gsd-pi 2.78.1-dev.b0759e59b → 2.78.1-dev.d8826a445

package/src/resources/extensions/gsd/tests/teardown-cleanup-parity.test.ts

@@ -0,0 +1,102 @@
+/**
+ * GSD Auto-Worktree -- teardown-cleanup-parity.test.ts
+ *
+ * Regression test: teardownAutoWorktree (abort path) must call
+ * clearProjectRootStateFiles, removing STATE.md, auto.lock, and
+ * {MID}-META.json from the project root .gsd/ dir.
+ *
+ * Prior to the fix these files were left behind on disk after abort teardown.
+ */
+
+import { describe, test, beforeEach, afterEach } from "node:test";
+import assert from "node:assert/strict";
+import {
+  mkdirSync,
+  mkdtempSync,
+  writeFileSync,
+  existsSync,
+  rmSync,
+  realpathSync,
+} from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { execFileSync } from "node:child_process";
+
+import { teardownAutoWorktree, _resetAutoWorktreeOriginalBaseForTests } from "../auto-worktree.ts";
+
+function git(args: string[], cwd: string): void {
+  execFileSync("git", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
+}
+
+function createTempRepo(): string {
+  const dir = realpathSync(mkdtempSync(join(tmpdir(), "gsd-teardown-parity-")));
+  git(["init"], dir);
+  git(["config", "user.email", "test@gsd.test"], dir);
+  git(["config", "user.name", "Test"], dir);
+  writeFileSync(join(dir, "README.md"), "# test\n");
+  git(["add", "README.md"], dir);
+  git(["commit", "-m", "init"], dir);
+  git(["branch", "-M", "main"], dir);
+  return dir;
+}
+
+describe("teardownAutoWorktree cleanup parity", () => {
+  let repoDir: string;
+
+  beforeEach(() => {
+    repoDir = createTempRepo();
+    _resetAutoWorktreeOriginalBaseForTests();
+  });
+
+  afterEach(() => {
+    rmSync(repoDir, { recursive: true, force: true });
+    _resetAutoWorktreeOriginalBaseForTests();
+  });
+
+  test("STATE.md, auto.lock, and M001-META.json are removed after abort teardown", () => {
+    const gsdDir = join(repoDir, ".gsd");
+    const milestonesDir = join(gsdDir, "milestones", "M001");
+    mkdirSync(milestonesDir, { recursive: true });
+
+    const stateMd = join(gsdDir, "STATE.md");
+    const autoLock = join(gsdDir, "auto.lock");
+    const metaJson = join(milestonesDir, "M001-META.json");
+
+    writeFileSync(stateMd, "# State\nactive\n");
+    writeFileSync(
+      autoLock,
+      JSON.stringify({ pid: process.pid, unitType: "plan-milestone", unitId: "M001" }),
+    );
+    writeFileSync(metaJson, JSON.stringify({ milestoneId: "M001" }));
+
+    assert.ok(existsSync(stateMd), "STATE.md exists before teardown");
+    assert.ok(existsSync(autoLock), "auto.lock exists before teardown");
+    assert.ok(existsSync(metaJson), "M001-META.json exists before teardown");
+
+    // teardownAutoWorktree may throw when git worktree removal fails
+    // (no actual worktree was created), but clearProjectRootStateFiles
+    // runs before removeWorktree so the state files must be gone regardless.
+    try {
+      teardownAutoWorktree(repoDir, "M001");
+    } catch {
+      // git teardown may fail in a minimal test repo — that is acceptable
+    }
+
+    assert.ok(!existsSync(stateMd), "STATE.md removed by teardownAutoWorktree");
+    assert.ok(!existsSync(autoLock), "auto.lock removed by teardownAutoWorktree");
+    assert.ok(!existsSync(metaJson), "M001-META.json removed by teardownAutoWorktree");
+  });
+
+  test("teardown is non-fatal when state files do not exist", () => {
+    // No state files created — teardown should not throw due to missing files
+    // (clearProjectRootStateFiles tolerates ENOENT).
+    try {
+      teardownAutoWorktree(repoDir, "M001");
+    } catch {
+      // git teardown may fail — acceptable
+    }
+
+    // Reaching here means clearProjectRootStateFiles did not throw for missing files.
+    assert.ok(true, "teardown with missing state files did not throw from clearProjectRootStateFiles");
+  });
+});

package/src/resources/extensions/gsd/tests/teardown-failure-clears-registry.test.ts

@@ -0,0 +1,186 @@
+// GSD-2 + Regression test: teardownAutoWorktree clears activeWorkspace even when removeWorktree fails
+
+/**
+ * Regression: `teardownAutoWorktree` must clear `activeWorkspace` (and therefore
+ * `getAutoWorktreeOriginalBase()` / `getActiveAutoWorktreeContext()`) in a `finally`
+ * block so the registry is reset to null even when `removeWorktree` throws (e.g. a
+ * Windows git failure).
+ *
+ * Prior to the fix, `setActiveWorkspace(null)` was called only AFTER `removeWorktree`
+ * returned normally.  A thrown error would skip it, leaving `activeWorkspace` stale
+ * and causing `getActiveAutoWorktreeContext()` to return wrong data for subsequent ops.
+ *
+ * Note on test strategy: `removeWorktree` is intentionally hardened to absorb git
+ * errors internally (all failure paths use logWarning rather than re-throwing).
+ * Forcing it to throw via the public API is therefore not straightforward.  Instead
+ * these tests verify:
+ *   1. The observable registry invariant on the success path (activeWorkspace = null
+ *      after teardown — the behaviour the finally block preserves).
+ *   2. A seeded-state scenario: workspace is set, then teardownAutoWorktree is invoked
+ *      on a path whose chdir target was deleted to force an early throw, confirming
+ *      that a throw from teardown leaves registry clearing behaviour consistent with
+ *      caller expectations (the finally block protects removeWorktree, so the early
+ *      throw here also resets via _resetAutoWorktreeOriginalBaseForTests in afterEach).
+ *   3. The preserveBranch variant to confirm the finally path works across call shapes.
+ */
+
+import { describe, test, beforeEach, afterEach } from "node:test";
+import assert from "node:assert/strict";
+import {
+  mkdirSync,
+  mkdtempSync,
+  writeFileSync,
+  rmSync,
+  realpathSync,
+  existsSync,
+} from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { execFileSync } from "node:child_process";
+
+import {
+  createAutoWorktree,
+  teardownAutoWorktree,
+  getAutoWorktreeOriginalBase,
+  getActiveAutoWorktreeContext,
+  _resetAutoWorktreeOriginalBaseForTests,
+} from "../auto-worktree.ts";
+
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+
+function git(args: string[], cwd: string): void {
+  execFileSync("git", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
+}
+
+function createTempRepo(): string {
+  const dir = realpathSync(mkdtempSync(join(tmpdir(), "gsd-teardown-registry-")));
+  git(["init"], dir);
+  git(["config", "user.email", "test@gsd.test"], dir);
+  git(["config", "user.name", "Test"], dir);
+  mkdirSync(join(dir, ".gsd"), { recursive: true });
+  writeFileSync(join(dir, "README.md"), "# test\n");
+  git(["add", "."], dir);
+  git(["commit", "-m", "init"], dir);
+  git(["branch", "-M", "main"], dir);
+  return dir;
+}
+
+function seedMilestone(repoDir: string, milestoneId: string): void {
+  const msDir = join(repoDir, ".gsd", "milestones", milestoneId);
+  mkdirSync(msDir, { recursive: true });
+  writeFileSync(join(msDir, "CONTEXT.md"), `# ${milestoneId} Context\n`);
+  git(["add", "."], repoDir);
+  git(["commit", "-m", `add ${milestoneId}`], repoDir);
+}
+
+// ─── Tests ───────────────────────────────────────────────────────────────────
+
+describe("teardown failure clears registry", () => {
+  const savedCwd = process.cwd();
+  let repoDir: string;
+
+  beforeEach(() => {
+    _resetAutoWorktreeOriginalBaseForTests();
+    process.chdir(savedCwd);
+  });
+
+  afterEach(() => {
+    _resetAutoWorktreeOriginalBaseForTests();
+    process.chdir(savedCwd);
+    if (repoDir && existsSync(repoDir)) {
+      rmSync(repoDir, { recursive: true, force: true });
+    }
+    repoDir = "";
+  });
+
+  // ── Success path ────────────────────────────────────────────────────────────
+
+  test("registry is null after successful teardown (success path)", () => {
+    repoDir = createTempRepo();
+    seedMilestone(repoDir, "M001");
+
+    // Baseline: registry is empty
+    assert.strictEqual(getAutoWorktreeOriginalBase(), null,
+      "originalBase is null before entering worktree");
+    assert.strictEqual(getActiveAutoWorktreeContext(), null,
+      "context is null before entering worktree");
+
+    // Create and enter the worktree — registry is now populated
+    createAutoWorktree(repoDir, "M001");
+
+    assert.strictEqual(getAutoWorktreeOriginalBase(), repoDir,
+      "originalBase equals repoDir after createAutoWorktree");
+    assert.notStrictEqual(getActiveAutoWorktreeContext(), null,
+      "context is non-null after createAutoWorktree");
+
+    // Teardown — finally block must clear registry regardless of removeWorktree outcome
+    teardownAutoWorktree(repoDir, "M001");
+
+    assert.strictEqual(getAutoWorktreeOriginalBase(), null,
+      "originalBase is null after successful teardown");
+    assert.strictEqual(getActiveAutoWorktreeContext(), null,
+      "context is null after successful teardown");
+  });
+
+  test("registry is null after teardown with preserveBranch:true", () => {
+    repoDir = createTempRepo();
+    seedMilestone(repoDir, "M002");
+
+    createAutoWorktree(repoDir, "M002");
+    assert.strictEqual(getAutoWorktreeOriginalBase(), repoDir,
+      "originalBase set after createAutoWorktree");
+
+    teardownAutoWorktree(repoDir, "M002", { preserveBranch: true });
+
+    assert.strictEqual(getAutoWorktreeOriginalBase(), null,
+      "originalBase is null after teardown with preserveBranch:true");
+    assert.strictEqual(getActiveAutoWorktreeContext(), null,
+      "context is null after teardown with preserveBranch:true");
+  });
+
+  // ── Finally-block guarantee ─────────────────────────────────────────────────
+
+  test("registry is null after teardown even when teardown throws (finally path)", () => {
+    // Seed workspace state via a real createAutoWorktree call.
+    repoDir = createTempRepo();
+    seedMilestone(repoDir, "M003");
+    createAutoWorktree(repoDir, "M003");
+
+    // Confirm the registry is populated before attempting the failing teardown.
+    assert.strictEqual(getAutoWorktreeOriginalBase(), repoDir,
+      "originalBase is set before the failing teardown");
+
+    // Tear down cleanly first so the worktree directory is gone from disk.
+    // Then call teardown again on the same ID: the registry was already cleared
+    // by the first call — this test verifies that the idempotent null assignment
+    // in finally does not cause any side-effects on a second call.
+    teardownAutoWorktree(repoDir, "M003");
+    assert.strictEqual(getAutoWorktreeOriginalBase(), null, "registry clear after first teardown");
+
+    // Re-seed by resetting to a state the teardownAutoWorktree call on a fully-torn-down
+    // worktree would exercise. On a minimal repo (worktree already removed), teardown
+    // has no worktree to clean but the finally block must still not throw.
+    // This verifies teardown is safe to call on a non-existent worktree (idempotent).
+    _resetAutoWorktreeOriginalBaseForTests();
+    // teardownAutoWorktree with a non-existent worktree: removeWorktree handles
+    // missing worktrees silently (via nativeWorktreePrune); finally still runs.
+    try {
+      teardownAutoWorktree(repoDir, "M003");
+    } catch {
+      // throw from chdir or git may occur — the important property is the registry
+    }
+
+    assert.strictEqual(getAutoWorktreeOriginalBase(), null,
+      "registry is null after teardown on already-removed worktree");
+    assert.strictEqual(getActiveAutoWorktreeContext(), null,
+      "context is null after teardown on already-removed worktree");
+  });
+
+  test("getAutoWorktreeOriginalBase returns null at baseline (sanity)", () => {
+    assert.strictEqual(getAutoWorktreeOriginalBase(), null);
+  });
+
+  test("getActiveAutoWorktreeContext returns null at baseline (sanity)", () => {
+    assert.strictEqual(getActiveAutoWorktreeContext(), null);
+  });
+});

package/src/resources/extensions/gsd/tests/tool-invocation-error-loop-break.test.ts

@@ -102,7 +102,7 @@ describe("#2883: isToolInvocationError classification", () => {
   });
 
   test("detects raw write-gate CONTEXT failures for non-GSD write tools", () => {
-    resetWriteGateState();
+    resetWriteGateState(process.cwd());
     const result = shouldBlockContextWrite(
       "write",
       "/tmp/project/.gsd/milestones/M001/M001-CONTEXT.md",

package/src/resources/extensions/gsd/tests/validate-milestone-write-order.test.ts

@@ -85,7 +85,7 @@ describe("handleValidateMilestone write ordering (#2725)", () => {
     assert.doesNotMatch(validationMd, /## Verification Class Compliance/);
   });
 
-  it("rolls back DB row when disk write fails", async () => {
+  it("keeps DB row and reports stale projection when disk write fails", async () => {
     base = makeTmpBase();
     const dbPath = join(base, ".gsd", "gsd.db");
     openDatabase(dbPath);
@@ -101,16 +101,15 @@ describe("handleValidateMilestone write ordering (#2725)", () => {
 
     const result = await handleValidateMilestone(VALID_PARAMS, base);
 
-    // Should return error
-    assert.ok("error" in result, "should return error when disk write fails");
-    assert.ok(result.error.includes("disk render failed"));
+    assert.ok(!("error" in result), `unexpected error: ${"error" in result ? result.error : ""}`);
+    assert.equal(result.stale, true, "result should report stale projection");
 
-    // DB row should have been rolled back (deleted)
     const adapter = _getAdapter()!;
     const row = adapter.prepare(
-      `SELECT * FROM assessments WHERE milestone_id = 'M001' AND scope = 'milestone-validation'`,
-    ).get();
-    assert.equal(row, undefined, "assessment row should be deleted after disk-write rollback");
+      `SELECT status FROM assessments WHERE milestone_id = 'M001' AND scope = 'milestone-validation'`,
+    ).get() as { status: string } | undefined;
+    assert.ok(row, "assessment row should remain committed");
+    assert.equal(row!.status, "pass");
   });
 
   it("persists milestone validation gate_runs rows when UOK gates are enabled", async () => {

package/src/resources/extensions/gsd/tests/validate-milestone.test.ts

@@ -394,7 +394,7 @@ test("dispatch rule skips when skip_milestone_validation preference is set", asy
   }
 });
 
-test("dispatch rule fails closed for failure-path SUMMARY when DB milestone is not complete (#4658)", async () => {
+test("dispatch rule ignores failure-path SUMMARY projection when DB milestone is not complete (#4658 superseded)", async () => {
   const state: GSDState = {
     activeMilestone: { id: "M001", title: "Test" },
     activeSlice: null,
@@ -422,17 +422,14 @@ test("dispatch rule fails closed for failure-path SUMMARY when DB milestone is n
       prefs: undefined,
     };
     const result = await resolveDispatch(ctx);
-    assert.equal(result.action, "stop");
-    if (result.action === "stop") {
-      assert.equal(result.level, "warning");
-      assert.match(result.reason, /failure-path SUMMARY/i);
-    }
+    assert.equal(result.action, "dispatch");
+    assert.equal(getMilestone("M001")?.status, "active");
   } finally {
     cleanup(base);
   }
 });
 
-test("dispatch rule reconciles DB for successful stale SUMMARY (#4658)", async () => {
+test("dispatch rule does not reconcile DB from successful stale SUMMARY projection (#4658 superseded)", async () => {
   const state: GSDState = {
     activeMilestone: { id: "M001", title: "Test" },
     activeSlice: null,
@@ -473,15 +470,15 @@ test("dispatch rule reconciles DB for successful stale SUMMARY (#4658)", async (
       prefs: undefined,
     };
     const result = await resolveDispatch(ctx);
-    assert.equal(result.action, "skip");
+    assert.equal(result.action, "dispatch");
     const milestone = getMilestone("M001");
-    assert.equal(milestone?.status, "complete");
+    assert.equal(milestone?.status, "active");
   } finally {
     cleanup(base);
   }
 });
 
-test("dispatch rule fails closed for ambiguous stale SUMMARY (#4658)", async () => {
+test("dispatch rule ignores ambiguous stale SUMMARY projection (#4658 superseded)", async () => {
   const state: GSDState = {
     activeMilestone: { id: "M001", title: "Test" },
     activeSlice: null,
@@ -509,11 +506,8 @@ test("dispatch rule fails closed for ambiguous stale SUMMARY (#4658)", async ()
       prefs: undefined,
     };
     const result = await resolveDispatch(ctx);
-    assert.equal(result.action, "stop");
-    if (result.action === "stop") {
-      assert.equal(result.level, "warning");
-      assert.match(result.reason, /ambiguous SUMMARY/i);
-    }
+    assert.equal(result.action, "dispatch");
+    assert.equal(getMilestone("M001")?.status, "active");
   } finally {
     cleanup(base);
   }

package/src/resources/extensions/gsd/tests/validator-scope-parity.test.ts

@@ -0,0 +1,239 @@
+// GSD-2 + Tests verifying writer/validator path parity via MilestoneScope (C3)
+//
+// Critical invariant: a writer that constructs paths via scope.contextFile() /
+// scope.roadmapFile() and a validator that resolves paths via the scope-based
+// wrappers in guided-flow.ts must produce IDENTICAL absolute paths for the same
+// logical inputs.  If they diverge, writes go to a different location than the
+// validator checks, causing silent failures.
+
+import { describe, test, beforeEach, afterEach } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, mkdirSync, rmSync, realpathSync, writeFileSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+
+import { createWorkspace, scopeMilestone } from "../workspace.ts";
+import {
+  verifyExpectedArtifactForScope,
+  resolveExpectedArtifactPathForScope,
+  isGhostMilestoneByScope,
+} from "../guided-flow.ts";
+
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+
+function makeProjectDir(label = "gsd-vsp-"): string {
+  const dir = realpathSync(mkdtempSync(join(tmpdir(), label)));
+  mkdirSync(join(dir, ".gsd", "milestones", "M001"), { recursive: true });
+  return dir;
+}
+
+// ─── Suite: writer/validator path parity ─────────────────────────────────────
+
+describe("validator-scope-parity: writer and validator produce identical paths", () => {
+  let base: string;
+
+  beforeEach(() => {
+    base = makeProjectDir();
+  });
+
+  afterEach(() => {
+    if (base) rmSync(base, { recursive: true, force: true });
+  });
+
+  test("resolveExpectedArtifactPathForScope('discuss-milestone') matches scope.contextFile()", () => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    // Writer path: what the discuss/plan agent writes to
+    const writerPath = scope.contextFile();
+
+    // Validator path: what the validator checks
+    const validatorPath = resolveExpectedArtifactPathForScope(scope, "discuss-milestone", "M001");
+
+    assert.equal(
+      validatorPath,
+      writerPath,
+      "discuss-milestone artifact path must match scope.contextFile()",
+    );
+  });
+
+  test("resolveExpectedArtifactPathForScope('plan-milestone') matches scope.roadmapFile()", () => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    const writerPath = scope.roadmapFile();
+    const validatorPath = resolveExpectedArtifactPathForScope(scope, "plan-milestone", "M001");
+
+    assert.equal(
+      validatorPath,
+      writerPath,
+      "plan-milestone artifact path must match scope.roadmapFile()",
+    );
+  });
+
+  test("resolveExpectedArtifactPathForScope returns an absolute path", () => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    const path = resolveExpectedArtifactPathForScope(scope, "discuss-milestone", "M001");
+    assert.ok(path, "path must be non-null for a milestone unit");
+    assert.ok(path!.startsWith("/"), "path must be absolute");
+  });
+});
+
+// ─── Suite: cwd-drift immunity ────────────────────────────────────────────────
+
+describe("validator-scope-parity: scope-based validators are immune to cwd-drift", () => {
+  let base: string;
+
+  beforeEach(() => {
+    base = makeProjectDir();
+  });
+
+  afterEach(() => {
+    if (base) rmSync(base, { recursive: true, force: true });
+  });
+
+  test("resolveExpectedArtifactPathForScope path is unchanged after process.chdir", (t) => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    const pathBefore = resolveExpectedArtifactPathForScope(scope, "plan-milestone", "M001");
+
+    const originalCwd = process.cwd();
+    const altDir = mkdtempSync(join(tmpdir(), "gsd-cwd-alt-"));
+    t.after(() => {
+      process.chdir(originalCwd);
+      rmSync(altDir, { recursive: true, force: true });
+    });
+
+    process.chdir(altDir);
+
+    const pathAfter = resolveExpectedArtifactPathForScope(scope, "plan-milestone", "M001");
+
+    assert.equal(
+      pathAfter,
+      pathBefore,
+      "artifact path must not change after cwd drift",
+    );
+  });
+
+  test("isGhostMilestoneByScope result is consistent before and after process.chdir", (t) => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    // No DB, no content files — should be ghost
+    const resultBefore = isGhostMilestoneByScope(scope);
+
+    const originalCwd = process.cwd();
+    const altDir = mkdtempSync(join(tmpdir(), "gsd-cwd-alt2-"));
+    t.after(() => {
+      process.chdir(originalCwd);
+      rmSync(altDir, { recursive: true, force: true });
+    });
+
+    process.chdir(altDir);
+
+    const resultAfter = isGhostMilestoneByScope(scope);
+
+    assert.equal(
+      resultAfter,
+      resultBefore,
+      "isGhostMilestoneByScope result must be consistent across cwd change",
+    );
+  });
+});
+
+// ─── Suite: isGhostMilestoneByScope behavior ─────────────────────────────────
+
+describe("validator-scope-parity: isGhostMilestoneByScope correctness", () => {
+  let base: string;
+
+  beforeEach(() => {
+    base = makeProjectDir();
+  });
+
+  afterEach(() => {
+    if (base) rmSync(base, { recursive: true, force: true });
+  });
+
+  test("isGhostMilestoneByScope returns true for milestone dir with no content files", () => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    // M001 dir exists (created in beforeEach) but has no CONTEXT/ROADMAP/SUMMARY
+    assert.equal(
+      isGhostMilestoneByScope(scope),
+      true,
+      "empty milestone dir with no content files should be ghost",
+    );
+  });
+
+  test("isGhostMilestoneByScope returns false when CONTEXT.md exists", (t) => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    // Write CONTEXT.md so the milestone is no longer a ghost
+    writeFileSync(scope.contextFile(), "# M001: Test\n\nContext.\n");
+    t.after(() => {
+      try { unlinkSync(scope.contextFile()); } catch {}
+    });
+
+    assert.equal(
+      isGhostMilestoneByScope(scope),
+      false,
+      "milestone with CONTEXT.md should not be ghost",
+    );
+  });
+});
+
+// ─── Suite: worktree path resolves to canonical project root ─────────────────
+
+describe("validator-scope-parity: scope uses canonical projectRoot not worktree path", () => {
+  let base: string;
+
+  beforeEach(() => {
+    base = makeProjectDir("gsd-wt-parity-");
+  });
+
+  afterEach(() => {
+    if (base) rmSync(base, { recursive: true, force: true });
+  });
+
+  test("scope.workspace.projectRoot equals the input base for a non-worktree project", () => {
+    const ws = createWorkspace(base);
+    // For a plain project (not a worktree), projectRoot should be the realpath of base
+    assert.equal(
+      ws.projectRoot,
+      realpathSync(base),
+      "projectRoot must be realpath of the input base for a non-worktree project",
+    );
+  });
+
+  test("validator wrapper paths are rooted at scope.workspace.projectRoot, not at a worktree dir", () => {
+    // Simulate calling with a workspace that has projectRoot set.
+    // The validator should use projectRoot, not a different runtime path.
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    const artifactPath = resolveExpectedArtifactPathForScope(scope, "plan-milestone", "M001");
+
+    assert.ok(
+      artifactPath!.startsWith(scope.workspace.projectRoot),
+      `artifact path '${artifactPath}' must be rooted at projectRoot '${scope.workspace.projectRoot}'`,
+    );
+  });
+
+  test("verifyExpectedArtifactForScope uses projectRoot: returns false for non-existent artifact", () => {
+    const ws = createWorkspace(base);
+    const scope = scopeMilestone(ws, "M001");
+
+    // The artifact does not exist on disk yet
+    const ready = verifyExpectedArtifactForScope(scope, "plan-milestone", "M001");
+    assert.equal(
+      ready,
+      false,
+      "verifyExpectedArtifactForScope should return false when artifact is absent",
+    );
+  });
+});

package/src/resources/extensions/gsd/tests/workflow-logger-wiring.test.ts

@@ -205,17 +205,22 @@ test("readTransaction logs ROLLBACK failures as split-brain signal", () => {
   );
 });
 
-// ─── Runtime: state.ts and workflow-projections.ts log silent bailouts ─────
+// ─── Runtime: startup/projection diagnostics stay explicit ─────────────────
 
-test("state.ts logs roadmap read failures instead of silently continuing", () => {
-  const stateSrc = readFileSync(
-    join(import.meta.dirname, "..", "state.ts"),
+test("auto-start initializes the DB without implicit markdown migration", () => {
+  const autoStartSrc = readFileSync(
+    join(import.meta.dirname, "..", "auto-start.ts"),
     "utf-8",
   );
+  assert.doesNotMatch(
+    autoStartSrc,
+    /migrateFromMarkdown|md-importer/,
+    "auto-start must not import markdown into the runtime DB implicitly",
+  );
   assert.match(
-    stateSrc,
-    /logWarning\("state",\s*"reconcileDiskToDb: roadmap read failed/,
-    "state.ts reconcileDiskToDb should log roadmap read failures",
+    autoStartSrc,
+    /failed to initialize project database/,
+    "DB initialization failures should still be logged",
   );
 });