gsd-pi 2.80.0-dev.fbe7c8c6f → 2.81.0

package/dist/resources/extensions/gsd/bootstrap/system-context.js

@@ -1,3 +1,5 @@
+// Project/App: GSD-2
+// File Purpose: System prompt and hidden context bootstrap for GSD sessions.
 import { existsSync, readFileSync, unlinkSync } from "node:fs";
 import { join } from "node:path";
 import { logWarning } from "../workflow-logger.js";
@@ -17,6 +19,11 @@ import { formatOverridesSection, formatShortcut, loadActiveOverrides, loadFile,
 import { toPosixPath } from "../../shared/mod.js";
 import { autoEnableCmuxPreferences } from "../commands-cmux.js";
 import { gsdHome } from "../gsd-home.js";
+const DEFAULT_CONTEXT_MESSAGE_MAX_CHARS = 4_000;
+const DEFAULT_KNOWLEDGE_MAX_CHARS = 12_000;
+const DEFAULT_CODEBASE_MAX_CHARS = 8_000;
+const MIN_CONTEXT_MESSAGE_MAX_CHARS = 1_000;
+const MIN_KNOWLEDGE_MAX_CHARS = 1_000;
 /**
  * Bundled skill triggers — resolved dynamically at runtime instead of
  * hardcoding absolute paths in the system prompt template. Only skills
@@ -135,7 +142,6 @@ export async function buildBeforeAgentStartResult(event, ctx) {
     catch (e) {
         logWarning("bootstrap", `decisions backfill failed: ${e.message}`);
     }
-    const memoryBlock = await loadMemoryBlock(event.prompt ?? "");
     let newSkillsBlock = "";
     if (hasSkillSnapshot()) {
         const newSkills = detectNewSkills();
@@ -165,11 +171,10 @@ export async function buildBeforeAgentStartResult(event, ctx) {
             if (rawContent) {
                 // Cap injection size to ~2 000 tokens to avoid bloating every request.
                 // Full map is always available at .gsd/CODEBASE.md.
-                const MAX_CODEBASE_CHARS = 8_000;
                 const generatedMatch = rawContent.match(/Generated: (\S+)/);
                 const generatedAt = generatedMatch?.[1] ?? "unknown";
-                const content = rawContent.length > MAX_CODEBASE_CHARS
-                    ? rawContent.slice(0, MAX_CODEBASE_CHARS) + "\n\n*(truncated — see .gsd/CODEBASE.md for full map)*"
+                const content = rawContent.length > DEFAULT_CODEBASE_MAX_CHARS
+                    ? rawContent.slice(0, DEFAULT_CODEBASE_MAX_CHARS) + "\n\n*(truncated — see .gsd/CODEBASE.md for full map)*"
                     : rawContent;
                 codebaseBlock = `\n\n[PROJECT CODEBASE — File structure and descriptions (generated ${generatedAt}, auto-refreshed when GSD detects tracked file changes; use /gsd codebase stats for status)]\n\n${content}`;
             }
@@ -180,6 +185,9 @@ export async function buildBeforeAgentStartResult(event, ctx) {
     }
     warnDeprecatedAgentInstructions();
     const injection = await buildGuidedExecuteContextInjection(event.prompt, process.cwd());
+    const memoryBlock = await loadMemoryBlock(event.prompt ?? "", {
+        includePromptRelevant: !(injection && isLowEntropyResumePrompt(event.prompt ?? "")),
+    });
     // Re-inject forensics context on follow-up turns (#2941)
     const forensicsInjection = !injection ? buildForensicsContextInjection(process.cwd(), event.prompt) : null;
     const worktreeBlock = buildWorktreeContextBlock();
@@ -188,12 +196,9 @@ export async function buildBeforeAgentStartResult(event, ctx) {
         ? `\n\n## Subagent Model\n\nWhen spawning subagents via the \`subagent\` tool, always pass \`model: "${subagentModelConfig.primary}"\` in the tool call parameters. Never omit this — always specify it explicitly.`
         : "";
     // memoryBlock is FTS-queried against the user prompt and changes per call.
-    // Removing it from `fullSystem` keeps the system-prompt cache breakpoint
-    // stable across calls — the only scoped goal of this fix. The pi-ai
-    // Anthropic adapter additionally cache-marks the last user turn, so the
-    // memoryBlock injected via the context message may itself be cached up to
-    // that boundary; that's orthogonal and unchanged from prior behavior. The
-    // load-bearing win here is preserving the system+tools cache hit. (#5019)
+    // Keeping it out of `fullSystem` preserves provider prompt-cache stability
+    // for the static system/tool prefix. The dynamic memory block rides the
+    // volatile context message instead. (#5019)
     const fullSystem = `${event.systemPrompt}\n\n[SYSTEM CONTEXT — GSD]\n\n${systemContent}${preferenceBlock}${knowledgeBlock}${codebaseBlock}${newSkillsBlock}${worktreeBlock}${subagentModelBlock}`;
     stopContextTimer({
         systemPromptSize: fullSystem.length,
@@ -217,20 +222,49 @@ export async function buildBeforeAgentStartResult(event, ctx) {
  * filesystem and DB dependencies to exercise this routing logic in-place.
  */
 export function buildContextMessage(opts) {
-    const memoryContent = opts.memoryBlock.trim();
+    const contextCharLimit = getContextMessageCharLimit();
+    const memoryContent = markMemoryContextSupplied(opts.memoryBlock.trim());
     if (opts.injection) {
-        const content = memoryContent ? `${memoryContent}\n\n${opts.injection}` : opts.injection;
+        const content = limitContextMessageContent(memoryContent ? `${memoryContent}\n\n${opts.injection}` : opts.injection, contextCharLimit);
         return { customType: "gsd-guided-context", content, display: false };
     }
     if (opts.forensicsInjection) {
-        const content = memoryContent ? `${memoryContent}\n\n${opts.forensicsInjection}` : opts.forensicsInjection;
+        const content = limitContextMessageContent(memoryContent ? `${memoryContent}\n\n${opts.forensicsInjection}` : opts.forensicsInjection, contextCharLimit);
         return { customType: "gsd-forensics", content, display: false };
     }
     if (memoryContent) {
-        return { customType: "gsd-memory", content: memoryContent, display: false };
+        return {
+            customType: "gsd-memory",
+            content: limitContextMessageContent(memoryContent, contextCharLimit),
+            display: false,
+        };
     }
     return null;
 }
+function getContextMessageCharLimit() {
+    const raw = process.env.PI_GSD_CONTEXT_MAX_CHARS;
+    if (!raw)
+        return DEFAULT_CONTEXT_MESSAGE_MAX_CHARS;
+    if (raw === "0")
+        return null;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed < MIN_CONTEXT_MESSAGE_MAX_CHARS) {
+        return DEFAULT_CONTEXT_MESSAGE_MAX_CHARS;
+    }
+    return Math.floor(parsed);
+}
+function limitContextMessageContent(content, limit) {
+    if (!limit || content.length <= limit)
+        return content;
+    const suffix = "\n\n[GSD Context Truncated]\nFull context is available from the referenced .gsd files and tools; read on demand only if this excerpt lacks required evidence.";
+    const headBudget = Math.max(0, limit - suffix.length);
+    return `${content.slice(0, headBudget).trimEnd()}${suffix}`;
+}
+function markMemoryContextSupplied(memoryContent) {
+    if (!memoryContent)
+        return "";
+    return `[GSD Context Metadata]\n- Memory supplied: yes\n\n${memoryContent}`;
+}
 /**
  * ADR-013 step 4 — auto-injection parity for the memories table.
  *
@@ -249,7 +283,7 @@ export function buildContextMessage(opts) {
  * with a token-budget cap. Failures degrade gracefully — the function never
  * throws and returns "" so the system prompt construction continues.
  */
-export async function loadMemoryBlock(userPrompt) {
+export async function loadMemoryBlock(userPrompt, opts = {}) {
     try {
         const { formatMemoriesForPrompt, getActiveMemoriesRanked, queryMemoriesRanked } = await import("../memory-store.js");
         // Categories that belong in every turn. Pre-ADR-013 this was just
@@ -268,7 +302,7 @@ export async function loadMemoryBlock(userPrompt) {
         const criticalIds = new Set(critical.map((m) => m.id));
         let relevant = [];
         const trimmed = userPrompt.trim();
-        if (trimmed) {
+        if (trimmed && opts.includePromptRelevant !== false) {
             const hits = queryMemoriesRanked({ query: trimmed, k: QUERY_K });
             relevant = hits.map((h) => h.memory).filter((m) => !criticalIds.has(m.id));
         }
@@ -319,15 +353,37 @@ export function loadKnowledgeBlock(gsdHomeDir, cwd) {
         return { block: "", globalSizeKb: 0 };
     }
     const parts = [];
-    if (globalKnowledge)
-        parts.push(`## Global Knowledge\n\n${globalKnowledge}`);
-    if (projectKnowledge)
-        parts.push(`## Project Knowledge\n\n${projectKnowledge}`);
+    if (globalKnowledge) {
+        parts.push(`## Global Knowledge\nSource: \`${globalKnowledgePath}\`\n\n${globalKnowledge}`);
+    }
+    if (projectKnowledge) {
+        parts.push(`## Project Knowledge\nSource: \`${knowledgePath}\`\n\n${projectKnowledge}`);
+    }
+    const body = limitKnowledgeBlock(parts.join("\n\n"), getKnowledgeCharLimit());
     return {
-        block: `\n\n[KNOWLEDGE — Rules, patterns, and lessons learned]\n\n${parts.join("\n\n")}`,
+        block: `\n\n[KNOWLEDGE — Rules, patterns, and lessons learned]\n\n${body}`,
         globalSizeKb,
     };
 }
+function getKnowledgeCharLimit() {
+    const raw = process.env.PI_GSD_KNOWLEDGE_MAX_CHARS;
+    if (!raw)
+        return DEFAULT_KNOWLEDGE_MAX_CHARS;
+    if (raw === "0")
+        return null;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed < MIN_KNOWLEDGE_MAX_CHARS) {
+        return DEFAULT_KNOWLEDGE_MAX_CHARS;
+    }
+    return Math.floor(parsed);
+}
+function limitKnowledgeBlock(content, limit) {
+    if (!limit || content.length <= limit)
+        return content;
+    const suffix = "\n\n[Knowledge Truncated]\nFull KNOWLEDGE.md content remains available at the source path(s) above; read on demand only if this excerpt lacks a required rule.";
+    const headBudget = Math.max(0, limit - suffix.length);
+    return `${content.slice(0, headBudget).trimEnd()}${suffix}`;
+}
 function buildWorktreeContextBlock() {
     const worktreeName = getActiveWorktreeName();
     const worktreeMainCwd = getWorktreeOriginalCwd();
@@ -376,6 +432,10 @@ function buildWorktreeContextBlock() {
  * Tested against the trimmed, lowercased prompt with trailing punctuation stripped.
  */
 const RESUME_INTENT_PATTERNS = /^(continue|resume|ok|go|go ahead|proceed|keep going|carry on|next|yes|yeah|yep|sure|do it|let's go|pick up where you left off)$/;
+export function isLowEntropyResumePrompt(prompt) {
+    const trimmed = prompt.trim().toLowerCase().replace(/[.!?,]+$/g, "");
+    return RESUME_INTENT_PATTERNS.test(trimmed);
+}
 async function buildGuidedExecuteContextInjection(prompt, basePath) {
     const ensureStateDbOpen = async () => {
         const { ensureDbOpen } = await import("./dynamic-tools.js");
@@ -402,8 +462,7 @@ async function buildGuidedExecuteContextInjection(prompt, basePath) {
     // control/help/diagnostic prompts with unrelated execution context.
     // Phase-gated: only fire during "executing" to avoid misrouting during
     // replanning, gate evaluation, or other non-execution phases.
-    const trimmed = prompt.trim().toLowerCase().replace(/[.!?,]+$/g, "");
-    if (RESUME_INTENT_PATTERNS.test(trimmed)) {
+    if (isLowEntropyResumePrompt(prompt)) {
         await ensureStateDbOpen();
         const state = await deriveState(basePath);
         if (state.phase === "executing" && state.activeTask && state.activeMilestone && state.activeSlice) {

package/dist/resources/extensions/gsd/bootstrap/write-gate.js

@@ -1,4 +1,5 @@
-import { copyFileSync, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+// GSD2 - Write gate runtime persistence and policy guards.
+import { copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { minimatch } from "minimatch";
 import { getIsolationMode } from "../preferences.js";
@@ -116,6 +117,22 @@ function shouldPersistWriteGateSnapshot(env = process.env) {
 function writeGateSnapshotPath(basePath) {
     return join(basePath, ".gsd", "runtime", "write-gate-state.json");
 }
+function ensureWriteGateSnapshotDirectory(basePath) {
+    const gsdPath = join(basePath, ".gsd");
+    if (!existsSync(gsdPath)) {
+        try {
+            const stat = lstatSync(gsdPath);
+            if (stat.isSymbolicLink()) {
+                const target = readlinkSync(gsdPath);
+                mkdirSync(isAbsolute(target) ? target : resolve(basePath, target), { recursive: true });
+            }
+        }
+        catch {
+            // If .gsd truly does not exist, the runtime mkdir below will create it.
+        }
+    }
+    mkdirSync(join(gsdPath, "runtime"), { recursive: true });
+}
 function currentWriteGateSnapshot(basePath = process.cwd()) {
     const state = getWriteGateState(basePath);
     return {
@@ -129,7 +146,7 @@ function persistWriteGateSnapshot(basePath) {
     if (!shouldPersistWriteGateSnapshot())
         return;
     const path = writeGateSnapshotPath(basePath);
-    mkdirSync(join(basePath, ".gsd", "runtime"), { recursive: true });
+    ensureWriteGateSnapshotDirectory(basePath);
     const tempPath = `${path}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}.tmp`;
     writeFileSync(tempPath, JSON.stringify(currentWriteGateSnapshot(basePath), null, 2), "utf-8");
     try {

package/dist/resources/extensions/gsd/clean-root-preflight.js

@@ -3,13 +3,13 @@
  *
  * #2909: Adds a fast-path git status check before milestone completion merges.
  * When the working tree is dirty the user is warned and changes are auto-stashed
- * so the merge can proceed cleanly.  After the merge completes, postflightPopStash
- * restores the stashed changes.
+ * so the merge can proceed cleanly. After the merge completes, postflightPopStash
+ * restores the stashed changes and reports whether manual recovery is needed.
  *
  * Design constraints (from Trek-e approval):
  *  - Warn the user before stashing (no silent surprises)
  *  - git stash push / git stash pop only — no custom stash management layer
- *  - Stash/pop errors are logged but MUST NOT block the merge
+ *  - Stash/pop errors are logged but MUST NOT block the merge itself
  *  - Fast-path status check — clean trees pay no extra cost
  */
 import { execFileSync } from "node:child_process";
@@ -98,7 +98,8 @@ export function preflightCleanRoot(basePath, milestoneId, notify) {
  *
  * Only called when preflightCleanRoot returned stashPushed=true.
  * Any pop error (e.g. conflict) is logged and notified but does NOT throw —
- * the merge already completed successfully.
+ * the merge already completed successfully. Callers must treat
+ * needsManualRecovery=true as a dirty workspace stop, not a clean completion.
  */
 export function postflightPopStash(basePath, milestoneId, stashMarker, notify) {
     let stashRef = null;
@@ -108,7 +109,11 @@ export function postflightPopStash(basePath, milestoneId, stashMarker, notify) {
             const msg = `No matching GSD preflight stash found for milestone ${milestoneId}; leaving stash list untouched.`;
             logWarning("preflight", msg);
             notify(msg, "warning");
-            return;
+            return {
+                restored: false,
+                needsManualRecovery: true,
+                message: msg,
+            };
         }
         execFileSync("git", ["stash", "pop", stashRef], {
             cwd: basePath,
@@ -116,7 +121,14 @@ export function postflightPopStash(basePath, milestoneId, stashMarker, notify) {
             encoding: "utf-8",
             env: GIT_NO_PROMPT_ENV,
         });
-        notify(`Restored stashed changes after milestone ${milestoneId} merge.`, "info");
+        const msg = `Restored stashed changes after milestone ${milestoneId} merge.`;
+        notify(msg, "info");
+        return {
+            restored: true,
+            needsManualRecovery: false,
+            message: msg,
+            stashRef,
+        };
     }
     catch (err) {
         // Pop conflicts mean the merged code collides with the stashed changes.
@@ -127,5 +139,11 @@ export function postflightPopStash(basePath, milestoneId, stashMarker, notify) {
         const msg = `git stash pop ${stashRef ?? ""}`.trim() + ` failed after merge of milestone ${milestoneId}: ${err instanceof Error ? err.message : String(err)}. ${restoreHint}`;
         logWarning("preflight", msg);
         notify(msg, "warning");
+        return {
+            restored: false,
+            needsManualRecovery: true,
+            message: msg,
+            ...(stashRef ? { stashRef } : {}),
+        };
     }
 }

package/dist/resources/extensions/gsd/commands/handlers/ops.js

@@ -12,7 +12,7 @@ import { handleRemote } from "../../../remote-questions/mod.js";
 import { handleShip } from "../../commands-ship.js";
 import { handleSessionReport } from "../../commands-session-report.js";
 import { handlePrBranch } from "../../commands-pr-branch.js";
-import { projectRoot } from "../context.js";
+import { currentDirectoryRoot, projectRoot } from "../context.js";
 export async function handleOpsCommand(trimmed, ctx, pi) {
     if (trimmed === "init") {
         const { detectProjectState } = await import("../../detection.js");
@@ -114,7 +114,7 @@ export async function handleOpsCommand(trimmed, ctx, pi) {
         return true;
     }
     if (trimmed === "triage") {
-        await handleTriage(ctx, pi, process.cwd());
+        await handleTriage(ctx, pi, currentDirectoryRoot());
         return true;
     }
     if (trimmed === "config") {

package/dist/resources/extensions/gsd/commands-config.js

@@ -19,7 +19,7 @@ export const TOOL_KEYS = [
     { id: "jina", env: "JINA_API_KEY", label: "Jina Page Extract", hint: "jina.ai/api" },
     { id: "groq", env: "GROQ_API_KEY", label: "Groq Voice", hint: "console.groq.com" },
 ];
-function getStoredToolKey(auth, providerId) {
+export function getStoredToolKey(auth, providerId) {
     const creds = auth.getCredentialsForProvider(providerId);
     const cred = creds.find((c) => c.type === "api_key" && c.key);
     return cred?.type === "api_key" ? cred.key : undefined;

package/dist/resources/extensions/gsd/commands-eval-review.js

@@ -23,7 +23,7 @@
  *   6. Silent flag stripping — token-level argument parser; unknown
  *      `--*` tokens raise an explicit error.
  */
-import { existsSync } from "node:fs";
+import { existsSync, realpathSync } from "node:fs";
 import { open, readFile } from "node:fs/promises";
 import { join, relative } from "node:path";
 import { buildSliceFileName, resolveMilestonePath, resolveSliceFile, resolveSlicePath, } from "./paths.js";
@@ -194,7 +194,7 @@ export async function buildEvalReviewContext(state, milestoneId, now = () => new
         }
     }
     const truncated = summaryRead.truncated || specTruncated;
-    const outputPath = evalReviewWritePath(state.sliceDir, state.sliceId);
+    const outputPath = evalReviewWritePath(realpathSync(state.sliceDir), state.sliceId);
     const basePath = projectRoot();
     const relativeOutputPath = relative(basePath, outputPath);
     return {

package/dist/resources/extensions/gsd/commands-handlers.js

@@ -17,6 +17,8 @@ import { isAutoActive, checkRemoteAutoSession } from "./auto.js";
 import { getAutoWorktreePath } from "./auto-worktree.js";
 import { currentDirectoryRoot, projectRoot } from "./commands/context.js";
 import { loadPrompt } from "./prompt-loader.js";
+import { buildDoctorHealIssuePayload, buildDoctorHealSummary, buildWorkflowDispatchContent, } from "./workflow-protocol.js";
+import { restoreGsdWorkflowTools, scopeGsdWorkflowToolsForDispatch, } from "./bootstrap/register-hooks.js";
 const UPDATE_REGISTRY_URL = "https://registry.npmjs.org/gsd-pi/latest";
 const UPDATE_FETCH_TIMEOUT_MS = 5000;
 // Detects a bun-installed gsd via `process.argv[1]`. Mirrors isBunInstall in
@@ -64,13 +66,19 @@ export function dispatchDoctorHeal(pi, scope, reportText, structuredIssues) {
     const workflowPath = process.env.GSD_WORKFLOW_PATH ?? join(gsdHome(), "agent", "GSD-WORKFLOW.md");
     const workflow = readFileSync(workflowPath, "utf-8");
     const prompt = loadPrompt("doctor-heal", {
-        doctorSummary: reportText,
-        structuredIssues,
+        doctorSummary: buildDoctorHealSummary(reportText),
+        structuredIssues: buildDoctorHealIssuePayload(structuredIssues),
         scopeLabel: scope ?? "active milestone / blocking scope",
         doctorCommandSuffix: scope ? ` ${scope}` : "",
     });
-    const content = `Read the following GSD workflow protocol and execute exactly.\n\n${workflow}\n\n## Your Task\n\n${prompt}`;
-    pi.sendMessage({ customType: "gsd-doctor-heal", content, display: false }, { triggerTurn: true });
+    const content = buildWorkflowDispatchContent({ workflow, workflowPath, task: prompt });
+    const savedTools = scopeGsdWorkflowToolsForDispatch(pi);
+    try {
+        pi.sendMessage({ customType: "gsd-doctor-heal", content, display: false }, { triggerTurn: true });
+    }
+    finally {
+        restoreGsdWorkflowTools(pi, savedTools);
+    }
 }
 /** Parse doctor command args into structured flags and positionals (pure, no I/O). */
 export function parseDoctorArgs(args) {
@@ -213,11 +221,17 @@ export async function handleTriage(ctx, pi, basePath) {
     });
     const workflowPath = process.env.GSD_WORKFLOW_PATH ?? join(gsdHome(), "agent", "GSD-WORKFLOW.md");
     const workflow = readFileSync(workflowPath, "utf-8");
-    pi.sendMessage({
-        customType: "gsd-triage",
-        content: `Read the following GSD workflow protocol and execute exactly.\n\n${workflow}\n\n## Your Task\n\n${prompt}`,
-        display: false,
-    }, { triggerTurn: true });
+    const savedTools = scopeGsdWorkflowToolsForDispatch(pi);
+    try {
+        pi.sendMessage({
+            customType: "gsd-triage",
+            content: buildWorkflowDispatchContent({ workflow, workflowPath, task: prompt }),
+            display: false,
+        }, { triggerTurn: true });
+    }
+    finally {
+        restoreGsdWorkflowTools(pi, savedTools);
+    }
 }
 export async function handleSteer(change, ctx, pi) {
     const basePath = currentDirectoryRoot();

package/dist/resources/extensions/gsd/context-budget.js

@@ -7,7 +7,7 @@
  *
  * @see D001 (module location), D002 (200K fallback), D003 (section-boundary truncation)
  */
-import { getCharsPerToken } from "./token-counter.js";
+import { getCharsPerToken, isAccurateCountingAvailable, countTokensSync, } from "./token-counter.js";
 // ─── Budget ratio constants ──────────────────────────────────────────────────
 // Percentages of total context window allocated to each budget category.
 // These are applied after tokens→chars conversion.
@@ -23,6 +23,22 @@ const CHARS_PER_TOKEN = 4;
 const DEFAULT_CONTEXT_WINDOW = 200_000;
 /** Conservative effective context for Claude Code subscription routing (#4676) */
 const CLAUDE_CODE_EFFECTIVE_CONTEXT_WINDOW = 200_000;
+/**
+ * Cached empirical chars-per-token from a tiktoken probe, keyed by provider.
+ * countTokensSync's fallback path is provider-aware, so we cache per-provider
+ * to preserve that distinction once the encoder warms. The cl100k_base encoder
+ * itself gives a stable ratio for ASCII English so a single probe per provider
+ * key is sufficient. Empty map means "not yet probed" or "encoder unavailable".
+ */
+const _empiricalCharsPerTokenByProvider = new Map();
+/**
+ * Test hook — clears the empirical chars-per-token cache so test cases that
+ * assert against the static char-ratio fallback aren't polluted by a prior
+ * tiktoken-warmed run in the same process. Production code must not call this.
+ */
+export function _resetEmpiricalCacheForTest() {
+    _empiricalCharsPerTokenByProvider.clear();
+}
 /** Percentage of context consumed before suggesting a continue-here checkpoint */
 const CONTINUE_THRESHOLD_PERCENT = 70;
 // ─── Task count bounds ───────────────────────────────────────────────────────
@@ -46,7 +62,26 @@ const TASK_COUNT_TIERS = [
 export function computeBudgets(contextWindow, provider) {
     const effectiveWindow = contextWindow > 0 ? contextWindow : DEFAULT_CONTEXT_WINDOW;
     const charsPerToken = provider ? getCharsPerToken(provider) : CHARS_PER_TOKEN;
-    const totalChars = effectiveWindow * charsPerToken;
+    // Prefer the tiktoken encoder for total-char estimation when it has been
+    // warmed (initTokenCounter resolved). The cl100k_base ratio is stable for
+    // ASCII English, so probe once per provider and cache — computeBudgets is
+    // called multiple times per prompt build and the probe encode is otherwise
+    // wasted work.
+    let totalChars;
+    if (isAccurateCountingAvailable()) {
+        const providerKey = provider ?? "__default__";
+        let empirical = _empiricalCharsPerTokenByProvider.get(providerKey);
+        if (empirical === undefined) {
+            const probe = "the quick brown fox jumps over the lazy dog ".repeat(64);
+            const probeTokens = countTokensSync(probe, provider);
+            empirical = probeTokens > 0 ? probe.length / probeTokens : charsPerToken;
+            _empiricalCharsPerTokenByProvider.set(providerKey, empirical);
+        }
+        totalChars = effectiveWindow * empirical;
+    }
+    else {
+        totalChars = effectiveWindow * charsPerToken;
+    }
     return {
         summaryBudgetChars: Math.floor(totalChars * SUMMARY_RATIO),
         inlineContextBudgetChars: Math.floor(totalChars * INLINE_CONTEXT_RATIO),

package/dist/resources/extensions/gsd/crash-recovery.js

@@ -29,6 +29,7 @@ import { _getAdapter, isDbAvailable } from "./gsd-db.js";
 import { gsdRoot, normalizeRealPath } from "./paths.js";
 import { atomicWriteSync } from "./atomic-write.js";
 import { effectiveLockFile } from "./session-lock.js";
+import { isInFlightRuntimePhase, listUnitRuntimeRecords } from "./unit-runtime.js";
 const SESSION_FILE_KV_KEY = "session_file";
 function lockPath(basePath) {
     return join(gsdRoot(basePath), effectiveLockFile());
@@ -72,9 +73,37 @@ function getLatestDispatchForWorker(workerId) {
      LIMIT 1`).get({ ":worker_id": workerId });
     return row ?? null;
 }
-function workerToLockData(worker) {
+function latestInFlightRuntimeRecord(basePath) {
+    const records = listUnitRuntimeRecords(basePath).filter((record) => isInFlightRuntimePhase(record.phase));
+    if (records.length === 0)
+        return null;
+    return records.sort((a, b) => {
+        const bTime = b.updatedAt || b.startedAt || 0;
+        const aTime = a.updatedAt || a.startedAt || 0;
+        return bTime - aTime;
+    })[0] ?? null;
+}
+function runtimeRecordToLockData(worker, record, sessionFile) {
+    const startedAt = Number.isFinite(record.startedAt)
+        ? new Date(record.startedAt).toISOString()
+        : worker.started_at;
+    return {
+        pid: worker.pid,
+        startedAt: worker.started_at,
+        unitType: record.unitType,
+        unitId: record.unitId,
+        unitStartedAt: startedAt,
+        sessionFile,
+    };
+}
+function workerToLockData(basePath, worker) {
     const dispatch = getLatestDispatchForWorker(worker.worker_id);
     const sessionFile = getRuntimeKv("worker", worker.worker_id, SESSION_FILE_KV_KEY) ?? undefined;
+    if (!dispatch) {
+        const runtimeRecord = latestInFlightRuntimeRecord(basePath);
+        if (runtimeRecord)
+            return runtimeRecordToLockData(worker, runtimeRecord, sessionFile);
+    }
     return {
         pid: worker.pid,
         startedAt: worker.started_at,
@@ -172,7 +201,7 @@ export function readCrashLock(basePath) {
             const projectRoot = normalizeRealPath(basePath);
             const stale = findStaleWorkerForProject(projectRoot);
             if (stale)
-                return workerToLockData(stale);
+                return workerToLockData(basePath, stale);
         }
         catch {
             // Fall through to the legacy lock-file compatibility path.
@@ -232,18 +261,32 @@ export function formatCrashInfo(lock) {
 export function emitCrashRecoveredUnitEnd(basePath, lock) {
     if (!lock.unitType || !lock.unitId || lock.unitType === "starting")
         return;
+    emitOpenUnitEndForUnit(basePath, lock.unitType, lock.unitId, "crash-recovered");
+}
+export function emitOpenUnitEndForUnit(basePath, unitType, unitId, status, errorContext) {
     try {
         const all = queryJournal(basePath);
-        const starts = all.filter((e) => e.eventType === "unit-start" && e.data?.unitId === lock.unitId);
+        const starts = all.filter((e) => e.eventType === "unit-start" &&
+            e.data?.unitType === unitType &&
+            e.data?.unitId === unitId);
         if (starts.length === 0)
-            return;
-        const lastStart = starts[starts.length - 1];
+            return false;
+        const lastStart = [...starts].reverse().find((start) => {
+            return !all.some((e) => e.eventType === "unit-end" &&
+                e.data?.unitType === unitType &&
+                e.data?.unitId === unitId &&
+                e.causedBy?.flowId === start.flowId &&
+                e.causedBy?.seq === start.seq);
+        });
+        if (!lastStart)
+            return false;
         const alreadyClosed = all.some((e) => e.eventType === "unit-end" &&
-            e.data?.unitId === lock.unitId &&
+            e.data?.unitType === unitType &&
+            e.data?.unitId === unitId &&
             e.causedBy?.flowId === lastStart.flowId &&
             e.causedBy?.seq === lastStart.seq);
         if (alreadyClosed)
-            return;
+            return false;
         const maxSeq = all
             .filter((e) => e.flowId === lastStart.flowId)
             .reduce((max, e) => Math.max(max, e.seq), lastStart.seq);
@@ -253,16 +296,19 @@ export function emitCrashRecoveredUnitEnd(basePath, lock) {
             seq: maxSeq + 1,
             eventType: "unit-end",
             data: {
-                unitType: lock.unitType,
-                unitId: lock.unitId,
-                status: "crash-recovered",
+                unitType,
+                unitId,
+                status,
                 artifactVerified: false,
+                ...(errorContext ? { errorContext } : {}),
             },
             causedBy: { flowId: lastStart.flowId, seq: lastStart.seq },
         });
+        return true;
     }
     catch {
         // Never throw from crash recovery path.
+        return false;
     }
 }
 /**

package/dist/resources/extensions/gsd/dashboard-overlay.js

@@ -21,7 +21,7 @@ import { estimateTimeRemaining } from "./auto-dashboard.js";
 import { computeProgressScore } from "./progress-score.js";
 import { runEnvironmentChecks } from "./doctor-environment.js";
 import { formattedShortcutPair } from "./shortcut-defs.js";
-function unitLabel(type) {
+export function unitLabel(type) {
     switch (type) {
         case "discuss-milestone":
         case "discuss-slice": return "Discuss";