@opengsd/gsd-pi 1.10.0 → 1.11.0

package/README.md

@@ -28,16 +28,16 @@ See [CHANGELOG.md](./CHANGELOG.md) for release-by-release fixes and [Legacy Rele
 ## Latest Release Highlights
 
 <!-- release-highlights:start -->
-Latest release: **v1.10.0**
+Latest release: **v1.11.0**
 
-- **pi-ai:** Add Meta Muse Spark 1.1 to the model catalog.
-- **gsd:** Surface cacheRetention as a settable prompt-cache TTL preference.
-- **models:** Add GPT-5.6 as a first-class model.
-- **models:** Add Grok 4.5 as a first-class xAI model.
-- **agent-core:** Pin compaction summarization reasoning to low, bound degenerate-chunk retry.
-- **gsd:** Filter superseded context injections from provider payload.
-- **gsd:** Stop advertising alias tool schemas on model-facing surfaces.
-- **gsd:** Cap execute-task and discuss-slice inlined context; provider-aware budgets.
+- **gsd:** Add canonical database foundation (#1426).
+- **gsd-cloud:** Add macOS cloud monitor app and runtime telemetry (#1399).
+- **Added:** Add workflow authority baseline gate (#1422).
+- **issue:** [Feature]: Support using pi-llama-cpp for local models (#1425).
+- **issue:** [Bug]: GPT-5.6 ships as the nonexistent bare `gpt-5.6` slug — the real routable models are gpt-5.6-sol/terra/luna (#1424).
+- **issue:** Fix(doctor): artifact_file_missing false positive for active-worktree artifacts; checkbox_db_status_divergence regression on plan-slice re-dispatch (#1420).
+- **issue:** Planning_subagents should support user-defined planning agents.
+- **issue:** Auto-verification.js writes VERIFY.json to legacy tasks/ subdir in flat-phase projects.
 
 <!-- release-highlights:end -->
 
@@ -194,6 +194,7 @@ Then use slash commands inside the GSD session:
 | --- | --- |
 | `src/` | Core runtime resources and bundled extensions |
 | `packages/` | Workspace packages used by the CLI, agent, TUI, RPC, and native bridge |
+| `apps/` | Standalone native apps, such as the GSD Cloud Monitor menu bar app |
 | `native/` | Native engine packaging and platform binaries |
 | `studio/` | Desktop studio app |
 | `web/` | Web UI and API surface |

package/dist/resources/.managed-resources-content-hash

@@ -1 +1 @@
-5f0f1c788a126951
+2b84d39575210a02

package/dist/resources/extensions/gsd/auto-model-selection.js

@@ -314,6 +314,7 @@ const THINKING_LEVEL_ORDER = [
     "medium",
     "high",
     "xhigh",
+    "max",
 ];
 /**
  * Minimum reasoning level for code-writing units.

package/dist/resources/extensions/gsd/auto-start.js

@@ -821,7 +821,7 @@ export async function bootstrapAutoSession(s, ctx, pi, base, verboseMode, reques
     // provider the user is not logged into and surface as "Not logged in · Please
     // run /login" before pausing and resetting to claude-code/claude-sonnet-4-6.
     const manualSessionOverride = getSessionModelOverride(ctx.sessionManager.getSessionId());
-    const sessionProviderIsCustom = isCustomProvider(ctx.model?.provider);
+    const sessionProviderIsCustom = isCustomProvider(ctx.model?.provider, ctx.modelRegistry);
     const profileModelIds = modelIdsForProfileResolution(ctx.modelRegistry, resolveProfileAnchorProvider(ctx.model?.provider), resolveDisabledModelProvidersFromPreferences());
     const preferredModel = sessionProviderIsCustom
         ? null

package/dist/resources/extensions/gsd/auto-verification.js

@@ -1,7 +1,7 @@
 // Project/App: gsd-pi
 // File Purpose: Post-unit verification gate for GSD auto-mode units.
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { relMilestoneFile, resolveSlicePath } from "./paths.js";
+import { legacyMilestonesDir, relMilestoneFile, resolveMilestonePath, resolveSlicePath } from "./paths.js";
 import { resolveMilestoneValidationVerdict } from "./milestone-validation-verdict.js";
 import { resolveCanonicalMilestoneRoot } from "./worktree-manager.js";
 import { parseUnitId } from "./unit-id.js";
@@ -24,6 +24,20 @@ import { getLedger } from "./metrics.js";
 import { getUnitCostSpikeAction, resolveUnitCostSpikeMultiplier } from "./auto-budget.js";
 import { formatPostUnitStatusCard } from "./auto-status-message.js";
 import { detectWebApp } from "./web-app-uat.js";
+function resolveVerificationEvidenceLocation(basePath, milestoneId, sliceId) {
+    const mDir = resolveMilestonePath(basePath, milestoneId);
+    if (!mDir)
+        return null;
+    const legacyBase = legacyMilestonesDir(basePath);
+    const isLegacy = mDir.startsWith(legacyBase + "/") || mDir.startsWith(legacyBase + "\\");
+    if (!isLegacy) {
+        return { dir: mDir, fileSliceId: sliceId };
+    }
+    const sDir = resolveSlicePath(basePath, milestoneId, sliceId);
+    if (!sDir)
+        return null;
+    return { dir: join(sDir, "tasks") };
+}
 function getCurrentUnitCostStats(unitId) {
     const ledger = getLedger();
     if (!ledger || !Array.isArray(ledger.units) || ledger.units.length === 0) {
@@ -431,11 +445,10 @@ export async function runPostUnitVerification(vctx, pauseAuto) {
         const taskAlreadyComplete = taskRow?.status === "complete" || taskRow?.status === "done";
         if (mid && sid && tid) {
             try {
-                const sDir = resolveSlicePath(s.basePath, mid, sid);
-                if (sDir) {
-                    const tasksDir = join(sDir, "tasks");
+                const evidenceLocation = resolveVerificationEvidenceLocation(s.basePath, mid, sid);
+                if (evidenceLocation) {
                     if (result.passed) {
-                        writeVerificationJSON(result, tasksDir, tid, s.currentUnit.id);
+                        writeVerificationJSON(result, evidenceLocation.dir, tid, s.currentUnit.id, undefined, undefined, evidenceLocation.fileSliceId);
                     }
                     else {
                         const nextAttempt = attempt + 1;
@@ -444,7 +457,7 @@ export async function runPostUnitVerification(vctx, pauseAuto) {
                             verdict.retryable &&
                             autoFixEnabled &&
                             nextAttempt <= maxRetries;
-                        writeVerificationJSON(result, tasksDir, tid, s.currentUnit.id, includeRetryMetadata ? nextAttempt : undefined, includeRetryMetadata ? maxRetries : undefined);
+                        writeVerificationJSON(result, evidenceLocation.dir, tid, s.currentUnit.id, includeRetryMetadata ? nextAttempt : undefined, includeRetryMetadata ? maxRetries : undefined, evidenceLocation.fileSliceId);
                     }
                 }
             }
@@ -560,9 +573,8 @@ export async function runPostUnitVerification(vctx, pauseAuto) {
         // Re-write verification evidence JSON with post-execution checks
         if (postExecChecks && postExecChecks.length > 0 && mid && sid && tid) {
             try {
-                const sDir = resolveSlicePath(s.basePath, mid, sid);
-                if (sDir) {
-                    const tasksDir = join(sDir, "tasks");
+                const evidenceLocation = resolveVerificationEvidenceLocation(s.basePath, mid, sid);
+                if (evidenceLocation) {
                     // Add postExecutionChecks to the result for the JSON write
                     const resultWithPostExec = {
                         ...result,
@@ -570,7 +582,7 @@ export async function runPostUnitVerification(vctx, pauseAuto) {
                         passed: result.passed && !postExecBlockingFailure,
                     };
                     // Manually write with postExecutionChecks field
-                    writeVerificationJSONWithPostExec(resultWithPostExec, tasksDir, tid, s.currentUnit.id, postExecChecks, postExecBlockingFailure ? attempt + 1 : undefined, postExecBlockingFailure ? maxRetries : undefined);
+                    writeVerificationJSONWithPostExec(resultWithPostExec, evidenceLocation.dir, tid, s.currentUnit.id, postExecChecks, postExecBlockingFailure ? attempt + 1 : undefined, postExecBlockingFailure ? maxRetries : undefined, evidenceLocation.fileSliceId);
                 }
             }
             catch (evidenceErr) {
@@ -738,7 +750,7 @@ export async function runPostUnitVerification(vctx, pauseAuto) {
  * Write verification evidence JSON with post-execution checks included.
  * This is a variant of writeVerificationJSON that adds the postExecutionChecks field.
  */
-function writeVerificationJSONWithPostExec(result, tasksDir, taskId, unitId, postExecutionChecks, retryAttempt, maxRetries) {
+function writeVerificationJSONWithPostExec(result, tasksDir, taskId, unitId, postExecutionChecks, retryAttempt, maxRetries, sliceId) {
     mkdirSync(tasksDir, { recursive: true });
     const evidence = {
         schemaVersion: 1,
@@ -774,6 +786,7 @@ function writeVerificationJSONWithPostExec(result, tasksDir, taskId, unitId, pos
             fixAvailable: w.fixAvailable,
         }));
     }
-    const filePath = join(tasksDir, `${taskId}-VERIFY.json`);
+    const fileName = sliceId ? `${sliceId}-${taskId}-VERIFY.json` : `${taskId}-VERIFY.json`;
+    const filePath = join(tasksDir, fileName);
     writeFileSync(filePath, JSON.stringify(evidence, null, 2) + "\n", "utf-8");
 }

package/dist/resources/extensions/gsd/bootstrap/write-gate.js

@@ -5,7 +5,7 @@ import { minimatch } from "minimatch";
 import { GSD_PHASE_SCOPE_DISPLAY_REASON, shouldBlockAutoUnitToolCall } from "../auto-unit-tool-scope.js";
 import { canonicalToolName } from "../engine-hook-contract.js";
 import { loadJsonFileOrNull } from "../json-persistence.js";
-import { getIsolationMode } from "../preferences.js";
+import { getIsolationMode, loadEffectiveGSDPreferences } from "../preferences.js";
 import { compileSubagentPermissionContract } from "../unit-context-manifest.js";
 import { allowedPlanningDispatchAgentsList, isReadOnlyPlanningDispatchAgent, } from "../planning-subagent-registry.js";
 import { logWarning } from "../workflow-logger.js";
@@ -1118,6 +1118,7 @@ export function shouldBlockPlanningUnit(toolName, pathOrCommand, basePath, unitT
             const dispatchContract = compileSubagentPermissionContract(policy);
             const allowedSubagents = dispatchContract.allowedSubagents;
             const allowed = new Set(allowedSubagents);
+            const planningSubagentRegistry = loadEffectiveGSDPreferences(basePath)?.preferences.planning_subagent_registry;
             // When agentClasses is undefined, the caller has not been updated to extract
             // agent identities yet. Block and warn so stale callers surface in telemetry
             // instead of silently bypassing the gate.
@@ -1131,9 +1132,9 @@ export function shouldBlockPlanningUnit(toolName, pathOrCommand, basePath, unitT
             if (requested.length === 0) {
                 return { block: false };
             }
-            const globallyDisallowed = requested.find(a => !isReadOnlyPlanningDispatchAgent(a));
+            const globallyDisallowed = requested.find(a => !isReadOnlyPlanningDispatchAgent(a, planningSubagentRegistry));
             if (globallyDisallowed) {
-                return planningBlock(unitType, policy.mode, `subagent dispatch of "${globallyDisallowed}" not permitted; only read-only specialists (${allowedPlanningDispatchAgentsList()}) may be dispatched from ${policy.mode} units`);
+                return planningBlock(unitType, policy.mode, `subagent dispatch of "${globallyDisallowed}" not permitted; only read-only specialists (${allowedPlanningDispatchAgentsList(planningSubagentRegistry)}) may be dispatched from ${policy.mode} units`);
             }
             const disallowedByPolicy = requested.find(a => !allowed.has(a));
             if (disallowedByPolicy) {

package/dist/resources/extensions/gsd/db/engine.js

@@ -18,7 +18,8 @@ import { createBaseSchemaObjects } from "../db-base-schema.js";
 import { createCoordinationTablesV24 } from "../db-coordination-schema.js";
 import { createDbConnectionCache } from "../db-connection-cache.js";
 import { backupDatabaseBeforeMigration, isMigrationBackupError } from "../db-migration-backup.js";
-import { applyMigrationV2Artifacts, applyMigrationV3Memories, applyMigrationV4DecisionMadeBy, applyMigrationV5HierarchyTables, applyMigrationV6SliceSummaries, applyMigrationV7Dependencies, applyMigrationV8PlanningFields, applyMigrationV9Ordering, applyMigrationV10ReplanTrigger, applyMigrationV11TaskPlanning, applyMigrationV12QualityGates, applyMigrationV13HotPathIndexes, applyMigrationV14SliceDependencies, applyMigrationV15AuditTables, applyMigrationV16EscalationSource, applyMigrationV17TaskEscalation, applyMigrationV18MemorySources, applyMigrationV19MemoryFts, applyMigrationV20MemoryRelations, applyMigrationV21StructuredMemories, applyMigrationV22QualityGateRepair, applyMigrationV23MilestoneQueue, applyMigrationV26MilestoneCommitAttributions, applyMigrationV27ArtifactHash, applyMigrationV28MemoryLastHitAt, applyMigrationV29RepositoryTargets, applyMigrationV30ReworkBriefs, } from "../db-migration-steps.js";
+import { applyMigrationV2Artifacts, applyMigrationV3Memories, applyMigrationV4DecisionMadeBy, applyMigrationV5HierarchyTables, applyMigrationV6SliceSummaries, applyMigrationV7Dependencies, applyMigrationV8PlanningFields, applyMigrationV9Ordering, applyMigrationV10ReplanTrigger, applyMigrationV11TaskPlanning, applyMigrationV12QualityGates, applyMigrationV13HotPathIndexes, applyMigrationV14SliceDependencies, applyMigrationV15AuditTables, applyMigrationV16EscalationSource, applyMigrationV17TaskEscalation, applyMigrationV18MemorySources, applyMigrationV19MemoryFts, applyMigrationV20MemoryRelations, applyMigrationV21StructuredMemories, applyMigrationV22QualityGateRepair, applyMigrationV23MilestoneQueue, applyMigrationV26MilestoneCommitAttributions, applyMigrationV27ArtifactHash, applyMigrationV28MemoryLastHitAt, applyMigrationV29RepositoryTargets, applyMigrationV30ReworkBriefs, applyMigrationV31CanonicalFoundation, } from "../db-migration-steps.js";
+import { createCanonicalFoundationSchemaV31 } from "../db-canonical-foundation-schema.js";
 import { isMemoriesFtsAvailableSchema, rebuildMemoriesFtsSchemaOnce, tryCreateMemoriesFtsSchema, } from "../db-memory-fts-schema.js";
 import { createDbOpenState } from "../db-open-state.js";
 import { createRuntimeKvTableV25 } from "../db-runtime-kv-schema.js";
@@ -58,7 +59,7 @@ const providerLoader = createSqliteProviderLoader({
     nodeVersion: process.versions.node,
     writeStderr: (message) => process.stderr.write(message),
 });
-export const SCHEMA_VERSION = 30;
+export const SCHEMA_VERSION = 31;
 function initSchema(db, fileBacked, dbPath) {
     const conservativeFilePragmas = fileBacked && _isLikelyWslDrvFsPathForTest(dbPath);
     if (fileBacked)
@@ -104,6 +105,7 @@ function initSchema(db, fileBacked, dbPath) {
             else {
                 createCoordinationTablesV24(db);
                 createRuntimeKvTableV25(db);
+                createCanonicalFoundationSchemaV31(db);
                 // Fresh install — all tables are created above with the full current schema,
                 // so it is safe to create all migration-specific indexes here.  For existing
                 // databases these indexes are created inside the individual migration guards
@@ -318,6 +320,10 @@ function migrateSchema(db, dbPath) {
             applyMigrationV30ReworkBriefs(db);
             recordSchemaVersion(db, 30);
         }
+        if (currentVersion < 31) {
+            applyMigrationV31CanonicalFoundation(db);
+            recordSchemaVersion(db, 31);
+        }
         if (_migrationFaultForTest)
             throw new Error("migration fault injected for test");
         db.exec("COMMIT");

package/dist/resources/extensions/gsd/db-canonical-foundation-schema.js

@@ -0,0 +1,120 @@
+// Project/App: gsd-pi
+// File Purpose: Additive v31 authority, operation provenance, domain event, and outbox schema.
+/**
+ * v31 mapping:
+ * - schema_version remains DDL compatibility, not the domain revision.
+ * - audit_events remains optional operational telemetry, not domain history.
+ * - milestone_commit_attributions remains Git-specific, not operation provenance.
+ * - command_queue and runtime_kv remain coordination/cache surfaces, not an outbox.
+ */
+export function createCanonicalFoundationSchemaV31(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS project_authority (
+      singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+      project_id TEXT NOT NULL UNIQUE,
+      project_root_realpath TEXT NOT NULL DEFAULT '',
+      revision INTEGER NOT NULL DEFAULT 0 CHECK (revision >= 0),
+      authority_epoch INTEGER NOT NULL DEFAULT 0 CHECK (authority_epoch >= 0),
+      created_at TEXT NOT NULL DEFAULT '',
+      updated_at TEXT NOT NULL DEFAULT ''
+    )
+  `);
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS workflow_operations (
+      operation_id TEXT PRIMARY KEY,
+      project_id TEXT NOT NULL,
+      operation_type TEXT NOT NULL,
+      idempotency_key TEXT NOT NULL,
+      expected_revision INTEGER NOT NULL CHECK (expected_revision >= 0),
+      resulting_revision INTEGER NOT NULL CHECK (resulting_revision = expected_revision + 1),
+      expected_authority_epoch INTEGER NOT NULL CHECK (expected_authority_epoch >= 0),
+      resulting_authority_epoch INTEGER NOT NULL CHECK (
+        resulting_authority_epoch = expected_authority_epoch OR
+        resulting_authority_epoch = expected_authority_epoch + 1
+      ),
+      actor_type TEXT NOT NULL,
+      actor_id TEXT DEFAULT NULL,
+      source_transport TEXT NOT NULL,
+      trace_id TEXT DEFAULT NULL,
+      turn_id TEXT DEFAULT NULL,
+      request_hash TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      UNIQUE (project_id, idempotency_key),
+      UNIQUE (project_id, resulting_revision),
+      UNIQUE (operation_id, project_id, resulting_revision, resulting_authority_epoch),
+      FOREIGN KEY (project_id) REFERENCES project_authority(project_id)
+    )
+  `);
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS workflow_domain_events (
+      event_id TEXT PRIMARY KEY,
+      operation_id TEXT NOT NULL,
+      event_index INTEGER NOT NULL DEFAULT 0 CHECK (event_index >= 0),
+      project_id TEXT NOT NULL,
+      project_revision INTEGER NOT NULL CHECK (project_revision > 0),
+      authority_epoch INTEGER NOT NULL CHECK (authority_epoch >= 0),
+      event_type TEXT NOT NULL,
+      entity_type TEXT NOT NULL,
+      entity_id TEXT NOT NULL,
+      caused_by_event_id TEXT DEFAULT NULL,
+      payload_json TEXT NOT NULL DEFAULT '{}',
+      created_at TEXT NOT NULL,
+      UNIQUE (operation_id, event_index),
+      FOREIGN KEY (operation_id, project_id, project_revision, authority_epoch)
+        REFERENCES workflow_operations(
+          operation_id, project_id, resulting_revision, resulting_authority_epoch
+        ),
+      FOREIGN KEY (caused_by_event_id) REFERENCES workflow_domain_events(event_id)
+    )
+  `);
+    db.exec(`
+    CREATE TRIGGER IF NOT EXISTS trg_workflow_domain_events_immutable_update
+    BEFORE UPDATE ON workflow_domain_events
+    BEGIN
+      SELECT RAISE(ABORT, 'workflow domain events are immutable');
+    END
+  `);
+    db.exec(`
+    CREATE TRIGGER IF NOT EXISTS trg_workflow_domain_events_immutable_delete
+    BEFORE DELETE ON workflow_domain_events
+    BEGIN
+      SELECT RAISE(ABORT, 'workflow domain events are immutable');
+    END
+  `);
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS workflow_outbox (
+      outbox_id INTEGER PRIMARY KEY AUTOINCREMENT,
+      event_id TEXT NOT NULL,
+      destination TEXT NOT NULL,
+      available_at TEXT NOT NULL DEFAULT '',
+      attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+      claimed_by TEXT DEFAULT NULL,
+      claim_expires_at TEXT DEFAULT NULL,
+      delivered_at TEXT DEFAULT NULL,
+      last_error TEXT DEFAULT NULL,
+      UNIQUE (event_id, destination),
+      FOREIGN KEY (event_id) REFERENCES workflow_domain_events(event_id)
+    )
+  `);
+    db.exec(`
+    CREATE INDEX IF NOT EXISTS idx_workflow_operations_created
+    ON workflow_operations(project_id, created_at, operation_id)
+  `);
+    db.exec(`
+    CREATE INDEX IF NOT EXISTS idx_workflow_domain_events_entity
+    ON workflow_domain_events(project_id, entity_type, entity_id, project_revision, event_index)
+  `);
+    db.exec(`
+    CREATE INDEX IF NOT EXISTS idx_workflow_outbox_pending
+    ON workflow_outbox(delivered_at, available_at, outbox_id)
+  `);
+    db.exec(`
+    INSERT OR IGNORE INTO project_authority (
+      singleton, project_id, project_root_realpath,
+      revision, authority_epoch, created_at, updated_at
+    ) VALUES (
+      1, lower(hex(randomblob(16))), '',
+      0, 0, '', ''
+    )
+  `);
+}

package/dist/resources/extensions/gsd/db-migration-steps.js

@@ -1,5 +1,6 @@
 // Project/App: gsd-pi
 // File Purpose: Schema migration DDL steps for the GSD database facade.
+import { createCanonicalFoundationSchemaV31 } from "./db-canonical-foundation-schema.js";
 import { ensureColumn } from "./db-schema-metadata.js";
 export function applyMigrationV2Artifacts(db) {
     db.exec(`
@@ -448,3 +449,6 @@ export function applyMigrationV30ReworkBriefs(db) {
     db.exec("CREATE INDEX IF NOT EXISTS idx_rework_briefs_task ON rework_briefs(milestone_id, slice_id, task_id)");
     db.exec("CREATE INDEX IF NOT EXISTS idx_rework_findings_status ON rework_brief_findings(brief_id, severity, status)");
 }
+export function applyMigrationV31CanonicalFoundation(db) {
+    createCanonicalFoundationSchemaV31(db);
+}

package/dist/resources/extensions/gsd/docs/preferences-reference.md

@@ -124,11 +124,11 @@ Diagnostics record the file path, scope (global/project), severity (error/warnin
   - `validation` — used for gate evaluation, roadmap reassessment, milestone validation, and doc rewrites. Falls back to `planning` if unset.
   - `uat` — used for UAT runs. Falls back to `completion` if unset.
 
-- `thinking`: per-phase reasoning effort (ADR-026), separate from `models`. Same phase keys as `models`. Values: `off`, `minimal`, `low`, `medium`, `high`, `xhigh`. Thinking travels with the model — model choice and reasoning effort are independent controls, so you can run one model across phases at different reasoning levels.
+- `thinking`: per-phase reasoning effort (ADR-026), separate from `models`. Same phase keys as `models`. Values: `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`. Thinking travels with the model — model choice and reasoning effort are independent controls, so you can run one model across phases at different reasoning levels.
   - Two equivalent ways to set it: inline as `models.<phase>.thinking`, or as a separate `thinking:` block keyed by phase. For the same phase, the inline value wins over the block; project preferences win over global; a phase that's unset inherits via the same sibling chain as `models` (e.g. `discuss → planning`).
   - If no thinking is configured for a phase, the session level (set via `/model`) is used, exactly as before — this is fully backward-compatible.
   - `execute-task` (code-writing) has a measured reasoning floor of `medium`: at lower levels models stop planning edits and thrash on file re-reads. The floor applies to the session/default path. An **explicit** `execution` thinking level bypasses the floor and is honored verbatim (with a one-time advisory) — set `execution: low` deliberately if you want it.
-  - Levels a model can't support are clamped to the nearest supported level at dispatch and never sent to the provider, so a model/level mismatch never fails a unit mid-run. `xhigh` support is model-dependent; current examples include OpenAI Codex Max models and Claude Sonnet 5 on Amazon Bedrock.
+  - Levels a model can't support are clamped to the nearest supported level at dispatch and never sent to the provider, so a model/level mismatch never fails a unit mid-run. `xhigh` and `max` support are model-dependent; current examples include `gpt-5.6-sol`, `gpt-5.6-terra`, and `gpt-5.6-luna`, which advertise both.
 
 - `skill_staleness_days`: number — skills unused for this many days get deprioritized during discovery. Set to `0` to disable staleness tracking. Default: `60`.
 
@@ -357,24 +357,33 @@ In `"parent"` mode, slice/task `targetRepositories` default to the declared chil
   - `"replace"` requires `prompt`.
   - `"skip"` is valid with no additional fields.
 
+- `planning_subagent_registry`: object — optional classification for custom planning agents. Each key is an agent id and must set:
+  - `read_only_specialist`: boolean — set to `true` to classify the custom agent as safe for planning dispatch.
+
 - `planning_subagents`: object — project-local widening for read-only planning subagent dispatch. Supported unit keys are `plan-milestone` and `plan-slice`; each has:
   - `allowed`: string[] — additional planning-safe agents for that unit.
 
-  Agents must already be classified by GSD as read-only planning specialists: `mnemo`, `scout`, `planner`, `reviewer`, `security`, or `tester`. The write gate still blocks source writes outside `.gsd/**`, unrestricted bash, stale subagent calls without agent identities, agents outside the global read-only registry, and agents not listed for the active unit.
+  Agents must be built-in read-only planning specialists (`mnemo`, `scout`, `planner`, `reviewer`, `security`, or `tester`) or registered in `planning_subagent_registry` with `read_only_specialist: true`. The write gate still blocks source writes outside `.gsd/**`, unrestricted bash, stale subagent calls without agent identities, agents outside the read-only registry, and agents not listed for the active unit.
 
   Example:
 
   ```yaml
+  planning_subagent_registry:
+    my-custom-planner:
+      read_only_specialist: true
+
   planning_subagents:
     plan-milestone:
       allowed:
         - scout
         - planner
+        - my-custom-planner
         - security
     plan-slice:
       allowed:
         - scout
         - planner
+        - my-custom-planner
         - reviewer
         - security
   ```

package/dist/resources/extensions/gsd/doctor-engine-checks.js

@@ -13,6 +13,7 @@ import { parseRoadmapSlices } from "./roadmap-slices.js";
 import { parsePlan } from "./parsers-legacy.js";
 import { parseSummary } from "./files.js";
 import { LAYOUT_SEGMENTS } from "./layout-policy.js";
+import { resolveCanonicalMilestoneRoot } from "./worktree-manager.js";
 const USER_AUTHORED_ARTIFACT_TYPES = new Set(["CONTEXT", "RESEARCH"]);
 function escapeRegExp(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -77,7 +78,8 @@ function checkboxDbStatusMilestoneIds(basePath, milestoneIds) {
 }
 function checkProjectionCheckboxDbStatus(basePath, milestoneIds, issues) {
     for (const milestoneId of milestoneIds) {
-        const roadmapPath = resolveMilestoneFile(basePath, milestoneId, "ROADMAP");
+        const artifactBasePath = resolveCanonicalMilestoneRoot(basePath, milestoneId);
+        const roadmapPath = resolveMilestoneFile(artifactBasePath, milestoneId, "ROADMAP");
         const slices = getMilestoneSlices(milestoneId);
         if (roadmapPath && existsSync(roadmapPath)) {
             try {
@@ -95,7 +97,7 @@ function checkProjectionCheckboxDbStatus(basePath, milestoneIds, issues) {
             }
         }
         for (const slice of slices) {
-            const planPath = resolveSliceFile(basePath, milestoneId, slice.id, "PLAN");
+            const planPath = resolveSliceFile(artifactBasePath, milestoneId, slice.id, "PLAN");
             if (!planPath || !existsSync(planPath))
                 continue;
             try {
@@ -134,7 +136,7 @@ function isClearedByMilestoneShellProjectionFlush(basePath, issue, reRenderedMil
 function artifactExistsOnDisk(basePath, artifactPath, row) {
     return resolveArtifactDiskPath(basePath, artifactPath, row) !== null;
 }
-function resolveLiteralArtifactDiskPath(basePath, artifactPath) {
+function resolveLiteralArtifactDiskPath(basePath, artifactPath, row) {
     const relativeArtifactPath = artifactPathRelativeToGsd(artifactPath);
     if (isAbsolute(relativeArtifactPath)) {
         return existsSync(relativeArtifactPath) ? relativeArtifactPath : null;
@@ -144,6 +146,16 @@ function resolveLiteralArtifactDiskPath(basePath, artifactPath) {
         if (isPathInside(root, candidate) && existsSync(candidate))
             return candidate;
     }
+    if (row?.milestone_id) {
+        const artifactBasePath = resolveCanonicalMilestoneRoot(basePath, row.milestone_id);
+        if (artifactBasePath !== basePath) {
+            for (const root of [gsdProjectionRoot(artifactBasePath), gsdRoot(artifactBasePath)]) {
+                const candidate = join(root, relativeArtifactPath);
+                if (isPathInside(root, candidate) && existsSync(candidate))
+                    return candidate;
+            }
+        }
+    }
     return null;
 }
 function relativeToGsdRoot(basePath, diskPath) {
@@ -183,7 +195,7 @@ function resolveArtifactDiskPath(basePath, artifactPath, row) {
         if (flatPath)
             return flatPath;
     }
-    return resolveLiteralArtifactDiskPath(basePath, artifactPath);
+    return resolveLiteralArtifactDiskPath(basePath, artifactPath, row);
 }
 function taskExistsInPlan(basePath, milestoneId, sliceId, taskId) {
     const planPath = resolveSliceFile(basePath, milestoneId, sliceId, "PLAN");

package/dist/resources/extensions/gsd/model-cost-table.js

@@ -48,8 +48,9 @@ export const BUNDLED_COST_TABLE = [
     // GPT-5.5 API list price, also used for live Codex OAuth routing.
     // Source: https://openai.com/api/pricing/
     { id: "gpt-5.5", inputPer1k: 0.005, outputPer1k: 0.03, updatedAt: "2026-04-23" },
-    // Mirrors gpt-5.5 list pricing until OpenAI publishes official gpt-5.6 pricing.
-    { id: "gpt-5.6", inputPer1k: 0.005, outputPer1k: 0.03, updatedAt: "2026-07-08" },
+    { id: "gpt-5.6-sol", inputPer1k: 0.005, outputPer1k: 0.03, tiers: [{ inputTokensAbove: 272000, inputPer1k: 0.01, outputPer1k: 0.045 }], updatedAt: "2026-07-11" },
+    { id: "gpt-5.6-terra", inputPer1k: 0.0025, outputPer1k: 0.015, tiers: [{ inputTokensAbove: 272000, inputPer1k: 0.005, outputPer1k: 0.0225 }], updatedAt: "2026-07-11" },
+    { id: "gpt-5.6-luna", inputPer1k: 0.001, outputPer1k: 0.006, tiers: [{ inputTokensAbove: 272000, inputPer1k: 0.002, outputPer1k: 0.009 }], updatedAt: "2026-07-11" },
     // Google
     { id: "gemini-2.0-flash", inputPer1k: 0.0001, outputPer1k: 0.0004, updatedAt: "2025-03-15" },
     { id: "gemini-flash-2.0", inputPer1k: 0.0001, outputPer1k: 0.0004, updatedAt: "2025-03-15" },
@@ -63,7 +64,9 @@ export const BUNDLED_COST_TABLE = [
 export function lookupModelCost(modelId) {
     const bareId = modelId.includes("/") ? modelId.split("/").pop() : modelId;
     return BUNDLED_COST_TABLE.find(e => e.id === bareId)
-        ?? BUNDLED_COST_TABLE.find(e => bareId.includes(e.id) || e.id.includes(bareId));
+        ?? BUNDLED_COST_TABLE.find(e => bareId.startsWith(`${e.id}-`) ||
+            bareId.startsWith(`${e.id}:`) ||
+            bareId.startsWith(`${e.id}@`));
 }
 /**
  * Compare two models by input cost. Returns negative if a is cheaper.

package/dist/resources/extensions/gsd/model-router.js

@@ -46,7 +46,9 @@ export const MODEL_CAPABILITY_TIER = {
     "gpt-5.3-codex": "heavy",
     "gpt-5.4": "heavy",
     "gpt-5.5": "heavy",
-    "gpt-5.6": "heavy",
+    "gpt-5.6-sol": "heavy",
+    "gpt-5.6-terra": "heavy",
+    "gpt-5.6-luna": "heavy",
     "o1": "heavy",
     "o3": "heavy",
     "o4-mini": "heavy",
@@ -84,7 +86,9 @@ const MODEL_COST_PER_1K_INPUT = {
     "gpt-5.3-codex-spark": 0.0003,
     "gpt-5.4": 0.005,
     "gpt-5.5": 0.005,
-    "gpt-5.6": 0.005,
+    "gpt-5.6-sol": 0.005,
+    "gpt-5.6-terra": 0.0025,
+    "gpt-5.6-luna": 0.001,
     "o4-mini": 0.005,
     "o4-mini-deep-research": 0.005,
     "gemini-2.0-flash": 0.0001,
@@ -132,9 +136,10 @@ export const MODEL_CAPABILITY_PROFILES = {
     // OpenAI's 2026-04-23 published eval deltas across coding, tool use, and long context.
     // Source: https://openai.com/index/introducing-gpt-5-5/
     "gpt-5.5": { coding: 96, debugging: 93, research: 89, reasoning: 95, speed: 42, longContext: 90, instruction: 93 },
-    // GPT-5.6 profile is provisional: a small uniform step over gpt-5.5, to be
-    // recalibrated once OpenAI publishes official eval results.
-    "gpt-5.6": { coding: 97, debugging: 94, research: 90, reasoning: 96, speed: 42, longContext: 91, instruction: 94 },
+    // GPT-5.6 profiles are provisional until official eval results are available.
+    "gpt-5.6-sol": { coding: 97, debugging: 94, research: 90, reasoning: 96, speed: 42, longContext: 91, instruction: 94 },
+    "gpt-5.6-terra": { coding: 96, debugging: 93, research: 89, reasoning: 95, speed: 48, longContext: 91, instruction: 93 },
+    "gpt-5.6-luna": { coding: 92, debugging: 88, research: 84, reasoning: 91, speed: 72, longContext: 91, instruction: 90 },
     // ── OpenAI o-series (reasoning-first) ──────────────────────────────────────
     "o1": { coding: 78, debugging: 82, research: 78, reasoning: 90, speed: 20, longContext: 65, instruction: 82 },
     "o3": { coding: 80, debugging: 85, research: 80, reasoning: 92, speed: 25, longContext: 70, instruction: 85 },

package/dist/resources/extensions/gsd/planning-subagent-registry.js

@@ -16,10 +16,18 @@ const PLANNING_DISPATCH_AGENT_REGISTRY = {
 export const ALLOWED_PLANNING_DISPATCH_AGENTS = new Set(Object.entries(PLANNING_DISPATCH_AGENT_REGISTRY)
     .filter(([, metadata]) => metadata.readOnlySpecialist)
     .map(([agentId]) => agentId));
-export function isReadOnlyPlanningDispatchAgent(agentId) {
+function configuredPlanningDispatchAgents(registry) {
+    return Object.entries(registry ?? {})
+        .filter(([, metadata]) => metadata.read_only_specialist === true)
+        .map(([agentId]) => agentId);
+}
+export function isReadOnlyPlanningDispatchAgent(agentId, registry) {
     const metadata = PLANNING_DISPATCH_AGENT_REGISTRY[agentId];
-    return metadata?.readOnlySpecialist === true;
+    return metadata?.readOnlySpecialist === true || registry?.[agentId]?.read_only_specialist === true;
 }
-export function allowedPlanningDispatchAgentsList() {
-    return [...ALLOWED_PLANNING_DISPATCH_AGENTS].join(", ");
+export function allowedPlanningDispatchAgentsList(registry) {
+    return Array.from(new Set([
+        ...ALLOWED_PLANNING_DISPATCH_AGENTS,
+        ...configuredPlanningDispatchAgents(registry),
+    ])).join(", ");
 }