@opengsd/gsd-path 1.3.1 → 1.5.0

package/scripts/pipeline_undo.py

@@ -17,6 +17,7 @@ import os
 import re
 import shutil
 import sys
+from datetime import date
 
 # Runtime helpers must not modify their immutable installation.
 sys.dont_write_bytecode = True
@@ -25,22 +26,30 @@ from pathlib import Path, PurePosixPath
 from typing import Optional, Sequence
 
 def _load_pipeline_modules():
-    try:
-        import archive_milestone
-        import isolation
-        import pipeline_git
-        import pipeline_state
-        import state_checkpoint
+    if __package__:
+        from . import archive_milestone
+        from . import isolation
+        from . import pipeline_git
+        from . import pipeline_state
+        from . import state_checkpoint
         return archive_milestone, isolation, pipeline_git, pipeline_state, state_checkpoint
-    except ModuleNotFoundError as error:
-        if error.name not in {
-            "archive_milestone",
-            "isolation",
-            "pipeline_git",
-            "pipeline_state",
-            "state_checkpoint",
-        }:
-            raise
+    else:
+        try:
+            import archive_milestone
+            import isolation
+            import pipeline_git
+            import pipeline_state
+            import state_checkpoint
+            return archive_milestone, isolation, pipeline_git, pipeline_state, state_checkpoint
+        except ModuleNotFoundError as error:
+            if error.name not in {
+                "archive_milestone",
+                "isolation",
+                "pipeline_git",
+                "pipeline_state",
+                "state_checkpoint",
+            }:
+                raise
     try:
         from scripts import archive_milestone, isolation, pipeline_git, pipeline_state, state_checkpoint
         return archive_milestone, isolation, pipeline_git, pipeline_state, state_checkpoint
@@ -94,10 +103,20 @@ UNDO_TRANSACTION_SCHEMA = pipeline_state.UNDO_TRANSACTION_SCHEMA
 UNDO_TRANSACTION_NAME = pipeline_state.UNDO_TRANSACTION_NAME
 ROADMAP_APPROVAL_SUBJECT = "roadmap: program roadmap approved"
 TASK_SUBJECT_RE = re.compile(r"^(T\d{3,}): .+")
-KINDS = ("checkpoint", "task", "uncommitted-archive", "lookahead")
+KINDS = ("checkpoint", "task", "member-task", "uncommitted-archive", "lookahead")
 PROMOTION_PREFIX = "router: promote lookahead milestone "
 ABANDON_PREFIX = "build: abandon milestone "
 INTEGRATE_PREFIX = "integrate: "
+SHIP_LOG_ONLY_LINE = re.compile(
+    r"- (?P<date>\d{4}-\d{2}-\d{2}) — ship — (?P<event>[^\r\n]+)\n\Z"
+)
+SHIPMENT_RECORD_LINE = re.compile(
+    r"- (?P<date>\d{4}-\d{2}-\d{2}) — shipped — (?P<event>[^\r\n]+)\n\Z"
+)
+SHIPMENT_EVENTS = {
+    "archive preflight passed; shipment recorded",
+    "archive preflight passed; shipment recorded; program complete",
+}
 
 
 class UndoError(RuntimeError):
@@ -367,6 +386,80 @@ def pending_transaction(repo: Path) -> Optional[dict[str, object]]:
         raise UndoError(str(error)) from error
 
 
+def _valid_state_event_line(line: str, phase: str) -> bool:
+    pattern = SHIP_LOG_ONLY_LINE if phase == "ship" else SHIPMENT_RECORD_LINE
+    match = pattern.fullmatch(line)
+    if match is None:
+        return False
+    try:
+        event_date = date.fromisoformat(match.group("date"))
+    except ValueError:
+        return False
+    event = match.group("event")
+    return event_date.isoformat() == match.group("date") and event == " ".join(event.split())
+
+
+def _owned_ship_log_events(
+    prepared_state: str,
+    current_state: str,
+    phase: object,
+    status: object,
+) -> Optional[str]:
+    """Return only ship log lines appended around a helper-owned archive event.
+
+    The prepared text must remain byte-for-byte unchanged. For shipped/done,
+    record-shipment changes only phase and status before appending its one
+    generated shipment event, so validate that exact prefix and event shape.
+    """
+    if (phase, status) == ("ship", "active"):
+        if current_state == prepared_state:
+            return ""
+        if not current_state.startswith(prepared_state):
+            return None
+        suffix = current_state[len(prepared_state):]
+        separator = "" if prepared_state.endswith("\n") else "\n"
+        if separator:
+            if not suffix.startswith(separator):
+                return None
+            suffix = suffix[len(separator):]
+        lines = suffix.splitlines(keepends=True)
+        if not lines or "".join(lines) != suffix:
+            return None
+        if not all(_valid_state_event_line(line, "ship") for line in lines):
+            return None
+        return separator + suffix
+
+    if (phase, status) != ("shipped", "done"):
+        return None
+    try:
+        shipped_prefix = pipeline_state._set_frontmatter(
+            prepared_state,
+            {"phase": "shipped", "status": "done"},
+        )
+    except PipelineStateError:
+        return None
+    if not current_state.startswith(shipped_prefix):
+        return None
+    suffix = current_state[len(shipped_prefix):]
+    separator = "" if shipped_prefix.endswith("\n") else "\n"
+    if separator:
+        if not suffix.startswith(separator):
+            return None
+        suffix = suffix[len(separator):]
+    lines = suffix.splitlines(keepends=True)
+    if not lines or "".join(lines) != suffix:
+        return None
+    shipment_event = lines[-1]
+    if not _valid_state_event_line(shipment_event, "shipped"):
+        return None
+    if SHIPMENT_RECORD_LINE.fullmatch(shipment_event).group("event") not in SHIPMENT_EVENTS:
+        return None
+    ship_events = lines[:-1]
+    if not all(_valid_state_event_line(line, "ship") for line in ship_events):
+        return None
+    return separator + "".join(ship_events) if ship_events else ""
+
+
 def _archive_metadata_error(
     repo: Path,
     state_fields: dict[str, object],
@@ -412,8 +505,13 @@ def _archive_metadata_error(
         if final_review.exists() or gap_reviews:
             reviewed_head, _ = archive_milestone.parse_final_review(archive_path)
             archive_milestone.validate_gap_reviews(archive_path, reviewed_head)
-            if reviewed_head != _optional_rev(repo, "HEAD"):
-                return "archive undo final review does not match current HEAD"
+            if not archive_milestone.reviewed_head_covers(
+                repo, reviewed_head, _optional_rev(repo, "HEAD")
+            ):
+                return (
+                    "archive undo final review does not match current HEAD; "
+                    f"{archive_milestone._common.RUNTIME_PIN_ALLOWANCE}"
+                )
             expected_inventory.add("review/FINAL.md")
             expected_inventory.update(
                 path.relative_to(archive_path).as_posix() for path in gap_reviews
@@ -468,10 +566,14 @@ def _archive_metadata_error(
         "archive",
         configured,
     )
-    current_state = (repo / ".project" / "STATE.md").read_text(encoding="utf-8")
+    current_state = (repo / ".project" / "STATE.md").read_bytes().decode("utf-8")
     phase = state_fields.get("phase")
     status = state_fields.get("status")
+    ship_events = _owned_ship_log_events(prepared_state, current_state, phase, status)
     if (phase, status) == ("ship", "active"):
+        if ship_events is None:
+            return "archive undo found unowned STATE.md changes"
+        prepared_state += ship_events
         if current_state != prepared_state:
             return "archive undo found unowned STATE.md changes"
         if ".project/ROADMAP.md" in dirty:
@@ -479,14 +581,13 @@ def _archive_metadata_error(
         return None
     if (phase, status) != ("shipped", "done"):
         return "archive undo requires ship/active or shipped/done"
+    if ship_events is None:
+        return "archive undo found unowned shipment STATE.md changes"
+    prepared_state += ship_events
 
     prepared = _state_from_text(prepared_state, "prepared archive STATE.md")
-    events = (
-        "archive preflight passed; shipment recorded",
-        "archive preflight passed; shipment recorded; program complete",
-    )
     rendered_states = []
-    for event in events:
+    for event in SHIPMENT_EVENTS:
         try:
             _, _, rendered = _render_transition(
                 prepared,
@@ -528,6 +629,7 @@ def _prepare_transaction(
     branch: str,
     archive: Optional[str],
     discussion: Optional[dict[str, bytes]],
+    member_fields: Optional[dict[str, str]] = None,
 ) -> dict[str, object]:
     transaction = {
         "schema": UNDO_TRANSACTION_SCHEMA,
@@ -545,6 +647,8 @@ def _prepare_transaction(
         ),
         "discussion": _encode_discussion(discussion),
     }
+    if member_fields is not None:
+        transaction.update(member_fields)
     _write_json(_git_path(repo, UNDO_TRANSACTION_NAME), transaction)
     return transaction
 
@@ -641,7 +745,7 @@ def _transaction_recovery_stage(
     expected_head = str(transaction["expected_head"])
     parent = str(transaction["parent"])
     current = _optional_rev(repo, "HEAD")
-    if transaction["kind"] == "checkpoint":
+    if transaction["kind"] in {"checkpoint", "member-task"}:
         allowed = {expected_head, parent}
     else:
         allowed = {expected_head}
@@ -662,8 +766,60 @@ def _transaction_recovery_stage(
     return "reset"
 
 
+def _member_undo_parent(repo: Path, member: str, landing: str) -> str:
+    """The member landing's parent, while that landing is the unpublished bound tip."""
+    checkout, _, entry = isolation._member_context(repo, member)
+    bound = entry["branch"]
+    if _run_git(checkout, "rev-parse", f"refs/heads/{bound}").stdout.strip() != landing:
+        raise UndoError(f"member {member} {bound} moved past this landing")
+    _require_member_unpublished(checkout, member, landing, bound)
+    return _run_git(checkout, "rev-parse", f"{landing}^").stdout.strip()
+
+
+def _require_member_unpublished(checkout: Path, member: str, landing: str, bound: str) -> None:
+    for ref, where in (("refs/remotes/origin/main", "origin/main"), (f"refs/remotes/origin/{bound}", f"origin/{bound}")):
+        if _run_git(checkout, "merge-base", "--is-ancestor", landing, ref, check=False).returncode == 0:
+            raise UndoError(f"member {member} landing is already on {where}")
+
+
+def _require_no_member_landing_journal(repo: Path) -> None:
+    directory = isolation.common_git_dir(repo).joinpath(*isolation.MEMBER_LANDING_DIR)
+    if any(directory.glob("*.json")):
+        raise UndoError("member landing journal is pending; recover member landing first")
+
+
+def _undo_member_landing(repo: Path, transaction: dict[str, object]) -> None:
+    """Reset the member bound branch first; a resumed undo finds it already reset."""
+    member = str(transaction["member"])
+    checkout, _, entry = isolation._member_context(repo, member)
+    tip = _run_git(checkout, "rev-parse", f"refs/heads/{entry['branch']}").stdout.strip()
+    if tip == transaction["member_parent"]:
+        _require_member_unpublished(checkout, member, str(transaction["landing"]), entry["branch"])
+        return
+    if tip != transaction["landing"]:
+        raise UndoError(f"member {member} bound branch moved during undo")
+    if _member_undo_parent(repo, member, str(transaction["landing"])) != transaction["member_parent"]:
+        raise UndoError(f"member {member} landing parent changed during undo")
+    bound = Path(isolation.member_bound_checkout(repo, member)["checkout"])
+    if _run_git(bound, "status", "--porcelain", "--untracked-files=all").stdout:
+        raise UndoError(f"member {member} bound checkout is dirty")
+    _run_git(bound, "reset", "--hard", str(transaction["member_parent"]))
+
+
 def _finish_transaction(repo: Path, transaction: dict[str, object]) -> None:
+    if transaction["kind"] == "member-task":
+        with isolation._member_landing_lock(repo):
+            _finish_transaction_locked(repo, transaction)
+        return
+    _finish_transaction_locked(repo, transaction)
+
+
+def _finish_transaction_locked(repo: Path, transaction: dict[str, object]) -> None:
+    if transaction["kind"] == "member-task":
+        _require_no_member_landing_journal(repo)
     stage = _transaction_recovery_stage(repo, transaction)
+    if transaction["kind"] == "member-task":
+        _undo_member_landing(repo, transaction)
     if stage == "prepared":
         _require_unpublished_reset(repo, str(transaction["branch"]))
         _reset_to(repo, str(transaction["parent"]))
@@ -675,11 +831,7 @@ def _finish_transaction(repo: Path, transaction: dict[str, object]) -> None:
         _remove_untracked_tree(repo, archive)
     path = _git_path(repo, UNDO_TRANSACTION_NAME)
     path.unlink()
-    descriptor = os.open(path.parent, os.O_RDONLY)
-    try:
-        os.fsync(descriptor)
-    finally:
-        os.close(descriptor)
+    pipeline_state._common.fsync_directory(path.parent)
 
 
 def classify_undo(repo: Path) -> dict[str, object]:
@@ -821,6 +973,28 @@ def classify_undo(repo: Path) -> dict[str, object]:
         proof_error = _task_proof_error(resolved, head)
         if proof_error:
             return _blocked([f"task landing ownership is unproven: {proof_error}"])
+        record = isolation.MEMBER_RECORD_RE.search(body)
+        if record is not None:
+            try:
+                _require_no_member_landing_journal(resolved)
+                member_parent = _member_undo_parent(resolved, record["member"], record["landing"])
+            except (IsolationError, UndoError, PipelineStateError) as error:
+                return _blocked([f"member landing undo is unsafe: {error}"])
+            return {
+                "kind": "member-task",
+                "branch": recorded_branch,
+                "head": head,
+                "parent": parent,
+                "subject": subject,
+                "member": record["member"],
+                "landing": record["landing"],
+                "member_parent": member_parent,
+                "effects": [
+                    f"reset member {record['member']} bound branch to {member_parent}",
+                    f"reset {recorded_branch} to {parent}",
+                ],
+                "blocked": [],
+            }
         return {
             "kind": "task",
             "branch": recorded_branch,
@@ -978,6 +1152,20 @@ def apply_undo(repo: Path, kind: str, expected_head: str) -> dict[str, object]:
             discussion,
         )
         _finish_transaction(resolved, transaction)
+    elif kind == "member-task":
+        with isolation._member_landing_lock(resolved):
+            _require_no_member_landing_journal(resolved)
+            if preview(resolved)["target"] != target:
+                raise UndoError("member task undo target changed after preview")
+            if _worktree_changes(resolved):
+                raise UndoError("worktree changed after member task undo preview")
+            _require_unpublished_reset(resolved, str(target["branch"]))
+            transaction = _prepare_transaction(
+                resolved, kind, expected_head, str(target["parent"]), str(target["branch"]), None, None,
+                {"member": str(target["member"]), "landing": str(target["landing"]),
+                 "member_parent": str(target["member_parent"])},
+            )
+            _finish_transaction_locked(resolved, transaction)
     elif kind == "task":
         parent = target["parent"]
         if not parent:

package/scripts/promote_lookahead.py

@@ -205,7 +205,7 @@ def select_fetched_base(
     resolved = subprocess.run(
         ["git", "-C", str(root), "rev-parse", "--verify", f"{remote_default}^{{commit}}"],
         capture_output=True,
-        text=True,
+        encoding="utf-8", errors="replace",
         check=False,
     )
     if resolved.returncode != 0 or resolved.stdout.strip() != base:

package/scripts/review_panel.py

@@ -470,7 +470,7 @@ def merge_artifacts(
         lines.append(artifact["text"].rstrip())
         lines.append("")
     output.parent.mkdir(parents=True, exist_ok=True)
-    output.write_text("\n".join(lines).rstrip() + "\n", encoding="utf-8")
+    output.write_bytes(("\n".join(lines).rstrip() + "\n").encode("utf-8"))
     return {
         "output": str(output.resolve()),
         "families": families,

package/scripts/runtime_store.py

@@ -8,6 +8,7 @@ from pathlib import Path
 import shutil
 import shlex
 import tempfile
+import time
 from contextlib import contextmanager
 
 try:
@@ -22,10 +23,42 @@ RUNTIME_FILES = (
     "review_panel.py", "_common.py", "worktree_paths.py", "build_recovery.py",
     "state_checkpoint.py", "state_promote.py", "discussion_validate.py", "integration.py",
     "build_state.py", "lean_verification.py", "check_docs_audit.py",
-    "path_config.py", "model_policy.py", "loop_run.py",
+    "path_config.py", "model_policy.py", "loop_run.py", "members.py",
 )
 GUARDS = ("guard_hook.py", "git_guard.py")
 
+# Optional owner-recorded provenance on .gsd-path/runtime.json declarations,
+# e.g. {"source": "<npm version or package id>", "patch_ref": "<commit sha
+# or patch list>", "note": "<owner label>"}. Provenance is display/audit
+# metadata ONLY: it never joins the hashed manifest input (manifest_digest
+# covers exactly {"version", "files"}), never acts as an alternate accepted
+# digest, and never bypasses or weakens validate_runtime. A declaration
+# without provenance is stock and stays exactly as valid as one with it.
+PROVENANCE_KEYS = ("source", "patch_ref", "note")
+
+# Access denied and sharing violation: on Windows a scanner or indexer that
+# briefly opens a freshly written file blocks renaming the directory holding it.
+_WINDOWS_BUSY_ERRORS = (5, 32)
+_RENAME_ATTEMPTS = 20
+
+
+def _rename_directory(source, destination):
+    """Path.rename, retried while Windows briefly holds a file inside ``source``."""
+    if os.name != "nt":
+        source.rename(destination)
+        return
+    for attempt in range(_RENAME_ATTEMPTS):
+        try:
+            source.rename(destination)
+            return
+        except PermissionError as error:
+            # Never retry onto a directory that appeared meanwhile.
+            if (getattr(error, "winerror", None) not in _WINDOWS_BUSY_ERRORS
+                    or os.path.lexists(destination)
+                    or attempt == _RENAME_ATTEMPTS - 1):
+                raise
+            time.sleep(min(0.01 * 2 ** attempt, 0.25))
+
 
 def guard_launcher(name):
     if name not in GUARDS:
@@ -41,7 +74,7 @@ def guard_launcher(name):
 
 
 def source_manifest(source):
-    version = json.loads((source / "package.json").read_text())["version"]
+    version = json.loads((source / "package.json").read_text(encoding="utf-8"))["version"]
     files = {}
     for name in (*RUNTIME_FILES, *GUARDS, "status_runtime.py"):
         path = source / "scripts" / name
@@ -107,7 +140,7 @@ def publish(source, *, expected=None, dry_run=False, repair=False):
             shutil.copyfile(source / "scripts" / name, staging / name)
             if hashlib.sha256((staging / name).read_bytes()).hexdigest() != digest:
                 raise ValueError(f"runtime source changed while installing: {name}")
-        (staging / "manifest.json").write_text(pin_text(manifest), encoding="utf-8")
+        (staging / "manifest.json").write_bytes(pin_text(manifest).encode("utf-8"))
         # Serialize publication/repair, including two explicit restorations.
         previous = Path(temporary) / "previous"
         with publication_lock(parent, pin["digest"]):
@@ -118,13 +151,13 @@ def publish(source, *, expected=None, dry_run=False, repair=False):
                 except ValueError:
                     if not repair:
                         raise
-                    destination.rename(previous)
+                    _rename_directory(destination, previous)
             try:
-                staging.rename(destination)
+                _rename_directory(staging, destination)
                 status_runtime.validate_runtime(pin)
             except BaseException:
                 if previous.exists() and not destination.exists():
-                    previous.rename(destination)
+                    _rename_directory(previous, destination)
                 raise
     return pin
 
@@ -167,7 +200,7 @@ def recover_migration(project):
         return
     if journal.is_symlink():
         raise ValueError(f"unsafe runtime migration journal: {journal}")
-    data = json.loads(journal.read_text())
+    data = json.loads(journal.read_text(encoding="utf-8"))
     recorded_project = data.get("project")
     if (data.get("schema") != "gsd-path/runtime-migration/v1"
             or not isinstance(recorded_project, str)
@@ -196,7 +229,7 @@ def recover_migration(project):
     journal.unlink()
 
 
-def operate(source, project, action, *, dry_run=False):
+def operate(source, project, action, *, dry_run=False, provenance=None):
     if project.is_symlink() or (project / ".gsd-path").is_symlink():
         raise ValueError("unsafe project runtime directory")
     if action == "restore":
@@ -204,12 +237,23 @@ def operate(source, project, action, *, dry_run=False):
         publish(source, expected=pin, dry_run=dry_run, repair=True)
         return pin
     if action == "upgrade":
-        status_runtime.declaration(project)
+        previous = status_runtime.declaration(project)
         pin = publish(source, dry_run=dry_run)
+        # Explicit provenance replaces the recorded object. Without new flags,
+        # an existing entry carries forward only while the pinned digest is
+        # unchanged — a different source drops stale hotfix metadata instead
+        # of stamping it onto bytes it no longer describes. Metadata only —
+        # it never changes the pinned digest.
+        if provenance is None and previous.get("digest") == pin["digest"]:
+            provenance = previous.get("provenance")
+        if provenance:
+            pin = {**pin, "provenance": provenance}
         if not dry_run:
             launcher = project / ".gsd-path/status_runtime.py"
-            original = launcher.read_text(encoding="utf-8")
-            replacement = (source / "scripts/status_runtime.py").read_text(encoding="utf-8")
+            # Exact bytes: read_text() would turn CRLF into LF, leaving the
+            # launcher unequal to the runtime's byte-for-byte copy.
+            original = launcher.read_bytes().decode("utf-8")
+            replacement = (source / "scripts/status_runtime.py").read_bytes().decode("utf-8")
             # Both launchers understand the same declaration schema. Publishing
             # the compatible launcher first leaves the old selection usable.
             if replacement != original:

package/scripts/skill-resources.json

@@ -10,7 +10,8 @@
     "cursor": {"local_root": ".cursor/skills", "guard_tier": "native-fail-closed", "child_apis": ["Task"]},
     "zed": {"local_root": ".agents/skills", "guard_tier": "git-only", "invocation_prefix": "/", "child_apis": ["spawn_agent"]},
     "kiro": {"local_root": ".kiro/skills", "guard_tier": "git-only", "child_apis": ["invoke_sub_agent"]},
-    "kimi": {"local_root": ".kimi-code/skills", "guard_tier": "git-only", "child_apis": ["Agent"]}
+    "kimi": {"local_root": ".kimi-code/skills", "guard_tier": "git-only", "child_apis": ["Agent"]},
+    "muse": {"local_root": ".agents/skills", "guard_tier": "git-only", "invocation_prefix": "/", "child_apis": ["muse.subagent_spawn"]}
   },
   "skills": [
     "gsd-path",
@@ -55,6 +56,7 @@
     "scripts/integration.py",
     "scripts/archive_milestone.py",
     "scripts/bootstrap_repository.py",
+    "scripts/members.py",
     "scripts/detect_project.py",
     "scripts/promote_lookahead.py",
     "scripts/discussion_records.py",
@@ -95,11 +97,14 @@
     "skills/",
     "platforms/",
     "AGENTS.md",
-    "WORKFLOW.md"
+    "WORKFLOW.md",
+    "!**/__pycache__/**",
+    "!**/*.pyc"
   ],
   "phase_resources": {
     "gsd-path-build": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/build-recovery.md",
       "references/build-native.md",
       "references/build-abandon.md",
@@ -112,6 +117,7 @@
       "references/reviewer-skeptic.md",
       "references/reviewer-final.md",
       "references/reviewer-panel.md",
+      "references/spec-probes.md",
 
       "templates/task.md",
       "templates/wave-review.md",
@@ -120,11 +126,13 @@
     ],
     "gsd-path-discuss": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "templates/answers.md",
       "templates/dialogue.md"
     ],
     "gsd-path-docs-audit": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/dispatch.md",
       "references/model-policy.md",
       "references/docs-auditor.md",
@@ -132,13 +140,16 @@
     ],
     "gsd-path-define": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/build-recovery.md",
+      "references/spec-probes.md",
       "templates/charter.md",
       "templates/intent.md",
       "templates/state.md"
     ],
     "gsd-path-inspect": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/codebase-mapper.md",
       "references/dispatch.md",
       "references/model-policy.md",
@@ -148,21 +159,26 @@
       "templates/state.md"
     ],
     "gsd-path-forensics": [
-      "references/runtime-selection.md"
+      "references/runtime-selection.md",
+      "references/operating-rules.md"
     ],
     "gsd-path-migrate": [
-      "references/runtime-selection.md"
+      "references/runtime-selection.md",
+      "references/operating-rules.md"
     ],
     "gsd-path-loop": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "templates/loop.md"
     ],
     "gsd-path-plan": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/build-recovery.md",
       "references/dispatch.md",
       "references/model-policy.md",
       "references/planner.md",
+      "references/spec-probes.md",
       "templates/patch-findings.md",
       "templates/plan.md",
       "templates/plan-panel.md",
@@ -170,6 +186,7 @@
     ],
     "gsd-path-research": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/dispatch.md",
       "references/model-policy.md",
       "references/researcher.md",
@@ -178,6 +195,7 @@
     ],
     "gsd-path-roadmap": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/dispatch.md",
       "references/model-policy.md",
       "references/roadmapper.md",
@@ -185,6 +203,7 @@
     ],
     "gsd-path-ship": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/dispatch.md",
       "references/model-policy.md",
       "references/reviewer.md",
@@ -193,6 +212,7 @@
       "references/reviewer-skeptic.md",
       "references/reviewer-final.md",
       "references/reviewer-panel.md",
+      "references/spec-probes.md",
 
       "templates/archive-manifest.md",
       "templates/final-review.md",
@@ -202,13 +222,15 @@
     ],
     "gsd-path-decide": [
       "references/runtime-selection.md",
+      "references/operating-rules.md",
       "references/dispatch.md",
       "references/model-policy.md",
       "references/decider.md",
       "templates/synthesis.md"
     ],
     "gsd-path-undo": [
-      "references/runtime-selection.md"
+      "references/runtime-selection.md",
+      "references/operating-rules.md"
     ]
   },
   "script_targets": [
@@ -259,6 +281,16 @@
     ["scripts/discussion_validate.py", "skills/gsd-path-ship/scripts/discussion_validate.py"],
     ["scripts/integration.py", "skills/gsd-path-ship/scripts/integration.py"],
     ["scripts/bootstrap_repository.py", "skills/gsd-path/scripts/bootstrap_repository.py"],
+    ["scripts/members.py", "skills/gsd-path/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-build/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-decide/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-define/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-docs-audit/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-inspect/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-plan/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-research/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-roadmap/scripts/members.py"],
+    ["scripts/members.py", "skills/gsd-path-ship/scripts/members.py"],
     ["scripts/detect_project.py", "skills/gsd-path/scripts/detect_project.py"],
     ["scripts/detect_project.py", "skills/gsd-path-define/scripts/detect_project.py"],
     ["scripts/detect_project.py", "skills/gsd-path-inspect/scripts/detect_project.py"],