {
-                const relDir = typeof result['directory'] === 'string' ? result['directory'] : '';
-                if (relDir)
-                    phaseDir = node_path_1.default.resolve(projectDir, relDir);
-            }
-            else if (typeof result === 'string') {
-                phaseDir = result;
-            }
+        const result = findPhaseInternal(projectDir, phase);
+        if (result && typeof result === 'object') {
+            const relDir = typeof result['directory'] === 'string' ? result['directory'] : '';
+            if (relDir)
+                phaseDir = node_path_1.default.resolve(projectDir, relDir);
+        }
+        else if (typeof result === 'string') {
+            phaseDir = result;
         }
     }
     catch { /* phase dir lookup failure */ }
@@ -788,7 +779,15 @@ function routeCheckCommand({ args, cwd, raw }) {
         cmdVerifyCodebaseDrift(cwd, raw);
         return;
     }
-    error('Unknown check subcommand. Available: auto-mode, decision-coverage-plan, decision-coverage-verify, gap-analysis-plan-post, tdd-review-checkpoint, ui-plan-gate, ui-safety-gate, verify-schema-drift, verify-codebase-drift', ERROR_REASON.SDK_UNKNOWN_COMMAND);
+    if (subcommand === 'prohibition-enforcement') {
+        // The deterministic test-tier prohibition PRODUCER/gate (#1259, ADR-550 D5d). Locates the
+        // wired mechanical check (node-test or lint-rule), confirms fail-first, runs it, builds
+        // enforcementEvidence, and emits the dispositionForProhibition verdict. Invocable as
+        // `gsd_run check prohibition-enforcement <request.json>`.
+        (0, prohibition_enforcement_cjs_1.routeProhibitionEnforcement)(args, raw);
+        return;
+    }
+    error('Unknown check subcommand. Available: auto-mode, decision-coverage-plan, decision-coverage-verify, gap-analysis-plan-post, prohibition-enforcement, tdd-review-checkpoint, ui-plan-gate, ui-safety-gate, verify-schema-drift, verify-codebase-drift', ERROR_REASON.SDK_UNKNOWN_COMMAND);
 }
 module.exports = {
     routeCheckCommand,

package/gsd-core/bin/lib/commands.cjs

@@ -13,8 +13,26 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const shell_command_projection_cjs_1 = require("./shell-command-projection.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-const core = require("./core.cjs");
-const { loadConfig, isGitIgnored, normalizePhaseName, comparePhaseNum, getArchivedPhaseDirs, generateSlugInternal, getMilestoneInfo, getMilestonePhaseFilter, resolveModelInternal, resolveEffortInternal, resolveFastModeInternal, resolveEffortForTier, stripShippedMilestones: _stripShippedMilestones, extractCurrentMilestone, toPosixPath, output, error, findPhaseInternal, extractOneLinerFromBody, getRoadmapPhaseInternal, extractPhaseToken, resolveGranularityInternal, assertValidGranularityOverride, } = core;
+const ioMod = require("./io.cjs");
+const { output, error } = ioMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const configLoaderMod = require("./config-loader.cjs");
+const { loadConfig, isGitIgnored } = configLoaderMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const coreUtilsMod = require("./core-utils.cjs");
+const { toPosixPath, generateSlugInternal, extractOneLinerFromBody } = coreUtilsMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const phaseIdMod = require("./phase-id.cjs");
+const { normalizePhaseName, comparePhaseNum, extractPhaseToken } = phaseIdMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const phaseLocatorMod = require("./phase-locator.cjs");
+const { getArchivedPhaseDirs, findPhaseInternal } = phaseLocatorMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const roadmapParserMod = require("./roadmap-parser.cjs");
+const { extractCurrentMilestone, stripShippedMilestones: _stripShippedMilestones, getMilestoneInfo, getMilestonePhaseFilter, getRoadmapPhaseInternal } = roadmapParserMod;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const modelResolverMod = require("./model-resolver.cjs");
+const { resolveModelInternal, resolveEffortInternal, resolveFastModeInternal, resolveEffortForTier, resolveGranularityInternal, assertValidGranularityOverride } = modelResolverMod;
 const model_catalog_cjs_1 = require("./model-catalog.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const planningWorkspace = require("./planning-workspace.cjs");

package/gsd-core/bin/lib/config-loader.cjs

@@ -8,11 +8,10 @@
  * normalizes legacy keys, applies the active-workstream overlay, validates
  * against the config schema, and warns on unknown keys/profile overrides.
  * Behaviour is preserved byte-for-behaviour from the prior location; only
- * the module boundary moved. core.cjs re-exports `loadConfig` for back-compat.
+ * the module boundary moved. The core.cjs re-export spine was retired in
+ * epic #1267; callers import loadConfig from config-loader.cjs directly.
  *
- * New imports should pull loadConfig from config-loader.cjs directly.
- *
- * Dependencies (leaf modules only — no core.cjs):
+ * Dependencies (leaf modules only):
  *   - node:fs / node:os / node:path (stdlib)
  *   - ./configuration.cjs    (normalizeLegacyKeys, CONFIG_DEFAULTS as CANONICAL_CONFIG_DEFAULTS)
  *   - ./config-schema.cjs    (VALID_CONFIG_KEYS, DYNAMIC_KEY_PATTERNS)

package/gsd-core/bin/lib/config-schema.cjs

@@ -6,8 +6,8 @@
  *
  * Imported by:
  *   - config.cjs (isValidConfigKey validator)
- *   - core.cjs
  *   - many tests (config-schema.property.test.cjs, bug-*, feat-*, etc.)
+ * (core.cjs re-export spine retired in epic #1267)
  *
  * See Phase 2 Cycle 5 (#3536) — schema manifest migration.
  *

package/gsd-core/bin/lib/config-types.cjs

@@ -3,7 +3,8 @@
  * TypeScript type definitions for GSD project config — model_policy block.
  *
  * These types reflect the model_policy config shape consumed by
- * resolveModelPolicy in core.cjs and validated by config-schema.cjs.
+ * resolveModelPolicy in model-resolver.cjs and validated by config-schema.cjs.
+ * (core.cjs re-export spine retired in epic #1267)
  *
  * See feat #49 (model_policy presets) and config-schema.manifest.json.
  * Added under ADR-457: TS sources in src/ compile to CJS artifacts in

package/gsd-core/bin/lib/config.cjs

@@ -13,8 +13,11 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_os_1 = __importDefault(require("node:os"));
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-const core = require("./core.cjs");
-const { output, error, ERROR_REASON, CONFIG_DEFAULTS } = core;
+const io = require("./io.cjs");
+const { output, error, ERROR_REASON } = io;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const configLoader = require("./config-loader.cjs");
+const { CONFIG_DEFAULTS } = configLoader;
 const shell_command_projection_cjs_1 = require("./shell-command-projection.cjs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const planningWorkspace = require("./planning-workspace.cjs");

package/gsd-core/bin/lib/decisions.cjs

@@ -61,7 +61,13 @@ function parseDecisions(content) {
     // in addition to numeric-only IDs (D-42). The first character after `D-` must
     // be alphanumeric, so malformed shapes like `D--foo` or `D-_bar` are rejected.
     // CJS callers consume {id, text} and ignore the optional extras.
-    const bulletRe = /^\s*-\s+\*\*D-([A-Za-z0-9][A-Za-z0-9_-]*)(?:\s*\[([^\]]+)\])?\s*:\*\*\s*(.*)$/;
+    // #1343: `[^:*]*` replaces the old `\s*` before `:**` so that a freeform run
+    // such as `(parenthetical)`, an em-dash, or other prose between the optional
+    // bracket-tag group and the closing `:**` is tolerated rather than silently
+    // dropping the whole decision. `[^:*]*` subsumes plain whitespace and stops
+    // correctly at `:**`. Capture groups 1 (id), 2 (bracket tags), 3 (text) are
+    // unchanged.
+    const bulletRe = /^\s*-\s+\*\*D-([A-Za-z0-9][A-Za-z0-9_-]*)(?:\s*\[([^\]]+)\])?[^:*]*:\*\*\s*(.*)$/;
     let current = null;
     const flush = () => {
         if (current) {
@@ -102,6 +108,18 @@ function parseDecisions(content) {
             current = { id, text: bulletMatch[3], category, tags, trackable };
             continue;
         }
+        // Parse-miss guard (#1343): a line that looks like a `D-NN` decision bullet
+        // but failed `bulletRe` (e.g. a `:` or `*` inside the pre-colon run) must NOT
+        // be silently dropped — a narrowed trackable set lets a blocking coverage gate
+        // report a false pass. Surface it loudly instead.
+        if (/^\s*-\s+\*\*D-/.test(line)) {
+            // A malformed D-bullet still starts a (failed) new decision, so it ends the
+            // previous one — flush before warning so a following continuation line cannot
+            // be mis-appended to the prior valid decision.
+            flush();
+            console.warn(`parseDecisions: ignored unparseable decision bullet: ${trimmed}`);
+            continue;
+        }
         // Continuation line for current decision (indented with space OR tab,
         // non-bullet, non-empty) — tab indentation must work too (review F12).
         if (current && trimmed !== '' && !trimmed.startsWith('-') && /^[ \t]/.test(line)) {