@tekyzinc/gsd-t 4.0.12 → 4.0.15

package/CHANGELOG.md

@@ -2,6 +2,43 @@
 
 All notable changes to GSD-T are documented here. Updated with each release.
 
+## [4.0.15] - 2026-06-01 (M68 update-all Retired-Tool Prune — patch)
+
+### Fixed — update-all now prunes bin tools retired in M61/M65
+
+`update-all` kept the propagated 7-tool subset fresh but never deleted tools GSD-T retired — the `DEPRECATED_BIN_STRAYS` sweep list only carried `gsd-t.js`. Result: 22 of 24 registered projects carried 11-17 dead `.cjs` files (the M61/M65 token-telemetry, unattended-relay, headless-spawn, and context-meter clusters), and the "already current" summary masked it. Surfaced when a project appeared not to update.
+
+- `bin/gsd-t.js`: added the 17 M61/M65-retired tools to `DEPRECATED_BIN_STRAYS`; generalized the stray sweep so retired `.cjs` are pruned only when they carry a GSD-T provenance marker (`_hasGsdtProvenance`) — a user's same-named file without the marker is left untouched. `gsd-t.js` keeps its bespoke "GSD-T CLI Installer" header match.
+- `test/bin-gsd-t-resilience.test.js`: +2 regression tests (retired-provenance `.cjs` swept; user-authored same-named `.cjs` survives).
+- One-off: pruned 273 retired `.cjs` across the 21 affected projects (proved no live requirers first — the only references were retirement-breadcrumb comments).
+
+Suite: 1269 pass / 0 fail / 4 skip — zero regressions.
+
+## [4.0.14] - 2026-05-29 (M67 Scan Deep Document Phase — patch)
+
+### Added — deterministic deep document cross-population in the scan Workflow
+
+M66 made the tech-debt register deep but left living-document cross-population as a non-deterministic "lead-agent follow-on" — effectively dropped, a regression vs the old prose scan's Step 5. M67 adds a `Document` phase to `templates/workflows/gsd-t-scan.workflow.js` (between Synthesis and Render) that fans out **one agent per document**, each drawing on the same slices + verified findings the finders produced, so the docs are as thorough as the register.
+
+- `templates/workflows/gsd-t-scan.workflow.js`: new `Document` phase produces `docs/{architecture,workflows,infrastructure,requirements}.md` + `README.md` (merge-not-overwrite, Edit-not-Write on existing files) and the five `.gsd-t/scan/{architecture,security,quality,business-rules,contract-drift}.md` dimension files in the renderer's parsed formats. Component map + a user journey per feature-domain slice. Synthesis no longer writes the dimension files (moved to the doc stage); runs before Render so the HTML report reads the deep `architecture.md`.
+- Red Team (FAIL → GRUDGING-PASS, 1 fix cycle): HIGH-1 doc-clobber data-loss → deterministic `.gsd-t/scan/.doc-backup/` snapshot before the fan-out; HIGH-2 render double-count → grand total written as a `| Grand Total | N files | LOC |` table row that the parser short-circuits on (verified 1809, not 1919); LOW → dropped `-f` from git add + pathspec-excluded and gitignored `.doc-backup`.
+- `commands/gsd-t-scan.md`, `commands/gsd-t-help.md`, `templates/CLAUDE-global.md`: doc-ripple for the new phase. `.gitignore`: `.gsd-t/scan/.doc-backup/`.
+
+Suite: 1267 pass / 0 fail / 4 skip — zero regressions.
+
+## [4.0.13] - 2026-05-29 (M66 Scan Volume-Scaled Workflow Migration — patch)
+
+### Fixed — scan-depth regression: scan now fans out by codebase volume, not a fixed 5-teammate count
+
+Scan was the only major phase never migrated to a native Workflow. It hard-coded exactly 5 teammates (one per dimension) with zero volume scaling — a 5-file repo and a 1,809-file repo both got 5 agents, so a single `quality` agent sampled the top ~5 issues across the whole codebase and stopped. On a large codebase that produced a cursory 16-item register where a deep per-domain scan surfaced 117 findings. It also referenced a retired `autoSpawnHeadless()` + `headless-default-contract v2.0.0`.
+
+- `templates/workflows/gsd-t-scan.workflow.js` (NEW): `preflight → volume-probe (derives a per-area slice list, scaling 1-3 slices tiny → 15-40 large) → pipeline(per-slice deep finder "enumerate don't sample" → single verify) → deterministic JS archive + TD-numbering → synthesis (dedup/merge/re-rank) → render`. Slice depth is budget-aware.
+- `commands/gsd-t-scan.md`: rewritten as a thin `Workflow({scriptPath, args})` invoker; dead `autoSpawnHeadless`/`headless-default-contract v2.0.0` references stripped.
+- Red Team (FAIL → GRUDGING-PASS, 2 fix cycles): prose-driven archive/TD-numbering → deterministic JS (`fs.renameSync` collision-safe + `_parseMaxTd` + prior register content threaded into synthesis); render hollow-report guard + prompt↔parser format alignment; pipeline stage-2 defensive signature; probe model haiku→sonnet.
+- Doc-ripple: removed retired fixed-5-teammate scan-dimension references from `gsd-t-{complete-milestone,gap-analysis,feature,init-scan-setup}.md`; `templates/CLAUDE-global.md` + `commands/gsd-t-help.md`.
+
+Suite: 1267 pass / 0 fail / 4 skip — zero regressions.
+
 ## [4.0.12] - 2026-05-29
 
 ### Removed — M61-carryover test cleanup (green the suite)

package/bin/gsd-t.js

@@ -2473,11 +2473,60 @@ const PROJECT_BIN_TOOLS = [
 
 // Files that older versions of this installer copied into project bin/ but
 // are no longer part of PROJECT_BIN_TOOLS. On each update-all pass, sweep the
-// project's bin/ and remove any stray file that still byte-matches the source
-// copy in this package — that proves it's an old installer artifact, not a
-// user's own file sharing the same name. User-owned files (byte-divergent)
-// are left alone.
-const DEPRECATED_BIN_STRAYS = ["gsd-t.js"];
+// project's bin/ and remove any stray that carries GSD-T provenance — that
+// proves it's an old installer artifact, not a user's own file sharing the
+// name. User-owned files (no GSD-T provenance marker) are left alone.
+//
+// M68: the M61/M65 retirement removed the token-telemetry + unattended +
+// headless-spawn + context-meter clusters from the package and from
+// PROJECT_BIN_TOOLS, but never added them here — so update-all kept the current
+// 7 tools fresh while leaving 11-17 dead .cjs lingering in every project's bin/.
+// Adding them closes that gap so future retirements prune cleanly.
+// Each retired tool maps to one or more VERBATIM header sentinels it actually
+// shipped with (recovered from git history at the commit before each was deleted).
+// A stray is swept only when its content contains the exact product header — proof
+// it was SHIPPED by this installer, not merely that it mentions "gsd-t". This is the
+// M68 red-team fix: the prior loose substring (`/gsd-t/` over 1200 chars) would have
+// deleted a user's own same-named helper that happened to reference a `.gsd-t/` path.
+// A user file can match only by reproducing a verbatim product header — implausible.
+const DEPRECATED_BIN_STRAY_SIGNATURES = {
+  "gsd-t.js": ["GSD-T CLI Installer"], // bespoke installer header
+  // M61 D3 — token telemetry / context-runway cluster
+  "gsd-t-token-capture.cjs": ["GSD-T Token Capture", "gsd-t-token-capture"],
+  "token-telemetry.cjs": ["GSD-T Token Telemetry"],
+  "token-budget.cjs": ["GSD-T Token Budget"],
+  "token-optimizer.cjs": ["GSD-T Token Optimizer"],
+  "runway-estimator.cjs": ["GSD-T Runway", "runway-estimator"],
+  // Verbatim shipped comment header (no bare "GSD-T" — red-team HIGH-1: a bare token
+  // would delete a user's same-named file that merely mentions GSD-T).
+  "context-budget-audit.cjs": ["Context Budget Audit — measures the static context cost"],
+  "context-meter-config.cjs": ["Context Meter config loader (M34)"],
+  "context-meter-config.test.cjs": ["context-meter-config"],
+  // M61 D2 — unattended relay + headless spawn cluster
+  "gsd-t-unattended.cjs": ["GSD-T Unattended", "gsd-t-unattended"],
+  "gsd-t-unattended-platform.cjs": ["GSD-T Unattended", "gsd-t-unattended"],
+  "gsd-t-unattended-safety.cjs": ["GSD-T Unattended", "gsd-t-unattended"],
+  "headless-auto-spawn.cjs": ["GSD-T Headless Auto-Spawn"],
+  "headless-exit-codes.cjs": ["GSD-T headless exit-code contract"],
+  "handoff-lock.cjs": ["GSD-T Handoff Lock — Fail-safe sentinel"],
+  "unattended-watch-format.cjs": ["bin/unattended-watch-format.cjs", "unattended watch-tick activity block"],
+  // M61 D1/D4 — misc retired
+  "log-tail.cjs": ["Log Tail — print the last N lines"], // verbatim shipped comment
+  "event-stream.cjs": ["bin/event-stream.cjs", "unattended supervisor watch-tick"],
+};
+const DEPRECATED_BIN_STRAYS = Object.keys(DEPRECATED_BIN_STRAY_SIGNATURES);
+
+// A stray is swept only if its first 1200 chars contain one of the VERBATIM header
+// sentinels the tool actually shipped with. "Mentions gsd-t" is NOT enough — that
+// would risk deleting a user's same-named file (red-team HIGH-1). Returns the matched
+// sentinel (for logging) or null.
+function _matchedStraySignature(name, content) {
+  const sigs = DEPRECATED_BIN_STRAY_SIGNATURES[name];
+  if (!sigs) return null;
+  const head = content.slice(0, 1200);
+  for (const s of sigs) if (head.includes(s)) return s;
+  return null;
+}
 
 function copyBinToolsToProject(projectDir, projectName) {
   const projectBinDir = path.join(projectDir, "bin");
@@ -2537,19 +2586,15 @@ function copyBinToolsToProject(projectDir, projectName) {
       if (!fs.existsSync(strayPath)) continue;
       try {
         const strayContent = fs.readFileSync(strayPath, "utf8");
-        const head = strayContent.slice(0, 400);
-        // Signature-match any version this installer ever shipped. The marker
-        // is unique enough to rule out user-owned files: node shebang + the
-        // verbatim JSDoc header "GSD-T CLI Installer". Matches every historical
-        // version of bin/gsd-t.js, not just the current one, so older strays
-        // (e.g. v3.13.11 left behind on v3.13.12+) are still swept.
-        const isOurs =
-          head.startsWith("#!/usr/bin/env node") &&
-          head.includes("GSD-T CLI Installer");
-        if (isOurs) {
+        const matched = _matchedStraySignature(stray, strayContent);
+        if (matched) {
           fs.unlinkSync(strayPath);
           cleaned++;
+          // Red-team fix (HIGH-2): name every deleted file so a destructive sweep
+          // across many projects is reconstructable from scrollback, not a bare count.
+          info(`${projectName} — removed retired bin/${stray} (matched shipped header "${matched.slice(0, 40)}")`);
         }
+        // No signature match → leave it alone (user's own same-named file).
       } catch {
         // leave the file alone on any read error
       }

package/commands/gsd-t-complete-milestone.md

@@ -463,19 +463,13 @@ node scripts/gsd-t-watch-state.js advance --agent-id "$GSD_T_AGENT_ID" --parent-
 
 Before tagging, ensure scan docs reflect the final state of the codebase after all milestone work. This is the full-refresh counterpart to the micro-updates done during execute/quick/debug.
 
-If `.gsd-t/scan/` exists (a prior scan has been run):
-1. Check `.gsd-t/scan/.cache.json` for staleness — count commits since last scan
-2. If **any dimension is stale** (>0 commits since scan):
-   - Log: "Running milestone scan checkpoint — refreshing all stale scan dimensions..."
-   - Re-run all stale dimensions using scan teammates (same team structure as `gsd-t-scan` Step 2):
-     - Stale `architecture.md` → architecture teammate (model: haiku)
-     - Stale `quality.md` → quality teammate (model: sonnet)
-     - Stale `security.md` → security teammate (model: sonnet)
-     - Stale `business-rules.md` → business-rules teammate (model: haiku)
-     - Stale `contract-drift.md` → contracts teammate (model: haiku)
-   - Update `.gsd-t/scan/.cache.json` after refresh
+If `.gsd-t/techdebt.md` exists (a prior scan has been run):
+1. Check staleness — count commits since the register was last written (use `.gsd-t/scan/.cache.json` if present, else the register's git mtime).
+2. If **stale** (>0 commits since scan):
+   - Log: "Running milestone scan checkpoint — refreshing the tech-debt register..."
+   - Re-run the scan by invoking the volume-scaled scan Workflow (`templates/workflows/gsd-t-scan.workflow.js`, same as `/gsd-t-scan`) — the probe re-slices the codebase and the finders refresh the register. This replaces the retired fixed-5-teammate dimension refresh.
    - Update `.gsd-t/techdebt.md` — mark any items resolved during this milestone as `[RESOLVED]`
-3. If all dimensions are fresh → skip with log: "Scan docs are fresh — no checkpoint refresh needed"
+3. If fresh → skip with log: "Scan register is fresh — no checkpoint refresh needed"
 
 If `.gsd-t/scan/` doesn't exist → skip (no scan data to maintain).
 

package/commands/gsd-t-feature.md

@@ -14,12 +14,8 @@ If `.gsd-t/scan/.cache.json` exists:
 1. Read the cache and check `scannedAt` for each dimension
 2. Count commits since the scan: `git rev-list --count --after="{scannedAt}" HEAD`
 3. If **>10 commits since scan** OR **scan is older than 14 days**:
-   - Log: "Auto-refreshing scan docs (stale by {N} commits / {N} days)..."
-   - Re-run only the stale dimensions by spawning the relevant scan teammates:
-     - If `quality.md` stale → spawn quality teammate (model: sonnet)
-     - If `architecture.md` stale → spawn architecture teammate (model: haiku)
-     - If `security.md` stale → spawn security teammate (model: sonnet)
-   - Update `.gsd-t/scan/.cache.json` after refresh
+   - Log: "Auto-refreshing the tech-debt register (stale by {N} commits / {N} days)..."
+   - Re-run the scan by invoking the volume-scaled scan Workflow (`templates/workflows/gsd-t-scan.workflow.js`, same as `/gsd-t-scan`) — the probe re-slices the codebase and the finders refresh the register. This replaces the retired fixed-dimension teammate refresh.
 4. If fresh → proceed silently
 
 If `.gsd-t/scan/` doesn't exist at all → skip (no scan data to refresh).

package/commands/gsd-t-gap-analysis.md

@@ -14,14 +14,11 @@ If `.gsd-t/scan/.cache.json` exists:
 1. Read the cache and check `scannedAt` for each dimension
 2. Count commits since the scan: `git rev-list --count --after="{scannedAt}" HEAD`
 3. If **>10 commits since scan** OR **scan is older than 14 days**:
-   - Log: "Auto-refreshing scan docs (stale by {N} commits / {N} days)..."
-   - Re-run only the stale dimensions by spawning the relevant scan teammates:
-     - If `architecture.md` stale → spawn architecture teammate (model: haiku)
-     - If `quality.md` stale → spawn quality teammate (model: sonnet)
-   - Update `.gsd-t/scan/.cache.json` after refresh
+   - Log: "Auto-refreshing the tech-debt register (stale by {N} commits / {N} days)..."
+   - Re-run the scan by invoking the volume-scaled scan Workflow (`templates/workflows/gsd-t-scan.workflow.js`, same as `/gsd-t-scan`) — the probe re-slices the codebase and the finders refresh the register. This replaces the retired fixed-dimension teammate refresh.
 4. If fresh → proceed silently
 
-If `.gsd-t/scan/` doesn't exist at all → skip (no scan data to refresh).
+If no prior `.gsd-t/techdebt.md` exists at all → skip (no scan data to refresh).
 
 ## Step 1: Load Context
 

package/commands/gsd-t-help.md

@@ -196,9 +196,9 @@ Use these when user asks for help on a specific command:
 - **Use when**: Adding significant new functionality to existing project
 
 ### scan
-- **Summary**: Deep codebase analysis producing architecture docs and techdebt.md
+- **Summary**: Deep codebase analysis producing techdebt.md — volume-scaled native Workflow (`templates/workflows/gsd-t-scan.workflow.js`): a probe carves the codebase into per-area slices, one deep finder per slice (enumerate-don't-sample), a single verify pass drops false positives, synthesis dedups/re-ranks into the register. Finder count scales with codebase volume (1-3 slices tiny → 15-40 large), not a fixed 5.
 - **Auto-invoked**: No
-- **Creates**: `.gsd-t/scan/`, `.gsd-t/techdebt.md`
+- **Creates**: `.gsd-t/techdebt.md` (prior archived to `.gsd-t/techdebt_YYYY-MM-DD.md`), the `.gsd-t/scan/*.md` dimension files, the full living-doc set (`docs/architecture.md`, `docs/workflows.md`, `docs/infrastructure.md`, `docs/requirements.md`, `README.md` — merged not overwritten, via the M67 document phase), and the HTML scan report
 - **Use when**: Understanding an existing codebase or auditing technical debt
 
 ### gap-analysis

package/commands/gsd-t-init-scan-setup.md

@@ -101,16 +101,16 @@ If the project has source code, graph indexing (`.gsd-t/graph/`) will run as par
 
 ## Step 4: Deep Codebase Scan (gsd-t-scan)
 
-Execute the full scan workflow (same as `/gsd-t-scan`):
+Execute the full scan by invoking the volume-scaled scan Workflow (same as `/gsd-t-scan` — `templates/workflows/gsd-t-scan.workflow.js`):
 
-1. Scan across all dimensions: architecture, business rules, security, quality, contracts
-2. Build `.gsd-t/techdebt.md` register
-3. Cross-populate findings into living documents (docs/architecture.md, docs/workflows.md, docs/infrastructure.md, docs/requirements.md)
-4. Update README.md with discovered tech stack and setup info
+1. The volume-probe slices the codebase by area (scaling with volume, not a fixed dimension set); per-slice deep finders enumerate; a single verify pass drops false positives.
+2. Synthesis builds the `.gsd-t/techdebt.md` register and the `.gsd-t/scan/*.md` analysis files.
+3. Cross-populate findings into living documents (docs/architecture.md, docs/workflows.md, docs/infrastructure.md, docs/requirements.md) from the register + analysis files.
+4. Update README.md with discovered tech stack and setup info.
 
-Always use team mode for the scan unless the codebase is trivially small (< 5 files) or teams are explicitly disabled.
+The Workflow's fan-out scales with codebase volume automatically — no team-mode toggle.
 
-**If `.gsd-t/techdebt.md` already exists**: Append new findings, don't overwrite.
+**If `.gsd-t/techdebt.md` already exists**: the Workflow archives it to `.gsd-t/techdebt_YYYY-MM-DD.md` and continues TD numbering.
 
 ## Step 5: Generate Project CLAUDE.md (gsd-t-setup)