@tekyzinc/gsd-t 3.13.14 → 3.13.16

package/CHANGELOG.md

@@ -2,6 +2,42 @@
 
 All notable changes to GSD-T are documented here. Updated with each release.
 
+## [3.13.16] - 2026-04-17
+
+### Changed — Removed proactive suggestions to use `/gsd-t-unattended`; positioned as overnight/idle-only
+
+The unattended supervisor remains supported for genuine overnight or multi-hour idle runs but is no longer pitched as a general workflow option. In practice it runs 5–10× slower than in-session execution because every worker iteration pays cold-context startup cost (re-reads CLAUDE.md, progress.md, all domain files) before doing real work, then is bounded to a 270s cache-warm budget. Daytime work belongs in-session.
+
+**Files**:
+- `templates/CLAUDE-global.md` — removed the "Unattended Execution (M36)" section that pitched it as a feature alongside in-session.
+- `commands/gsd-t-help.md` — repositioned the `unattended*` rows under AUTOMATION as overnight-only with a slowness caveat.
+- `README.md` — removed the top-level "Unattended execution" feature bullet; renamed the commands-table heading and the full section heading to "Overnight / Idle-Run …" with a leading callout that daytime work runs in-session; reworded the M38 headless-by-default bullet to drop "via the unattended supervisor" framing.
+
+**No behavioral changes.** Commands `/gsd-t-unattended`, `/gsd-t-unattended-watch`, `/gsd-t-unattended-stop` continue to work exactly as before. The supervisor contract is unchanged.
+
+## [3.13.15] - 2026-04-17
+
+### Fixed — Self-protection guard now uses package-name identity + narrow `bin/*.cjs` gitignore rule
+
+Two bugs in v3.13.14 surfaced when `gsd-t update-all` ran against GSD-T's own source repo from the globally-installed CLI:
+
+**Bug 1 — Self-protection guard bypassed**: The v3.13.14 guard compared `realpathSync(projectBinDir)` against `realpathSync(PKG_ROOT/bin)`. When `update-all` runs from the globally-installed CLI (`/usr/local/lib/node_modules/@tekyzinc/gsd-t`), `PKG_ROOT` points there — NOT to the local GSD-T source at `/Users/…/projects/GSD-T`. The paths never match in the typical dogfood setup, so the guard returned `false` and the sweep ate the source `bin/gsd-t.js`.
+
+**Fix**: identity is now by `package.json` name. The sweep reads `projectDir/package.json` and skips if `name === "@tekyzinc/gsd-t"`. Works regardless of whether `update-all` runs from the local source tree or the global install.
+
+**Bug 2 — Gitignore rule overly broad**: `UNATTENDED_GITIGNORE_ENTRIES` included `bin/*.cjs`, which ignored every `.cjs` under `bin/` — contradicting the adjacent comment ("legitimate `.cjs` source files under `bin/` ARE tracked"). With the broad rule active, new source `.cjs` files (e.g., `bin/headless-exit-codes.cjs`) couldn't be committed without `--force`.
+
+**Fix**: the gitignore entry narrows to exactly `bin/context-meter-state.cjs` — the single session-state artifact that was the original intent.
+
+**Files**:
+- `bin/gsd-t.js` — `isSourcePackage` now reads `package.json.name`; `UNATTENDED_GITIGNORE_ENTRIES` narrowed.
+- `test/bin-gsd-t-resilience.test.js` — self-protection test reshaped: seeds a tmp `package.json` with `name: "@tekyzinc/gsd-t"` + a signature-matching stray, asserts the stray survives the sweep.
+- `.gitignore` — deduped and restored to the narrow form.
+
+**Tests**: 1240/1240 pass (unchanged count; existing self-protection test reshaped). E2E: N/A.
+
+**Impact**: `gsd-t update-all` is now safe to run with GSD-T itself registered as a project, regardless of where the CLI is installed from. Legitimate `.cjs` source files in `bin/` are no longer blanket-ignored in downstream projects' `.gitignore`. bee-poc's supervisor, which started loading cleanly on v3.13.14, continues to load on v3.13.15 (this release is purely dogfood-protection + gitignore repair; no supervisor-behavior change).
+
 ## [3.13.14] - 2026-04-17
 
 ### Fixed — Supervisor no longer requires project-local `bin/gsd-t.js` + sweep self-protection

package/README.md

@@ -10,11 +10,10 @@ A methodology for reliable, parallelizable development using Claude Code with op
 **Protects existing work** — destructive action guard prevents schema drops, architecture replacements, and data loss without explicit approval.
 **Visualizes execution in real time** — live browser dashboard renders agent hierarchy, tool activity, and phase progression from the event stream.
 **Generates visual scan reports** — every `/gsd-t-scan` produces a self-contained HTML report with 6 live architectural diagrams, a tech debt register, and domain health scores; optional DOCX/PDF export via `--export docx|pdf`.
-**Unattended execution** — `gsd-t unattended --hours=N` spawns a detached OS-process supervisor that drives the active milestone to completion over hours or days with zero human intervention. A ScheduleWakeup watch loop ticks every 270 seconds; `/clear` + resume transparently re-attaches to the running supervisor.
 **Self-learning rule engine** — declarative rules in rules.jsonl detect failure patterns from task metrics. Candidate patches progress through a 5-stage lifecycle (candidate, applied, measured, promoted, graduated) with >55% improvement gates before becoming permanent methodology artifacts.
 **Cross-project learning** — proven rules propagate to `~/.claude/metrics/` and sync across all registered projects via `update-all`. Rules validated in 3+ projects become universal; 5+ projects qualify for npm distribution. Cross-project signal comparison and global ELO rankings available via `gsd-t-metrics --cross-project` and `gsd-t-status`.
 **Stack Rules Engine** — auto-detects project tech stack (React, TypeScript, Node API, Python, Go, Rust) from manifest files and injects mandatory best-practice rules into subagent prompts at execute-time. Universal security rules always apply; stack-specific rules layer on top. Includes **design-to-code** rules for pixel-perfect frontend implementation from Figma, screenshots, or design images — with Figma MCP integration, design token extraction, stack capability evaluation, and mandatory visual verification: every screen is rendered in a real browser, screenshotted at mobile/tablet/desktop, and compared pixel-by-pixel against the Figma design. Auto-bootstraps during partition when design references are detected. Extensible: drop a `.md` file in `templates/stacks/` to add a new stack.
-**Headless-by-Default Spawn (M38, v3.12.10)** — long-running workflow commands (execute, wave, integrate, debug repair loops) spawn detached by default via the unattended supervisor. The interactive session prints a launch banner, logs the event-stream path, and exits. Pass `--watch` to keep a live status block in the session (270s `ScheduleWakeup` ticks, cache-window-safe). The supervisor emits JSONL events to `.gsd-t/events/YYYY-MM-DD.jsonl` at every phase boundary — shared by watch command and dashboard. See `.gsd-t/contracts/headless-default-contract.md` v1.0.0 and `unattended-event-stream-contract.md` v1.0.0.
+**Headless-by-Default Spawn (M38, v3.12.10)** — long-running workflow commands (execute, wave, integrate, debug repair loops) spawn detached by default. The interactive session prints a launch banner, logs the event-stream path, and exits. Pass `--watch` to keep a live status block in the session (270s `ScheduleWakeup` ticks, cache-window-safe). Detached workers emit JSONL events to `.gsd-t/events/YYYY-MM-DD.jsonl` at every phase boundary — shared by watch command and dashboard. See `.gsd-t/contracts/headless-default-contract.md` v1.0.0 and `unattended-event-stream-contract.md` v1.0.0.
 - **Surgical model selection** — `bin/model-selector.js` assigns haiku/sonnet/opus per phase via a declarative rules table; `/advisor` escalation path with convention-based fallback.
 - **Per-spawn token telemetry** — `.gsd-t/token-metrics.jsonl` records one 18-field row per Task subagent spawn.
 **Context Meter (M34/M38)** — PostToolUse hook writes `.gsd-t/.context-meter-state.json` via local token estimation. Single-band model (`context-meter-contract.md` v1.3.0): one threshold (default 85%), one action — hand off to a detached headless spawn. The meter informs spawn-time routing, not in-flight pauses.
@@ -172,11 +171,11 @@ This will replace changed command files, back up your CLAUDE.md if customized, a
 | `/gsd-t-verify` | Run quality gates + goal-backward behavior verification | In wave |
 | `/gsd-t-complete-milestone` | Archive + git tag (goal-backward gate required) | In wave |
 
-### Unattended Execution
+### Overnight / Idle-Run Commands (slower than in-session — use only for unattended overnight or multi-hour idle runs)
 
 | Command | Purpose | Auto |
 |---------|---------|------|
-| `/gsd-t-unattended` | Launch detached supervisor — runs active milestone to completion with zero human intervention | Manual |
+| `/gsd-t-unattended` | Launch detached supervisor for overnight/idle runs only | Manual |
 | `/gsd-t-unattended-watch` | Watch tick — fires every 270s via ScheduleWakeup, reports supervisor status | Auto |
 | `/gsd-t-unattended-stop` | Touch stop sentinel — supervisor halts after current worker finishes | Manual |
 
@@ -314,15 +313,15 @@ your-project/
 
 ---
 
-## Unattended Execution (M36 — v3.10.10+)
+## Overnight / Idle-Run Supervisor (M36 — v3.10.10+)
 
-Run the active milestone to completion over hours or days — no human in the loop.
+> **Daytime work runs in-session.** This supervisor is provided for unattended overnight or multi-hour idle runs only — it is dramatically slower than in-session execution because every worker iteration pays cold-context startup cost (re-reads CLAUDE.md, progress.md, all domain files) before doing real work, then is bounded to a 270s cache-warm budget. Reach for it only when you genuinely cannot supervise the run.
 
 ```bash
 # Launch from the CLI (detached OS process)
 gsd-t unattended --hours=24
 
-# Or from within Claude Code (starts a 270s watch loop)
+# Or from within Claude Code
 /gsd-t-unattended
 
 # Stop (graceful — supervisor halts after the current worker finishes)

package/bin/gsd-t.js

@@ -2161,18 +2161,23 @@ function copyBinToolsToProject(projectDir, projectName) {
       }
     }
   }
-  // Self-protection: NEVER sweep the package's own bin/. Without this guard,
+  // Self-protection: NEVER sweep GSD-T's own source repo. Without this guard,
   // running `gsd-t update-all` with the GSD-T source repo itself registered
   // as a project (legitimate during development) would signature-match
   // bin/gsd-t.js — which IS the installer — and delete the source file.
-  // Resolve both paths to handle symlinks / relative path quirks.
-  const resolvedProjectBin = fs.realpathSync.native
-    ? (() => { try { return fs.realpathSync(projectBinDir); } catch { return projectBinDir; } })()
-    : projectBinDir;
-  const resolvedPkgBin = (() => {
-    try { return fs.realpathSync(path.join(PKG_ROOT, "bin")); } catch { return path.join(PKG_ROOT, "bin"); }
+  // Identity is by package.json name, NOT by path — when update-all runs from
+  // the globally-installed package, PKG_ROOT points to the global install and
+  // realpath comparison against the local source always fails.
+  const isSourcePackage = (() => {
+    try {
+      const pkgPath = path.join(projectDir, "package.json");
+      if (!fs.existsSync(pkgPath)) return false;
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+      return pkg && pkg.name === "@tekyzinc/gsd-t";
+    } catch {
+      return false;
+    }
   })();
-  const isSourcePackage = resolvedProjectBin === resolvedPkgBin;
   let cleaned = 0;
   if (!isSourcePackage) {
     for (const stray of DEPRECATED_BIN_STRAYS) {
@@ -2324,7 +2329,7 @@ function ensureUnattendedConfig(projectDir, projectName) {
 }
 
 const UNATTENDED_GITIGNORE_ENTRIES = [
-  "bin/*.cjs",
+  "bin/context-meter-state.cjs",
   ".gsd-t/.archive-migration-v1",
   ".gsd-t/.task-counter-retired-v1",
 ];

package/commands/gsd-t-help.md

@@ -43,7 +43,7 @@ MILESTONE WORKFLOW                                          [auto] = in wave
 AUTOMATION                                                                Auto
 ───────────────────────────────────────────────────────────────────────────────
   wave                Full cycle: partition → ... → complete (auto-advances)
-  unattended          Run active milestone unattended — detached OS supervisor, multi-worker relay (24h+)
+  unattended          Detached supervisor for overnight/multi-hour idle runs only — slower than in-session
   unattended-watch    Show live supervisor status; reschedules every 270s via ScheduleWakeup
   unattended-stop     Request graceful supervisor stop (sentinel file — safe mid-worker)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tekyzinc/gsd-t",
-  "version": "3.13.14",
+  "version": "3.13.16",
   "description": "GSD-T: Contract-Driven Development for Claude Code — 54 slash commands with headless-by-default workflow spawning, unattended supervisor relay with event stream, graph-powered code analysis, real-time agent dashboard, task telemetry, doc-ripple enforcement, backlog management, impact analysis, test sync, milestone archival, and PRD generation",
   "author": "Tekyz, Inc.",
   "license": "MIT",

package/templates/CLAUDE-global.md

@@ -284,11 +284,6 @@ KEEP GOING. Only stop for:
 3. Milestone completion (checkpoint for user review)
 4. Destructive actions (see Destructive Action Guard above — ALWAYS stop)
 
-## Unattended Execution (M36, v3.10.10+)
-
-`/gsd-t-unattended` launches a detached supervisor that drives the active milestone to completion via a `claude -p` worker relay (fresh context per worker). `/gsd-t-resume` auto-reattaches via watch loop if `supervisor.pid` is live; `/gsd-t-unattended-stop` halts after the current worker. macOS/Linux fully supported; Windows lacks sleep-prevention.
-Contract: `.gsd-t/contracts/unattended-supervisor-contract.md` (state schema, exit codes, CLI flags, platform matrix).
-
 ## Pre-Commit Gate (MANDATORY)
 
 NEVER commit code without running this checklist. This is not optional.