@opengsd/gsd-pi 1.8.1-dev.897b3c90 → 1.9.0-dev.5c1a3ff2

package/dist/resources/extensions/gsd/preferences-validation.js

@@ -9,7 +9,8 @@ import { isAbsolute } from "node:path";
 import { VALID_BRANCH_NAME } from "./git-service.js";
 import { normalizeStringArray } from "../shared/format-utils.js";
 import { getGateIdsForTurn } from "./gate-registry.js";
-import { KNOWN_PREFERENCE_KEYS, KNOWN_UNIT_LABELS, GSD_MODEL_PHASE_KEYS, SKILL_ACTIONS, } from "./preferences-types.js";
+import { KNOWN_PREFERENCE_KEYS, KNOWN_UNIT_LABELS, CONFIGURABLE_PLANNING_SUBAGENT_UNITS, GSD_MODEL_PHASE_KEYS, SKILL_ACTIONS, } from "./preferences-types.js";
+import { ALLOWED_PLANNING_DISPATCH_AGENTS, allowedPlanningDispatchAgentsList, } from "./planning-subagent-registry.js";
 const VALID_TOKEN_PROFILES = new Set(["budget", "balanced", "quality", "burn-max"]);
 const VALID_THINKING_LEVELS = new Set([
     "off",
@@ -727,6 +728,52 @@ export function validatePreferences(preferences) {
             validated.pre_dispatch_hooks = validPreHooks;
         }
     }
+    // ─── Planning Subagents ─────────────────────────────────────────────────
+    if (preferences.planning_subagents !== undefined) {
+        if (!preferences.planning_subagents ||
+            typeof preferences.planning_subagents !== "object" ||
+            Array.isArray(preferences.planning_subagents)) {
+            errors.push("planning_subagents must be an object keyed by planning unit type");
+        }
+        else {
+            const validUnits = new Set(CONFIGURABLE_PLANNING_SUBAGENT_UNITS);
+            const validPlanningSubagents = {};
+            for (const [unitType, rawConfig] of Object.entries(preferences.planning_subagents)) {
+                if (!validUnits.has(unitType)) {
+                    errors.push(`planning_subagents unknown or unsupported unit "${unitType}" — supported units: ` +
+                        `${CONFIGURABLE_PLANNING_SUBAGENT_UNITS.join(", ")}`);
+                    continue;
+                }
+                if (!rawConfig || typeof rawConfig !== "object" || Array.isArray(rawConfig)) {
+                    errors.push(`planning_subagents.${unitType} must be an object with an allowed array`);
+                    continue;
+                }
+                const allowed = normalizeStringArray(rawConfig.allowed);
+                if (allowed.length === 0) {
+                    errors.push(`planning_subagents.${unitType}.allowed must include at least one read-only planning specialist`);
+                    continue;
+                }
+                const sanitizedAllowed = [];
+                for (const agentId of allowed) {
+                    if (!ALLOWED_PLANNING_DISPATCH_AGENTS.has(agentId)) {
+                        errors.push(`planning_subagents.${unitType}.allowed includes "${agentId}", which is not classified as a ` +
+                            `read-only planning specialist. Allowed agents: ${allowedPlanningDispatchAgentsList()}`);
+                        continue;
+                    }
+                    sanitizedAllowed.push(agentId);
+                }
+                const dedupedAllowed = Array.from(new Set(sanitizedAllowed));
+                if (dedupedAllowed.length > 0) {
+                    validPlanningSubagents[unitType] = {
+                        allowed: dedupedAllowed,
+                    };
+                }
+            }
+            if (Object.keys(validPlanningSubagents).length > 0) {
+                validated.planning_subagents = validPlanningSubagents;
+            }
+        }
+    }
     // ─── Dynamic Routing ─────────────────────────────────────────────────
     if (preferences.dynamic_routing !== undefined) {
         if (typeof preferences.dynamic_routing === "object" && preferences.dynamic_routing !== null) {

package/dist/resources/extensions/gsd/preferences.js

@@ -635,6 +635,7 @@ function mergePreferences(base, override) {
             : undefined,
         post_unit_hooks: mergePostUnitHooks(base.post_unit_hooks, override.post_unit_hooks),
         pre_dispatch_hooks: mergePreDispatchHooks(base.pre_dispatch_hooks, override.pre_dispatch_hooks),
+        planning_subagents: mergePlanningSubagents(base.planning_subagents, override.planning_subagents),
         dynamic_routing: (base.dynamic_routing || override.dynamic_routing)
             ? { ...(base.dynamic_routing ?? {}), ...(override.dynamic_routing ?? {}) }
             : undefined,
@@ -752,6 +753,22 @@ function mergePreDispatchHooks(base, override) {
     }
     return merged.length > 0 ? merged : undefined;
 }
+function mergePlanningSubagents(base, override) {
+    if (!base && !override)
+        return undefined;
+    const merged = {};
+    const unitTypes = new Set([
+        ...Object.keys(base ?? {}),
+        ...Object.keys(override ?? {}),
+    ]);
+    for (const unitType of unitTypes) {
+        const allowed = mergeStringLists(base?.[unitType]?.allowed, override?.[unitType]?.allowed);
+        if (allowed?.length) {
+            merged[unitType] = { allowed };
+        }
+    }
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
 // ─── System Prompt Rendering ──────────────────────────────────────────────────
 export function renderPreferencesForSystemPrompt(preferences, resolutions, options) {
     const validated = validatePreferences(preferences);

package/dist/resources/extensions/gsd/provider-payload-policy.js

@@ -2,12 +2,14 @@
  * Provider Payload Policy - ordered shaping of provider request payloads.
  *
  * The order is intentional:
- * 1. observation budgeting masks old tool results in auto-mode,
- * 2. display truncation caps tool-result text for every mode,
- * 3. the protected Source Context Block is appended after truncation,
- * 4. supported models receive the configured service tier.
+ * 1. superseded GSD context injections (memory/guided/forensics) are removed,
+ *    keeping only the latest, for every mode,
+ * 2. observation budgeting masks old tool results in auto-mode,
+ * 3. display truncation caps tool-result text for every mode,
+ * 4. the protected Source Context Block is appended after truncation,
+ * 5. supported models receive the configured service tier.
  */
-import { createObservationMask, createResponsesInputObservationMask, truncateContextResultMessages, truncateResponsesInputResultItems, } from "./context-masker.js";
+import { createObservationMask, createResponsesInputObservationMask, filterSupersededContextInjections, filterSupersededResponsesContextInjections, truncateContextResultMessages, truncateResponsesInputResultItems, } from "./context-masker.js";
 import { getSourceObservationStore, isAutoActive } from "./auto-runtime-state.js";
 import { loadEffectiveGSDPreferences } from "./preferences.js";
 import { getEffectiveServiceTier, supportsServiceTier } from "./service-tier.js";
@@ -42,9 +44,18 @@ export function applyProviderPayloadPolicy({ payload, modelId, deps: overrides,
 }
 function applyContextManagement(payload, deps) {
     const config = deps.loadContextManagementConfig();
+    applyContextInjectionFilter(payload);
     applyObservationBudget(payload, config, deps.isAutoActive());
     applyDisplayTruncation(payload, config);
 }
+function applyContextInjectionFilter(payload) {
+    if (Array.isArray(payload.messages)) {
+        payload.messages = filterSupersededContextInjections(payload.messages);
+    }
+    if (Array.isArray(payload.input)) {
+        payload.input = filterSupersededResponsesContextInjections(payload.input);
+    }
+}
 function applyObservationBudget(payload, config, autoActive) {
     if (!autoActive || config?.observation_masking === false)
         return;

package/dist/resources/extensions/gsd/safety/destructive-guard.js

@@ -6,7 +6,7 @@
  * Copyright (c) 2026 Jeremy McSpadden <jeremy@fluxlabs.net>
  */
 const DESTRUCTIVE_PATTERNS = [
-    { pattern: /\brm\s+(-[^\s]*[rfRF][^\s]*\s+|.*\s+-[^\s]*[rfRF])/, label: "recursive delete" },
+    { pattern: /\brm\s+((?:-(?!-)[^\s]*[rR][^\s]*|--recursive)\s+|.*\s+(?:-(?!-)[^\s]*[rR][^\s]*|--recursive)(?:\s|$))/, label: "recursive delete" },
     { pattern: /\bgit\s+push\s+.*--force/, label: "force push" },
     { pattern: /\bgit\s+push\s+-f\b/, label: "force push" },
     { pattern: /\bgit\s+reset\s+--hard/, label: "hard reset" },

package/dist/resources/extensions/gsd/skill-activation.js

@@ -104,11 +104,24 @@ function resolvePreferredSkillNames(prefs, visibleSkills, contextTokens, base) {
 /** Skill names must be lowercase alphanumeric with hyphens — reject anything else
  *  to prevent prompt injection via crafted directory names. */
 const SAFE_SKILL_NAME = /^[a-z0-9][a-z0-9-]*$/;
-function formatSkillActivationBlock(skillNames) {
+function escapeXml(str) {
+    return str
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+function formatSkillActivationBlock(skillNames, skillPaths) {
     const safe = skillNames.filter(name => SAFE_SKILL_NAME.test(name));
     if (safe.length === 0)
         return "";
-    const reads = safe.map(name => `Read the installed '${name}' skill file from <available_skills>`).join(". ");
+    const reads = safe.map(name => {
+        const path = skillPaths.get(name);
+        if (path)
+            return `Read the skill file at \`${escapeXml(path)}\``;
+        return `Find '${name}' in <available_skills>, copy its <location> value, and pass that exact path to read`;
+    }).join(". ");
     return `<skill_activation>${reads}.</skill_activation>`;
 }
 /**
@@ -149,6 +162,7 @@ export function buildSkillActivationBlock(params) {
     const visibleSkills = loaded;
     const manifestScopedSkills = filterSkillsByManifest(visibleSkills, params.unitType);
     const installedNames = new Set(visibleSkills.map(skill => normalizeSkillReference(skill.name)));
+    const installedSkillPaths = new Map(visibleSkills.map(skill => [normalizeSkillReference(skill.name), skill.filePath]));
     warnIfManifestHasMissingSkills(params.unitType, installedNames);
     const avoided = new Set(resolvePreferenceSkillNames(prefs?.avoid_skills ?? [], params.base));
     const matched = new Set();
@@ -196,7 +210,7 @@ export function buildSkillActivationBlock(params) {
     const ordered = [...matched]
         .filter(name => installedNames.has(name) && !avoided.has(name))
         .sort();
-    const activationBlock = formatSkillActivationBlock(ordered);
+    const activationBlock = formatSkillActivationBlock(ordered, installedSkillPaths);
     // Omit recommendations when the system catalog is manifest-scoped for this
     // unit — skill names are already listed in <available_skills>.
     let recommendationsBlock = "";

package/dist/resources/extensions/gsd/templates/PREFERENCES.md

@@ -92,6 +92,11 @@ remote_questions:
 uat_dispatch:
 post_unit_hooks: []
 pre_dispatch_hooks: []
+# planning_subagents:
+#   plan-milestone:
+#     allowed: [scout, planner, security]
+#   plan-slice:
+#     allowed: [scout, planner, reviewer, security]
 # language:
 # experimental:
 #   rtk: false

package/dist/resources/extensions/gsd/tools/complete-task.js

@@ -15,7 +15,7 @@ import { isClosedStatus } from "../status-guards.js";
 import { transaction, insertMilestone, insertSlice, insertTask, insertVerificationEvidence, getMilestone, getSlice, getTask, updateTaskStatus, deleteVerificationEvidence, saveGateResult, getPendingGatesForTurn, getUnresolvedBlockingReworkFindingsForTask, getBlockingReworkFindingsForTask, applyReworkResolutions, } from "../gsd-db.js";
 import { getWorkflowDatabasePath, ensureWorkflowDbAtPath } from "../db-workspace.js";
 import { getGatesForTurn } from "../gate-registry.js";
-import { gsdProjectionRoot, clearPathCache, resolveMilestonePath, resolveSlicePath } from "../paths.js";
+import { buildFlatTaskFileName, buildTaskFileName, gsdProjectionRoot, clearPathCache, legacyMilestonesDir, resolveMilestonePath, resolveSlicePath, } from "../paths.js";
 import { resolveCanonicalMilestoneRoot } from "../worktree-manager.js";
 import { checkOwnership, taskUnitKey } from "../unit-ownership.js";
 import { saveFile, clearParseCache } from "../files.js";
@@ -34,13 +34,20 @@ function taskSummaryPath(basePath, milestoneId, sliceId, taskId) {
     // a legacy layout and breaks all subsequent path resolution for the session.
     const slicePath = resolveSlicePath(basePath, milestoneId, sliceId);
     const phaseDir = resolveMilestonePath(basePath, milestoneId);
-    if (slicePath && phaseDir && slicePath !== phaseDir) {
-        // Legacy layout: the slice has its own slices/SID/ subdir → tasks/ subdir
-        return join(slicePath, "tasks", `${taskId}-SUMMARY.md`);
+    const legacyBase = legacyMilestonesDir(basePath);
+    const isLegacy = phaseDir
+        ? phaseDir.startsWith(legacyBase + "/") || phaseDir.startsWith(legacyBase + "\\")
+        : false;
+    if (isLegacy && phaseDir) {
+        // Legacy layout: the slice has its own slices/SID/ subdir → tasks/ subdir.
+        const legacySlicePath = slicePath && slicePath !== phaseDir
+            ? slicePath
+            : join(phaseDir, "slices", sliceId);
+        return join(legacySlicePath, "tasks", buildTaskFileName(taskId, "SUMMARY"));
     }
     if (phaseDir) {
         // Flat-phase: task summaries go in the phase dir (no tasks/ subdir)
-        return join(phaseDir, `${taskId}-SUMMARY.md`);
+        return join(phaseDir, buildFlatTaskFileName(sliceId, taskId, "SUMMARY"));
     }
     // Fallback: legacy hardcoded path (milestone/slice dir not on disk yet)
     return join(gsdProjectionRoot(basePath), "milestones", milestoneId, "slices", sliceId, "tasks", `${taskId}-SUMMARY.md`);

package/dist/resources/extensions/gsd/tools/reopen-milestone.js

@@ -16,7 +16,7 @@ import { logWarning } from "../workflow-logger.js";
 import { debugLog } from "../debug-logger.js";
 import { existsSync, unlinkSync } from "node:fs";
 import { join } from "node:path";
-import { resolveMilestonePath, resolveSlicePath, resolveTasksDir, clearPathCache } from "../paths.js";
+import { buildFlatTaskFileName, buildTaskFileName, legacyMilestonesDir, resolveMilestonePath, resolveSlicePath, resolveTasksDir, clearPathCache, } from "../paths.js";
 export async function handleReopenMilestone(params, basePath) {
     // ── Validate required fields ────────────────────────────────────────────
     if (!params.milestoneId || typeof params.milestoneId !== "string" || params.milestoneId.trim() === "") {
@@ -41,6 +41,8 @@ export async function handleReopenMilestone(params, basePath) {
     // auto-corrects entities back to "complete", making reopen a no-op (#3161).
     try {
         const milestoneDir = resolveMilestonePath(basePath, params.milestoneId);
+        const legacyBase = legacyMilestonesDir(basePath);
+        const isLegacy = !!milestoneDir && (milestoneDir.startsWith(legacyBase + "/") || milestoneDir.startsWith(legacyBase + "\\"));
         if (milestoneDir) {
             const milestoneSummary = join(milestoneDir, `${params.milestoneId}-SUMMARY.md`);
             if (existsSync(milestoneSummary))
@@ -58,10 +60,17 @@ export async function handleReopenMilestone(params, basePath) {
                     unlinkSync(sliceUat);
             }
             const tasksDir = resolveTasksDir(basePath, params.milestoneId, slice.id);
-            if (tasksDir) {
-                const tasks = getSliceTasks(params.milestoneId, slice.id);
-                for (const task of tasks) {
-                    const taskSummary = join(tasksDir, `${task.id}-SUMMARY.md`);
+            const tasks = getSliceTasks(params.milestoneId, slice.id);
+            for (const task of tasks) {
+                const taskSummaries = isLegacy
+                    ? (tasksDir ? [join(tasksDir, buildTaskFileName(task.id, "SUMMARY"))] : [])
+                    : milestoneDir
+                        ? [
+                            join(milestoneDir, buildFlatTaskFileName(slice.id, task.id, "SUMMARY")),
+                            join(milestoneDir, buildTaskFileName(task.id, "SUMMARY")),
+                        ]
+                        : [];
+                for (const taskSummary of taskSummaries) {
                     if (existsSync(taskSummary))
                         unlinkSync(taskSummary);
                 }

package/dist/resources/extensions/gsd/tools/reopen-slice.js

@@ -22,7 +22,7 @@ import { appendEvent } from "../workflow-events.js";
 import { logWarning } from "../workflow-logger.js";
 import { existsSync, unlinkSync } from "node:fs";
 import { join } from "node:path";
-import { resolveTasksDir, resolveSlicePath, clearPathCache } from "../paths.js";
+import { buildFlatTaskFileName, buildTaskFileName, legacyMilestonesDir, resolveMilestonePath, resolveTasksDir, resolveSlicePath, clearPathCache, } from "../paths.js";
 export async function handleReopenSlice(params, basePath) {
     // ── Validate required fields ────────────────────────────────────────────
     if (!params.sliceId || typeof params.sliceId !== "string" || params.sliceId.trim() === "") {
@@ -52,11 +52,21 @@ export async function handleReopenSlice(params, basePath) {
     // Without this, the DB-filesystem reconciler sees SUMMARY.md files and
     // auto-corrects tasks back to "complete", making reopen a no-op (#3161).
     try {
+        const milestoneDir = resolveMilestonePath(basePath, params.milestoneId);
+        const legacyBase = legacyMilestonesDir(basePath);
+        const isLegacy = !!milestoneDir && (milestoneDir.startsWith(legacyBase + "/") || milestoneDir.startsWith(legacyBase + "\\"));
         const tasksDir = resolveTasksDir(basePath, params.milestoneId, params.sliceId);
-        if (tasksDir) {
-            const tasks = getSliceTasks(params.milestoneId, params.sliceId);
-            for (const task of tasks) {
-                const summaryPath = join(tasksDir, `${task.id}-SUMMARY.md`);
+        const tasks = getSliceTasks(params.milestoneId, params.sliceId);
+        for (const task of tasks) {
+            const summaryPaths = isLegacy
+                ? (tasksDir ? [join(tasksDir, buildTaskFileName(task.id, "SUMMARY"))] : [])
+                : milestoneDir
+                    ? [
+                        join(milestoneDir, buildFlatTaskFileName(params.sliceId, task.id, "SUMMARY")),
+                        join(milestoneDir, buildTaskFileName(task.id, "SUMMARY")),
+                    ]
+                    : [];
+            for (const summaryPath of summaryPaths) {
                 if (existsSync(summaryPath))
                     unlinkSync(summaryPath);
             }

package/dist/resources/extensions/gsd/tools/reopen-task.js

@@ -17,8 +17,8 @@ import { appendEvent } from "../workflow-events.js";
 import { logWarning } from "../workflow-logger.js";
 import { writeReopenReason } from "../reopen-reason.js";
 import { existsSync, unlinkSync } from "node:fs";
-import { join, basename, dirname } from "node:path";
-import { resolveTasksDir, resolveSlicePath, clearPathCache } from "../paths.js";
+import { join } from "node:path";
+import { buildFlatTaskFileName, buildTaskFileName, legacyMilestonesDir, resolveMilestonePath, resolveTasksDir, resolveSlicePath, clearPathCache, } from "../paths.js";
 export async function handleReopenTask(params, basePath) {
     // ── Validate required fields ────────────────────────────────────────────
     if (!params.taskId || typeof params.taskId !== "string" || params.taskId.trim() === "") {
@@ -76,14 +76,20 @@ export async function handleReopenTask(params, basePath) {
     // summary cleanup into tasks/ (#1208).
     try {
         const slicePath = resolveSlicePath(basePath, params.milestoneId, params.sliceId);
-        if (slicePath) {
-            const isLegacySlice = basename(dirname(slicePath)) === "slices";
-            const summaryDir = isLegacySlice
-                ? (resolveTasksDir(basePath, params.milestoneId, params.sliceId) ?? slicePath)
-                : slicePath;
-            const summaryPath = join(summaryDir, `${params.taskId}-SUMMARY.md`);
-            if (existsSync(summaryPath))
-                unlinkSync(summaryPath);
+        const milestonePath = resolveMilestonePath(basePath, params.milestoneId);
+        if (milestonePath) {
+            const legacyBase = legacyMilestonesDir(basePath);
+            const isLegacy = milestonePath.startsWith(legacyBase + "/") || milestonePath.startsWith(legacyBase + "\\");
+            const summaryPaths = isLegacy
+                ? [join(resolveTasksDir(basePath, params.milestoneId, params.sliceId) ?? slicePath ?? join(milestonePath, "slices", params.sliceId, "tasks"), buildTaskFileName(params.taskId, "SUMMARY"))]
+                : [
+                    join(milestonePath, buildFlatTaskFileName(params.sliceId, params.taskId, "SUMMARY")),
+                    join(milestonePath, buildTaskFileName(params.taskId, "SUMMARY")),
+                ];
+            for (const summaryPath of summaryPaths) {
+                if (existsSync(summaryPath))
+                    unlinkSync(summaryPath);
+            }
         }
     }
     catch (cleanupErr) {

package/dist/resources/extensions/gsd/unit-context-composer.js

@@ -36,6 +36,7 @@
 // owned by the unit, not in the composer. Reviews must enforce this — it
 // is the difference between an orchestrator and a runaway DSL.
 import { resolveManifest, } from "./unit-context-manifest.js";
+import { resolveEffectivePlanningToolsPolicy } from "./planning-subagent-policy.js";
 import { getUnitToolSurfaceContract } from "./unit-tool-contracts.js";
 /**
  * Produce the inlined-context portion of a unit's system prompt by
@@ -148,11 +149,32 @@ const TOOL_SURFACE_GUIDANCE_BY_UNIT = {
     "validate-milestone": "Dispatch reviewer subagents in parallel, then persist the verdict via `gsd_validate_milestone`. Do not query `.gsd/gsd.db` directly — use `gsd_milestone_status` and inlined context.",
     "complete-milestone": "Persist completion only through `gsd_complete_milestone` after verification passes. Do not query `.gsd/gsd.db` directly. Do not write `.gsd/PROJECT.md` or `.gsd/REQUIREMENTS.md` by hand — use `gsd_summary_save` and `gsd_requirement_update`.",
     "replan-slice": "Persist replans through `gsd_replan_slice` only. Do not edit `PLAN.md` or task plans directly.",
-    "plan-slice": "Persist planning through `gsd_plan_slice` only. Dispatch subagents only to **scout** or **planner** for reconnaissance — not implementation agents. Do not edit user source files outside `.gsd/**`.",
-    "refine-slice": "Persist refinements through `gsd_plan_slice` only. Dispatch subagents only to **scout** or **planner**. Do not edit user source files outside `.gsd/**`.",
-    "plan-milestone": "Persist milestone planning through `gsd_plan_milestone` / `gsd_plan_slice`. Do not edit user source files outside `.gsd/**`.",
     "research-slice": "Dispatch subagents only to **scout** or **planner** for reconnaissance. Do not edit user source files outside `.gsd/**`.",
 };
+function formatAllowedAgents(agents) {
+    return agents.map((agent) => `**${agent}**`).join(", ");
+}
+function guidanceForUnitToolsPolicy(unitType, policy) {
+    if (unitType === "plan-slice") {
+        const dispatch = policy.mode === "planning-dispatch"
+            ? ` Dispatch subagents only to ${formatAllowedAgents(policy.allowedSubagents)} for reconnaissance — not implementation agents.`
+            : " Do not dispatch subagents.";
+        return `Persist planning through \`gsd_plan_slice\` only.${dispatch} Do not edit user source files outside \`.gsd/**\`.`;
+    }
+    if (unitType === "refine-slice") {
+        const dispatch = policy.mode === "planning-dispatch"
+            ? ` Dispatch subagents only to ${formatAllowedAgents(policy.allowedSubagents)}.`
+            : " Do not dispatch subagents.";
+        return `Persist refinements through \`gsd_plan_slice\` only.${dispatch} Do not edit user source files outside \`.gsd/**\`.`;
+    }
+    if (unitType === "plan-milestone") {
+        const dispatch = policy.mode === "planning-dispatch"
+            ? ` Dispatch subagents only to ${formatAllowedAgents(policy.allowedSubagents)}.`
+            : "";
+        return `Persist milestone planning through \`gsd_plan_milestone\` / \`gsd_plan_slice\`.${dispatch} Do not edit user source files outside \`.gsd/**\`.`;
+    }
+    return undefined;
+}
 function guidanceForToolsPolicy(policy) {
     switch (policy.mode) {
         case "planning":
@@ -191,8 +213,9 @@ export function composeToolSurfaceInstructions(unitType, opts) {
     const manifest = resolveManifest(unitType);
     if (!manifest)
         return "";
-    const unitGuidance = TOOL_SURFACE_GUIDANCE_BY_UNIT[unitType];
-    const policyGuidance = unitGuidance ? null : guidanceForToolsPolicy(manifest.tools);
+    const effectiveTools = resolveEffectivePlanningToolsPolicy(unitType, manifest.tools, opts.basePath) ?? manifest.tools;
+    const unitGuidance = guidanceForUnitToolsPolicy(unitType, effectiveTools) ?? TOOL_SURFACE_GUIDANCE_BY_UNIT[unitType];
+    const policyGuidance = unitGuidance ? null : guidanceForToolsPolicy(effectiveTools);
     const forbiddenLine = formatForbiddenWorkflowToolsLine(unitType, unitGuidance);
     const parts = [unitGuidance, policyGuidance, forbiddenLine].filter((part) => typeof part === "string" && part.length > 0);
     if (parts.length === 0)

package/dist/resources/extensions/gsd/workflow-projections.js

@@ -13,7 +13,7 @@ import { isClosedStatus } from "./status-guards.js";
 import { deriveState } from "./state.js";
 import { renderPlanFromDb, renderRoadmapFromDb } from "./markdown-renderer.js";
 import { readManifest } from "./workflow-manifest.js";
-import { gsdRoot, resolveMilestoneFile, resolveSliceFile, resolveTaskFile, relTaskFile } from "./paths.js";
+import { gsdRoot, resolveMilestoneFile, resolveSliceFile, resolveTaskFile, targetTaskFile } from "./paths.js";
 // ─── Helpers ─────────────────────────────────────────────────────────────
 /**
  * Strip a leading ID prefix (e.g. "M001: " or "S04: ") from a title
@@ -276,8 +276,7 @@ export function renderSummaryProjection(basePath, milestoneId, sliceId, taskId)
         return;
     const evidenceRows = getVerificationEvidence(milestoneId, sliceId, taskId);
     const content = renderSummaryContent(taskRow, sliceId, milestoneId, evidenceRows);
-    const summaryPath = resolveTaskFile(basePath, milestoneId, sliceId, taskId, "SUMMARY")
-        ?? join(basePath, relTaskFile(basePath, milestoneId, sliceId, taskId, "SUMMARY", getMilestone(milestoneId)?.title));
+    const summaryPath = targetTaskFile(basePath, milestoneId, sliceId, taskId, "SUMMARY", getMilestone(milestoneId)?.title);
     mkdirSync(dirname(summaryPath), { recursive: true });
     atomicWriteSync(summaryPath, content);
 }

package/dist/resources/extensions/gsd/workspace.js

@@ -2,6 +2,7 @@
 import { dirname, join, resolve } from "node:path";
 import { resolveGsdPathContract, resolveMilestoneFile, resolveMilestonePath, targetMilestoneFile, normalizeRealPath, } from "./paths.js";
 import { isGsdWorktreePath, resolveWorktreeProjectRoot } from "./worktree-root.js";
+import { milestoneMetaPath } from "./git-service.js";
 function tryRealpath(p) {
     return normalizeRealPath(p);
 }
@@ -63,7 +64,7 @@ export function scopeMilestone(workspace, milestoneId) {
         stateFile: () => join(gsd, "STATE.md"),
         dbPath: () => contract.projectDb,
         milestoneDir: () => scopeMilestoneDir(basePath, milestoneId),
-        metaJson: () => join(gsd, `${milestoneId}-META.json`),
+        metaJson: () => milestoneMetaPath(basePath, milestoneId),
     });
     return scope;
 }