@opengsd/gsd-path 1.1.0 → 1.3.0

package/scripts/skill-resources.json

@@ -38,6 +38,7 @@
     "plugin.json",
     "scripts/install.mjs",
     "scripts/install.py",
+    "scripts/runtime_store.py",
     "scripts/migrate_core.py",
     "scripts/core_hook_gate.py",
     "scripts/core_hook_settings.py",
@@ -45,6 +46,7 @@
     "scripts/wizard.mjs",
     "scripts/skill-resources.json",
     "scripts/_common.py",
+    "scripts/worktree_paths.py",
     "scripts/build_recovery.py",
     "scripts/state_checkpoint.py",
     "scripts/roadmap.py",
@@ -59,7 +61,10 @@
     "scripts/check_handoffs.py",
     "scripts/check_docs_audit.py",
     "scripts/check_task_briefs.py",
+    "scripts/path_config.py",
+    "scripts/model_policy.py",
     "scripts/review_panel.py",
+    "scripts/jev_review.py",
     "scripts/review_findings.py",
     "scripts/check_update.py",
     "scripts/guard_hook.py",
@@ -78,6 +83,7 @@
     "scripts/pipeline_undo.py",
     "scripts/pipeline_diagnose.py",
     "README.md",
+    "CHANGELOG.md",
     "MIGRATE.md",
     "RUNTIME.md",
     "DOCS.md",
@@ -93,12 +99,15 @@
   ],
   "phase_resources": {
     "gsd-path-build": [
+      "references/runtime-selection.md",
       "references/build-recovery.md",
       "references/build-native.md",
       "references/build-abandon.md",
       "references/coder.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/reviewer.md",
+      "references/jev-review.md",
       "references/reviewer-wave.md",
       "references/reviewer-skeptic.md",
       "references/reviewer-final.md",
@@ -110,36 +119,49 @@
       "templates/skeptic.md"
     ],
     "gsd-path-discuss": [
+      "references/runtime-selection.md",
       "templates/answers.md",
       "templates/dialogue.md"
     ],
     "gsd-path-docs-audit": [
+      "references/runtime-selection.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/docs-auditor.md",
       "templates/docs-audit.md"
     ],
     "gsd-path-define": [
+      "references/runtime-selection.md",
       "references/build-recovery.md",
       "templates/charter.md",
       "templates/intent.md",
       "templates/state.md"
     ],
     "gsd-path-inspect": [
+      "references/runtime-selection.md",
       "references/codebase-mapper.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/docs-auditor.md",
       "templates/codebase.md",
       "templates/docs-audit.md",
       "templates/state.md"
     ],
-    "gsd-path-forensics": [],
-    "gsd-path-migrate": [],
+    "gsd-path-forensics": [
+      "references/runtime-selection.md"
+    ],
+    "gsd-path-migrate": [
+      "references/runtime-selection.md"
+    ],
     "gsd-path-loop": [
+      "references/runtime-selection.md",
       "templates/loop.md"
     ],
     "gsd-path-plan": [
+      "references/runtime-selection.md",
       "references/build-recovery.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/planner.md",
       "templates/patch-findings.md",
       "templates/plan.md",
@@ -147,19 +169,26 @@
       "templates/task.md"
     ],
     "gsd-path-research": [
+      "references/runtime-selection.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/researcher.md",
       "templates/evidence.md",
       "templates/research-handoff.md"
     ],
     "gsd-path-roadmap": [
+      "references/runtime-selection.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/roadmapper.md",
       "templates/roadmap.md"
     ],
     "gsd-path-ship": [
+      "references/runtime-selection.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/reviewer.md",
+      "references/jev-review.md",
       "references/reviewer-wave.md",
       "references/reviewer-skeptic.md",
       "references/reviewer-final.md",
@@ -172,13 +201,36 @@
       "templates/wave-review.md"
     ],
     "gsd-path-decide": [
+      "references/runtime-selection.md",
       "references/dispatch.md",
+      "references/model-policy.md",
       "references/decider.md",
       "templates/synthesis.md"
     ],
-    "gsd-path-undo": []
+    "gsd-path-undo": [
+      "references/runtime-selection.md"
+    ]
   },
   "script_targets": [
+    ["scripts/status_runtime.py", "skills/gsd-path/scripts/status_runtime.py"],
+    ["scripts/git_guard.py", "skills/gsd-path/scripts/git_guard.py"],
+    ["scripts/jev_review.py", "skills/gsd-path/scripts/jev_review.py"],
+    ["scripts/jev_review.py", "skills/gsd-path-build/scripts/jev_review.py"],
+    ["scripts/jev_review.py", "skills/gsd-path-ship/scripts/jev_review.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-build/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-decide/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-define/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-discuss/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-docs-audit/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-forensics/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-inspect/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-loop/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-plan/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-research/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-roadmap/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-ship/scripts/worktree_paths.py"],
+    ["scripts/worktree_paths.py", "skills/gsd-path-undo/scripts/worktree_paths.py"],
     ["scripts/migrate_core.py", "skills/gsd-path-migrate/scripts/migrate_core.py"],
     ["scripts/core_hook_gate.py", "skills/gsd-path-migrate/scripts/core_hook_gate.py"],
     ["scripts/core_hook_settings.py", "skills/gsd-path-migrate/scripts/core_hook_settings.py"],
@@ -399,7 +451,55 @@
     ["scripts/roadmap.py", "skills/gsd-path-research/scripts/roadmap.py"],
     ["scripts/roadmap.py", "skills/gsd-path-roadmap/scripts/roadmap.py"],
     ["scripts/roadmap.py", "skills/gsd-path-ship/scripts/roadmap.py"],
-    ["scripts/roadmap.py", "skills/gsd-path/scripts/roadmap.py"]
+    ["scripts/roadmap.py", "skills/gsd-path/scripts/roadmap.py"],
+    ["scripts/model_policy.py", "skills/gsd-path/scripts/model_policy.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-build/scripts/model_policy.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-decide/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-decide/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-define/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-define/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-discuss/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-discuss/scripts/loop_run.py"],
+    ["scripts/review_panel.py", "skills/gsd-path-discuss/scripts/review_panel.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-docs-audit/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-docs-audit/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-forensics/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-forensics/scripts/loop_run.py"],
+    ["scripts/review_panel.py", "skills/gsd-path-forensics/scripts/review_panel.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-inspect/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-inspect/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-loop/scripts/model_policy.py"],
+    ["scripts/review_panel.py", "skills/gsd-path-loop/scripts/review_panel.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-migrate/scripts/model_policy.py"],
+    ["scripts/_common.py", "skills/gsd-path-migrate/scripts/_common.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-migrate/scripts/loop_run.py"],
+    ["scripts/review_panel.py", "skills/gsd-path-migrate/scripts/review_panel.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-plan/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-plan/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-research/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-research/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-roadmap/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-roadmap/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-ship/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-ship/scripts/loop_run.py"],
+    ["scripts/model_policy.py", "skills/gsd-path-undo/scripts/model_policy.py"],
+    ["scripts/loop_run.py", "skills/gsd-path-undo/scripts/loop_run.py"],
+    ["scripts/review_panel.py", "skills/gsd-path-undo/scripts/review_panel.py"],
+    ["scripts/path_config.py", "skills/gsd-path-build/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-decide/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-define/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-discuss/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-docs-audit/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-forensics/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-inspect/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-loop/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-migrate/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-plan/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-research/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-roadmap/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-ship/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path-undo/scripts/path_config.py"],
+    ["scripts/path_config.py", "skills/gsd-path/scripts/path_config.py"]
   ],
   "phase_contract_targets": [
     ["skills/gsd-path-build/SKILL.md", "skills/gsd-path/BUILD.md"],

package/scripts/state_checkpoint.py

@@ -4,6 +4,11 @@
 
 from __future__ import annotations
 
+import sys
+
+# Runtime helpers must not modify their immutable installation.
+sys.dont_write_bytecode = True
+
 import hashlib
 import json
 import os

package/scripts/state_promote.py

@@ -4,6 +4,11 @@
 
 from __future__ import annotations
 
+import sys
+
+# Runtime helpers must not modify their immutable installation.
+sys.dont_write_bytecode = True
+
 import json
 import re
 import shutil

package/scripts/status_runtime.py

@@ -1,6 +1,8 @@
 #!/usr/bin/env python3
 """Launch the project status runtime across an atomic refresh handoff."""
 
+import argparse
+import hashlib
 import errno
 import json
 import os
@@ -72,8 +74,85 @@ def install_lock_active(lock: Path) -> bool:
     return current_identity == identity
 
 
+RUNTIME_SCHEMA = "gsd-path/runtime/v1"
+
+
+def runtime_home() -> Path:
+    return Path.home() / ".gsd-path" / "runtimes"
+
+
+def declaration(repo: Path) -> dict:
+    path = repo / ".gsd-path" / "runtime.json"
+    if path.is_symlink() or path.parent.is_symlink():
+        raise ValueError(f"unsafe runtime declaration: {path}")
+    data = json.loads(path.read_text(encoding="utf-8"))
+    if (not isinstance(data, dict) or data.get("schema") != RUNTIME_SCHEMA
+            or not isinstance(data.get("version"), str)
+            or not isinstance(data.get("digest"), str)
+            or len(data["digest"]) != 64
+            or any(c not in "0123456789abcdef" for c in data["digest"])):
+        raise ValueError(f"invalid runtime declaration: {path}")
+    return data
+
+
+def manifest_digest(manifest: dict) -> str:
+    return hashlib.sha256(json.dumps(manifest, sort_keys=True, separators=(",", ":")).encode()).hexdigest()
+
+
+def validate_runtime(data: dict) -> Path:
+    root = runtime_home() / data["digest"]
+    hint = (f"Runtime {data['version']} ({data['digest']}) is unavailable or invalid at {root}. "
+            "Run gsd-path --runtime-restore --project <project-root> "
+            "--source-root <matching-package-root> to restore this exact runtime.")
+    try:
+        if any(p.is_symlink() for p in (root, root.parent, root.parent.parent)):
+            raise ValueError("symlinked runtime storage")
+        manifest_path = root / "manifest.json"
+        if manifest_path.is_symlink():
+            raise ValueError("symlinked manifest")
+        manifest = json.loads(manifest_path.read_text(encoding="utf-8"))
+        if (not isinstance(manifest, dict) or manifest_digest(manifest) != data["digest"]
+                or manifest.get("version") != data["version"]):
+            raise ValueError("manifest identity mismatch")
+        files = manifest.get("files")
+        if not isinstance(files, dict) or "pipeline_state.py" not in files:
+            raise ValueError("invalid runtime file inventory")
+        for name, expected in files.items():
+            if Path(name).name != name or not name.endswith(".py"):
+                raise ValueError("invalid runtime file name")
+            path = root / name
+            if path.is_symlink() or hashlib.sha256(path.read_bytes()).hexdigest() != expected:
+                raise ValueError(f"runtime file changed: {name}")
+        if set(p.name for p in root.iterdir()) != set(files) | {"manifest.json"}:
+            raise ValueError("unexpected runtime files")
+    except (OSError, ValueError, TypeError) as error:
+        raise ValueError(hint + f" ({error})") from error
+    return root
+
+
+def resolve_runtime(repo: Path) -> Path:
+    return validate_runtime(declaration(repo))
+
+
+def run_guard(repo: Path, name: str) -> None:
+    # Keep the guard's project identity while executing verified external bytes.
+    root = resolve_runtime(repo)
+    sys.dont_write_bytecode = True
+    sys.path.insert(0, str(root))
+    code = compile((root / name).read_bytes(), str(root / name), "exec")
+    exec(code, {"__name__": "__main__", "__file__": str(repo / ".gsd-path" / name)})
+
+
 def launch(repo: Path) -> int:
     parent = repo / ".gsd-path"
+    if os.path.lexists(parent / "runtime.json"):
+        try:
+            runtime = resolve_runtime(repo) / "pipeline_state.py"
+        except (OSError, ValueError) as error:
+            print(str(error), file=sys.stderr)
+            return 2
+        return subprocess.call([sys.executable, "-B", str(runtime), "status", "--repo", str(repo)],
+                               env={**os.environ, "GIT_OPTIONAL_LOCKS": "0"})
     runtime = parent / "runtime" / "pipeline_state.py"
     lock = repo / ".gsd-path-install-lock"
     command = [sys.executable, "-B", str(runtime), "status", "--repo", str(repo)]
@@ -108,14 +187,21 @@ def launch(repo: Path) -> int:
 
 
 def main(argv: Sequence[str] = sys.argv[1:]) -> int:
-    if len(argv) != 2 or argv[0] != "--repo":
-        print("usage: status_runtime.py --repo <absolute-root>", file=sys.stderr)
-        return 2
-    repo = Path(argv[1])
-    if not repo.is_absolute():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--repo", required=True, type=Path)
+    parser.add_argument("--runtime-path", action="store_true")
+    args = parser.parse_args(argv)
+    if not args.repo.is_absolute():
         print("GSD Path status repository must be absolute", file=sys.stderr)
         return 2
-    return launch(repo.resolve())
+    if args.runtime_path:
+        try:
+            print(resolve_runtime(args.repo.resolve()))
+            return 0
+        except (OSError, ValueError) as error:
+            print(str(error), file=sys.stderr)
+            return 2
+    return launch(args.repo.resolve())
 
 
 if __name__ == "__main__":

package/scripts/wizard.mjs

@@ -125,7 +125,7 @@ const confirm = (io, theme, title, yes = "Yes", no = "No") =>
 
 // Pure: runs the question flow and returns install.mjs argv (or null if cancelled).
 // `installed(target, local)` reports whether a managed install already exists for that host in that scope.
-export async function wizard({ input, output, colored = true, version = "", cwd = process.cwd(), installed = () => false, targets }) {
+export async function wizard({ input, output, colored = true, version = "", cwd = process.cwd(), installed = () => false, legacyRuntime = false, targets }) {
   const theme = makeTheme(colored);
   const keys = keyReader(input);
   const io = { keys, output };
@@ -147,8 +147,13 @@ export async function wizard({ input, output, colored = true, version = "", cwd
       hostItems.some((item) => item.checked && hosts.includes(item.value)) &&
       (await confirm(io, theme, "Existing installs found. What do you want to do?", "Update in place", "Fresh install"));
 
-    const project = await confirm(io, theme, "Write AGENTS.md + WORKFLOW.md contracts into this repo?", `Yes — ${cwd}`, "Not now");
+    const project = await confirm(io, theme, update ? "Refresh this project's wiring (keep its contracts and selected runtime)?" : "Write AGENTS.md + WORKFLOW.md contracts into this repo?", `Yes — ${cwd}`, "Not now");
     const hooks = project && (await confirm(io, theme, "Install guard hooks (archive immutability, ship-commit purity)?"));
+    const migrate = project && update && legacyRuntime;
+    if (migrate) {
+      output.write(`\n  This project uses the old runtime layout. Migration moves managed runtime files\n  outside the repo and leaves an unstaged Git diff for review. Local edits are preserved.\n`);
+      if (!(await confirm(io, theme, "Migrate this project before updating?", "Migrate and continue upgrade", "Cancel"))) return null;
+    }
 
     const argv = [];
     if (hosts.length === targets.length) argv.push("--all");
@@ -157,6 +162,7 @@ export async function wizard({ input, output, colored = true, version = "", cwd
     if (local) argv.push("--local");
     if (project) argv.push("--project", cwd);
     if (hooks) argv.push("--hooks");
+    if (migrate) argv.push("--runtime-migrate");
 
     output.write(`\n  ${theme.dim("Equivalent command:")}\n  ${theme.accent("$")} gsd-path ${argv.join(" ")}\n`);
     const go = await select(io, theme, "Ready?", [

package/scripts/workflow_run.py

@@ -4,6 +4,7 @@
 import argparse
 import hashlib
 import json
+import os
 import subprocess
 import sys
 import tempfile
@@ -28,9 +29,10 @@ def run_workflow(repo: Path, action: str, project_dir: str, expected_head: str =
     steps = []
     outputs = {}
     scripts = Path(__file__).resolve().parent
+    helpers = scripts
 
     def step(script, *arguments, raw=False):
-        command = [sys.executable, "-B", str(scripts / script), *arguments]
+        command = [sys.executable, "-B", str(helpers / script), *arguments]
         completed = subprocess.run(command, cwd=repo, capture_output=True, text=True)
         receipt = {"script": script, "command": command, "exit_code": completed.returncode,
                    "stdout": completed.stdout, "stderr": completed.stderr}
@@ -49,6 +51,15 @@ def run_workflow(repo: Path, action: str, project_dir: str, expected_head: str =
 
     common = ["--repo", str(repo), "--project-dir", project_dir]
     try:
+        if os.path.lexists(repo / ".gsd-path/runtime.json"):
+            resolved = subprocess.run(
+                [sys.executable, "-B", str(repo / ".gsd-path/status_runtime.py"),
+                 "--repo", str(repo), "--runtime-path"],
+                cwd=repo, capture_output=True, text=True)
+            if resolved.returncode:
+                sys.stderr.write(resolved.stderr)
+                raise StepFailed(resolved.stderr.strip())
+            helpers = Path(resolved.stdout.strip())
         if action == "route":
             step("pipeline_state.py", "route", *common)
         elif action == "prepare-inspect":

package/scripts/worktree_paths.py

@@ -0,0 +1,94 @@
+#!/usr/bin/env python3
+# gsd-path project runtime
+"""Placement shared by task isolation, verification, and integration."""
+
+import sys
+
+# Runtime helpers must not modify their immutable installation.
+sys.dont_write_bytecode = True
+
+import hashlib
+import json
+import os
+import tempfile
+from pathlib import Path
+
+try:
+    import _common
+except ImportError:
+    from scripts import _common
+
+
+def _git(primary: Path, *args: str) -> str:
+    result = _common.run_git(primary, *args)
+    if result.returncode:
+        raise ValueError(result.stderr.strip() or "cannot inspect worktree placement")
+    return result.stdout.rstrip("\n")
+
+
+def _identity(path: Path) -> str:
+    return hashlib.sha256(os.fsencode(path)).hexdigest()
+
+
+def _workspace(primary: Path, pin: bool) -> Path:
+    common = Path(_git(primary, "rev-parse", "--git-common-dir"))
+    common = (primary / common).resolve()
+    identity = _identity(primary)
+    receipt = common / "gsd-path" / "workspaces" / f"{identity}.json"
+    try:
+        data = json.loads(receipt.read_text(encoding="utf-8"))
+    except FileNotFoundError:
+        pass
+    else:
+        if (not isinstance(data, dict) or data.get("primary") != str(primary)
+                or not isinstance(data.get("root"), str)
+                or not Path(data["root"]).is_absolute()):
+            raise ValueError(f"invalid worktree placement receipt: {receipt}")
+        return Path(data["root"])
+
+    root = Path(os.environ.get("GSD_PATH_WORKTREE_ROOT") or Path.home() / ".gsd-path" / "projects").expanduser()
+    if not root.is_absolute():
+        raise ValueError("GSD_PATH_WORKTREE_ROOT must be absolute")
+    root = root.resolve()
+    parent = root
+    while not parent.exists():
+        parent = parent.parent
+    ancestor = _common.run_git(parent, "rev-parse", "--git-common-dir")
+    same_repository = (
+        ancestor.returncode == 0
+        and (parent / ancestor.stdout.strip()).resolve() == common
+    )
+    if root.is_relative_to(primary) or same_repository:
+        raise ValueError(f"managed worktree root must be outside this repository's worktrees: {root}")
+    workspace = root / _identity(common) / identity
+    if pin:
+        receipt.parent.mkdir(parents=True, exist_ok=True)
+        fd, temporary = tempfile.mkstemp(dir=receipt.parent)
+        try:
+            with os.fdopen(fd, "w", encoding="utf-8") as handle:
+                json.dump({"primary": str(primary), "root": str(workspace)}, handle)
+            try:
+                os.link(temporary, receipt)
+            except FileExistsError:
+                return _workspace(primary, False)
+        finally:
+            os.unlink(temporary)
+    return workspace
+
+
+def worktree_path(primary: Path, kind: str, name: str, *, pin: bool = False) -> Path:
+    primary = primary.resolve()
+    if kind not in {"task", "verify", "integrate"} or not name or Path(name).name != name or name in {".", ".."}:
+        raise ValueError("invalid managed worktree kind or name")
+    legacy = (primary.parent / f".{primary.name}-gsd-path-integrate-{name}"
+              if kind == "integrate" else primary.parent / f"{primary.name}.gsd-path" / kind / name)
+    branch = f"refs/heads/gsd-path-{kind}/{name}"
+    records = _git(primary, "worktree", "list", "--porcelain", "-z").split("\0\0")
+    for record in records:
+        fields = record.split("\0")
+        if f"worktree {legacy}" in fields and f"branch {branch}" in fields:
+            return legacy
+    # Keep collision checks and missing-directory recovery at the old location.
+    if os.path.lexists(legacy):
+        return legacy
+    return _workspace(primary, pin) / kind / name

package/skills/gsd-path/BUILD.md

@@ -3,6 +3,8 @@ name: gsd-path-build
 description: Execute or resume an approved GSD Path plan with isolated task worktrees, deterministic commits, and independent wave review. Use only when the user explicitly invokes $gsd-path-build or an active $gsd-path router explicitly routes to this phase.
 ---
 
+Before executing project helpers, read [runtime selection](references/runtime-selection.md).
+
 # GSD Path Build Orchestrator
 
 Orchestrate coders, task landing, and reviewers from the main conversation.
@@ -98,6 +100,11 @@ rule; never invoke an explicit-only sibling skill yourself.
 checkpoint `.project/` records uses this helper. Record the exact full HEAD
 before the first metadata change in that checkpoint, then run:
 
+Explicit configuration edits in `.project/config.json` and
+`.project/model-policy.json` are expected bookkeeping. Include them in the next
+normal checkpoint before a clean dispatch base; they may remain pending while
+an already dispatched task lands. Existing model selections stay pinned.
+
 ```text
 python3 <absolute isolation.py> checkpoint \
   --repo <absolute primary> \

package/skills/gsd-path/DECIDE.md

@@ -3,6 +3,8 @@ name: gsd-path-decide
 description: Decide implementation direction from approved intent and complete research evidence, recording settled choices in SYNTHESIS.md. Use only when the user explicitly invokes $gsd-path-decide or an active $gsd-path router explicitly routes to this phase.
 ---
 
+Before executing project helpers, read [runtime selection](references/runtime-selection.md).
+
 # GSD Path Decide Phase
 
 Dispatch one reasoning-intensive decider and validate its decision artifact.

package/skills/gsd-path/DEFINE.md

@@ -3,6 +3,8 @@ name: gsd-path-define
 description: Define and approve project or milestone intent through an interview or milestone confirmation, writing .project/CHARTER.md or .project/intent/INTENT.md. Use only when the user explicitly invokes $gsd-path-define or an active $gsd-path router explicitly routes to this phase.
 ---
 
+Before executing project helpers, read [runtime selection](references/runtime-selection.md).
+
 # GSD Path Define Phase
 
 Turn a project idea or approved roadmap entry into an approved intent artifact.
@@ -110,12 +112,13 @@ the charter instead of the single-milestone checklist:
 4. **Constraints** — program-level stack, budget, deadline, integrations.
 5. **Program success criteria** — observable when the last milestone ships.
 6. **Review panel** — optional durable default (`off` | `detected` | named
-   families). Default `off`. This value persists on CHARTER.md; later
+   families). Use the configured future preference unless the user chooses
+   otherwise (see Output contract). This value persists on CHARTER.md; later
    milestone INTENT files copy it and may override.
 
 Read the local [charter template](templates/charter.md), write the approval
-draft to `.project/CHARTER.md` including `Review panel:` (default `off`;
-never invent `detected` or a named list), and run the same playback-approval
+draft to `.project/CHARTER.md` including the configured or explicitly chosen
+`Review panel:` value, and run the same playback-approval
 loop as the standard Process. On approval, retain the reviewed
 `Review panel:` value on CHARTER.md, run `pipeline_state.py transition` with
 expected `define/active`, milestone/branch/archive all at their exact current
@@ -144,7 +147,7 @@ State ownership. There is no re-interview of charter or roadmap scope:
    Risks and Open questions from the entry (tagged `RESEARCH`/`NEEDS-USER`),
    `Lane: milestone`, `Surfaces:` copied verbatim from the entry, and
    `Review panel:` copied from CHARTER.md (default
-   `off` when CHARTER omits it). The confirmation may override the copied
+   the configured preference when CHARTER omits it). The confirmation may override the copied
    panel value; do not invent `detected` or a named list. When brownfield,
    fill `## Current state` from the map, record doc-vs-code rulings as in
    Brownfield mode, and add protected existing behavior under Scope out.
@@ -271,9 +274,12 @@ question. The rules change for every primary mode:
 ## Output contract
 
 At approval, retain the already reviewed `Lane:` value and its one-line reason.
-Retain `Review panel:` as reviewed: the CHARTER copy or the user's override
-in milestone/lookahead mode, the CHARTER value in program mode, or `off`
-when the user did not choose a panel and no CHARTER default exists.
+Before presenting an approval draft without a CHARTER or explicit panel choice,
+read `settings.review_panel.value` from the selected runtime's `path_config.py
+show --repo <absolute-root>` (bundle for legacy projects; off for older selected
+runtimes without config support). Include that preference in the draft.
+Retain `Review panel:` as reviewed: the CHARTER copy, the explicit user choice,
+or the configured future preference. Quick lane keeps the panel off.
 
 After approval, finalize `.project/intent/INTENT.md` and run
 `pipeline_state.py transition` with expected `define/active`, the exact

package/skills/gsd-path/DOCS-AUDIT.md

@@ -3,6 +3,8 @@ name: gsd-path-docs-audit
 description: Verify Markdown claims against the actual code, commands, and GSD Path artifacts. Use only when the user explicitly invokes $gsd-path-docs-audit or an active $gsd-path router explicitly routes to this phase.
 ---
 
+Before executing project helpers, read [runtime selection](references/runtime-selection.md).
+
 # GSD Path Docs Audit
 
 Answer one question with evidence: **does the project do what its documents

package/skills/gsd-path/INSPECT.md

@@ -3,6 +3,8 @@ name: gsd-path-inspect
 description: Inspect an existing codebase and its documentation to establish brownfield ground truth before intent is defined. Use only when the user explicitly invokes $gsd-path-inspect or an active $gsd-path router explicitly routes to this phase.
 ---
 
+Before executing project helpers, read [runtime selection](references/runtime-selection.md).
+
 # GSD Path Inspect Phase
 
 Establish ground truth about an existing project before intent is defined.