* fix(#2875): stage user artifacts durably across install wipes (#1874-F19) preserveUserArtifacts held user files only in an in-memory Map across the wipe, so any process death between preserve and restore lost them outright. Seven call sites, not the four the issue records. Three of them never called the helper at all - they open-coded the same read/wipe/write - so searching for callers under-counted by construction; the extra sites were found by sweeping for the pattern instead. The worst is the mainline install path, where the crash window spans the entire gsd-core tree copy rather than a single rmSync. Adds src/user-artifact-staging.cts: durable on-disk staging with a record written after the copies land as the commit point, plus recovery of orphaned batches on the next run - without recovery the staged bytes survive but the user's file is still gone, which would pass its own test while delivering nothing. Routes copyPreservingSymlink through installFs() so staging cannot bypass the install fs seam, and reunites its symlink-safety docblock with the function it documents. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * docs(#2875): amend ADR-3574 with four claims disproved by implementation Implementing Phase 6 disproved four statements the ADR rests on. The central decision - no single materializer - is unaffected and stands. Corrected: decision 3 was already satisfied, so nothing was extracted; the agents-bypass runtime set omitted claude, kilo and opencode, and closing it needed three new pieces of descriptor contract rather than proceeding on its own terms; three of the four blockers the layout comment names were already stale; and F19 is seven call sites, not four. Records the generalizable lesson: the defect is the pattern of holding user data in memory across a wipe, not the helper, so searching for callers of the helper under-counts by construction. Also resolves the ADR's open question on USER_OWNED_ARTIFACTS membership, and notes that copyPreservingSymlink needed routing through the install fs seam before it could be reused. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix(#2875): close dangling-symlink blind spot and harden staging recovery An adversarial review found the F19 staging work shipped red and unsafe. Root cause, shared by two arbitrary-write findings: hasExistingSymlinkBetween missed dangling symlinks in both its root check and its per-segment walk, because it probed with existsSync, which is false for a link whose target does not exist. Fixing only the new module would have reused a guard that was itself blind. This guard protects the whole install tree. Recovery no longer throws: it degrades per entry and per file, so one bad batch cannot block the others. Previously an unrecoverable entry propagated out of the first statement of install and uninstall, before the cleanup that would have removed it - wedging the installer permanently. Partial fs adapters now throw on any omitted method instead of silently reaching the real filesystem, closing the trap that let a test poison list pass while real IO happened. Staged names must be flat, recovery refuses a dangling destination symlink, and a batch whose recovery genuinely failed is no longer swept - it was discarding the only durable copy of the file it had just failed to restore. Replaces three tests that could not fail, including the one labelled negative proof. Known limitation, documented not closed: concurrent installs sharing a staging key can still lose a batch. A real fix needs a cross-process lock. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * enh(#2875): make the descriptor authoritative for the agents kind Deletes the inline agent-staging loop in bin/install.js and the _DESCRIPTOR_AGENTS_RUNTIMES set, so every runtime materializes agents from its capability descriptor instead of an inline hostBehaviors dispatch. Closing it needed three pieces of contract the descriptor pipeline never had, all reducible to one missing input - per-agent resolution context: a frontmatter-extensions step for claude's effort and disallowedTools, per-agent model-override resolution for kilo and opencode, and a named branding converter for hermes, whose rewrite data was already declared. Seven runtimes were on the loop, not the six the design recorded - kimi-code was found by a golden fixture, not by analysis. claude-local and kimi-code both silently lost their agents mid-change; the fixtures caught both and the cause was fixed rather than the fixtures regenerated. A parity harness gates the migration: both pipelines over identical inputs, byte-identical output including filenames, per runtime. It is demonstrated red before being trusted. Surface and install paths converge for all seven, which also fixes surface previously writing no agents for these runtimes. Codex's config.toml strip stays put - it mutates host config, which no descriptor kind models. Also routes install-model-override-resolver and install-effort-resolver through the install fs seam. Both leaked real filesystem IO from the install call tree; the stricter adapter is what exposed them. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * docs(#2875): record the agents-descriptor migration and correct the ADR count The _DESCRIPTOR_AGENTS_RUNTIMES allow-list no longer exists, so the host integration guide told readers to join a set that is gone. Replaces that with what is now true - declare an agents entry and it installs, on the surface path as well as install - and points anyone needing a per-agent transform at the three extension points rather than at a new inline branch. Corrects the ADR amendment: seven runtimes were on the inline loop, not six. kimi-code was found by a golden fixture going red, not by reading. That is the third short count this phase, all from enumerating by symbol or set membership when the thing that matters is a behavior. Adds the Changed changeset for the surface-path convergence. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * docs(#2875): amend ADR-2866 - claude global always wrote agents on disk The claude row's global=[skills] described what capability.json declared, not what the installer wrote. bin/install.js's inline agent-staging loop was never scope-gated and never consulted the descriptor, so a claude --global install has always written agents/gsd-*.md. Phase 6 closes the gap by deleting that loop and declaring agents on claude's descriptor at global scope. On-disk bytes are unchanged - the golden fixtures did not move, which is the evidence that the descriptor, not the installer, was incomplete. #2218 is unaffected: agents are not trigger-bearing, so the wider row does not introduce a new shadowing case. Records the warning that an incomplete descriptor is invisible while a second code path silently does its work, and only surfaces when the two are forced into agreement. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix(#2875): close review findings across staging, agents and the parity harness Two independent reviews of this branch found defects the local gates missed. Security: a dangling symlink at a migration destination allowed writing outside configDir - the same class this change claimed to close, missed at the terminal write of the flow being added. The staging-root resolver threw as the first statement of install and uninstall, so a hostile symlink bricked both, and symlinked-configDir users lost uninstall as well as install; it now degrades instead of aborting. Recovery gained a source-side symlink check and now refuses a relative destDir, which resolved against cwd. Converter dispatch gained a runtime allowlist - lint-time validation stopped mattering once this branch promoted that dispatch from the surface path to real installs. Correctness: claude --local --minimal exited 1 because the minimal profile legitimately yields zero agents and the new path treated that as a failure. cline --local silently lost its agents - its descriptor declared none while the deleted loop wrote them unconditionally. The agents prune was widened to any gsd-* entry and destroyed user files it never owned. The parity harness, on which the migration's safety argument rested, drove a synthetic registry and never byte-compared the shipped descriptors; two of its trap rows could not fail. It now drives the real registry across 13 runtime-scope rows including kimi-code and cline-local, and its red-proof is demonstrated by corrupting a live capability.json. Three goldens that had encoded the cline regression as expected behavior were corrected. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix(#2875): close findings from both mandated review engines /security-review found the staging source-side walk honouring GSD_ALLOW_SYMLINKED_DEST, an opt-in documented as relaxing only the write destination. A symlinked files/ component dereferenced because copyPreservingSymlink lstats the leaf only, so an intermediate link is followed. The source walk no longer honours the opt-in; the destination check still does. /code-review spec axis found this branch had reintroduced its own bug: migrateLegacyDevPreferencesToSkill's new symlink refusal threw unguarded after the legacy dir was wiped and before the staged batch was restored, so a planted symlink bricked uninstall permanently and orphaned the batch. Refusal kept, abort removed. kimi-code local silently lost its agents, the same class as the cline bug, and the parity harness recorded that exclusion as intentional - the third test in this branch to pin a regression as correct. --minimal now creates an empty agents/ dir that never existed. Behaviour restored rather than softening the changeset, so its byte-identical claim stays true. Standards axis: try/finally removed from twelve test bodies, fast-check properties added for parseOwnerPid, boundary coverage at the grace window and the ancestor-probe depth, a parity assertion for the staging-root helper duplicated across two files, and the 8-deep config walk deduplicated. Records 60-review.json with every finding and disposition from five passes, including the smells left unfixed and why. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix(#2875): prune stale agents unconditionally in minimal mode The previous round stopped an empty agents/ directory being created when the resolved profile yields no agents. That was implemented by skipping the agents kind entirely, which also skipped its stale-agent prune - so a full to minimal downgrade left stale gsd-* agents behind. The deleted inline loop pruned unconditionally and only skipped writing. Those are three separate conditions, not one: prune always, write only when there is something to write, create the directory only when writing. Both call sites now run _removeGsdEntries before the empty-staged early exit. The symlink-escape guard moved with it, since the prune also touches dest. Codex .toml agents and the config.toml stanzas are cleaned again, and user-owned agents are still preserved. The agents/ directory is left in place after a prune empties it, matching every sibling kind - none of them remove the destination directory itself. Golden fixtures confirmed byte-identical: the prune is a no-op on a fresh install, so fixture generation is unaffected. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * docs(#2875): document interrupted-install recovery for user-owned files The durable-staging fix is invisible to the user it protects. Someone whose install died mid-flight has no way to know USER-PROFILE.md was staged before the delete, that the next run restores it, or that recovery happens at the start of that run rather than in the background. Written as the task the user has - finish the interrupted command - rather than as a description of the mechanism, and states what it will not do: overwrite a file already present, or touch staging belonging to another install still running. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * chore(#2875): backfill changeset pr number Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * test(#2875): assert the J8 model override without building a regex CodeQL flagged incomplete string escaping: the assertion interpolated the override value into a RegExp while escaping only forward slashes, which is meaningless in a constructor, leaving real metacharacters unescaped. The failure direction was the dangerous one - a metacharacter would have made the match more permissive, so the row would pass when it should fail. That matters here because J8 exists precisely because an earlier revision was a tautology; the rewrite reintroduced a different way for the same assertion to stop discriminating. Replaced with a line-wise exact match, so no regex is constructed at all. Swept the other test files this branch adds; no sibling instances. lint:ci passed on the original - lint-no-adhoc-regex-escape matches a full metachar-escape copy, so a single slash replace slipped under it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> --------- Co-authored-by: sim <sim@local> Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
431 lines
15 KiB
Markdown
431 lines
15 KiB
Markdown
# How to recover and troubleshoot
|
||
|
||
**Goal:** Identify and fix common problems — from lost context and corrupted state to installation failures and permission errors — using a conditional recipe structure.
|
||
|
||
**Prerequisites:** GSD Core is installed. For install problems specifically, see [Install on your runtime](install-on-your-runtime.md).
|
||
|
||
---
|
||
|
||
## Context and session problems
|
||
|
||
### If you have lost track of where you are
|
||
|
||
```bash
|
||
/gsd-progress
|
||
```
|
||
|
||
Reads all state files and tells you exactly where you are and what to do next.
|
||
|
||
To automatically advance to the correct next step:
|
||
|
||
```bash
|
||
/gsd-progress --next
|
||
```
|
||
|
||
### If you are starting a new session and need to restore context
|
||
|
||
```bash
|
||
/gsd-resume-work
|
||
```
|
||
|
||
Restores your full session context from the last handoff, including current phase, planning decisions, and where work stopped.
|
||
|
||
### If quality is dropping during a long session
|
||
|
||
Clear your context window between major commands:
|
||
|
||
```bash
|
||
/clear
|
||
```
|
||
|
||
Then restore state:
|
||
|
||
```bash
|
||
/gsd-resume-work
|
||
```
|
||
|
||
GSD is designed around fresh contexts. Every subagent already gets a clean 200k window. The main session degrades over time — clearing it and resuming is the correct remedy, not pushing on.
|
||
|
||
### If you want to save context before stopping
|
||
|
||
```bash
|
||
/gsd-pause-work
|
||
```
|
||
|
||
Creates `.planning/HANDOFF.json` with your current position. Add `--report` to also write a post-session summary to `.planning/reports/`:
|
||
|
||
```bash
|
||
/gsd-pause-work --report
|
||
```
|
||
|
||
---
|
||
|
||
## Planning integrity problems
|
||
|
||
### If `.planning/` integrity is uncertain
|
||
|
||
```bash
|
||
/gsd-health
|
||
```
|
||
|
||
Reports status across errors, warnings, and informational notes:
|
||
|
||
| Status | Meaning |
|
||
|--------|---------|
|
||
| `HEALTHY` | All expected artefacts present and well-formed |
|
||
| `DEGRADED` | Warnings that should be addressed but work can continue |
|
||
| `BROKEN` | Critical errors that will block execution |
|
||
|
||
Common auto-repairable issues (errors E004, E005; warnings W003, W008):
|
||
|
||
```bash
|
||
/gsd-health --repair
|
||
```
|
||
|
||
This recreates missing `STATE.md`, resets a corrupt `config.json` to defaults, and adds any missing configuration keys. It will not overwrite `PROJECT.md` or `ROADMAP.md`.
|
||
|
||
### If STATE.md references a phase that does not exist
|
||
|
||
This produces warning `W002`. Use the state CLI to diagnose and repair:
|
||
|
||
```bash
|
||
node "$HOME/.claude/gsd-core/bin/gsd-tools.cjs" state validate
|
||
```
|
||
|
||
Preview what a sync would change without writing:
|
||
|
||
```bash
|
||
node "$HOME/.claude/gsd-core/bin/gsd-tools.cjs" state sync --verify
|
||
```
|
||
|
||
Apply the sync:
|
||
|
||
```bash
|
||
node "$HOME/.claude/gsd-core/bin/gsd-tools.cjs" state sync
|
||
```
|
||
|
||
These commands reconstruct `STATE.md` from actual project state on disk. They replace manual `STATE.md` editing.
|
||
|
||
### If you see "Project already initialised"
|
||
|
||
`.planning/PROJECT.md` already exists. `/gsd-new-project` is a safety check. If you genuinely want to start over, delete the `.planning/` directory first:
|
||
|
||
```bash
|
||
rm -rf .planning/
|
||
```
|
||
|
||
Then re-run `/gsd-new-project`.
|
||
|
||
### If context-window utilisation is high
|
||
|
||
```bash
|
||
/gsd-health --context
|
||
```
|
||
|
||
Probes the context-window utilisation guard. Warns at 60 %, critical at 70 %. If you are above the warning threshold, run `/clear` followed by `/gsd-resume-work` before starting the next major command.
|
||
|
||
---
|
||
|
||
## Execution problems
|
||
|
||
### If an executor gets "Permission denied" on Bash commands
|
||
|
||
GSD's `gsd-executor` subagents need write-capable Bash access. Add the required patterns to `~/.claude/settings.json` under `permissions.allow`. At minimum:
|
||
|
||
```json
|
||
"Bash(git add:*)",
|
||
"Bash(git commit:*)",
|
||
"Bash(git merge:*)",
|
||
"Bash(git checkout:*)"
|
||
```
|
||
|
||
For stack-specific patterns (Rails, Python, Node, Rust), see the full table in `docs/USER-GUIDE.md` under "Executor Subagent Gets Permission denied".
|
||
|
||
Per-project alternative: add the same block to `.claude/settings.local.json` in your project root.
|
||
|
||
### If execution fails or produces stubs
|
||
|
||
Check whether the plan is too ambitious. Plans should have two or three tasks at most. If tasks are too large they exceed what a single context window can produce reliably. Re-plan the phase with smaller scope:
|
||
|
||
```bash
|
||
/gsd-plan-phase 1
|
||
```
|
||
|
||
For systematic diagnosis of what went wrong, see [Debug a failed execution](debug-a-failed-execution.md).
|
||
|
||
### If you see "FATAL: worktree base mismatch" or the exit-42 warning
|
||
|
||
This happens when your current branch is ahead of the repository's default branch (for example, an unmerged milestone or feature branch). Claude Code forks executor worktrees from `origin/HEAD`, not your `HEAD`, so plan files that exist only on your branch are absent inside the worktree.
|
||
|
||
Since the fix landed, GSD automatically degrades to sequential execution on the main working tree and prints a one-line warning — the phase will complete without any action from you. To restore parallel execution permanently, run:
|
||
|
||
```bash
|
||
node "$HOME/.claude/gsd-core/bin/gsd-tools.cjs" worktree set-baseref
|
||
```
|
||
|
||
For a full explanation and all available options, see [Fix the worktree base-mismatch (exit 42) error](fix-worktree-base-mismatch.md).
|
||
|
||
### If parallel execution causes build lock errors or pre-commit hook failures
|
||
|
||
This is caused by multiple agents triggering build tools simultaneously. GSD handles this automatically since v1.26. If you are on an older version, or still seeing contention, disable parallel execution:
|
||
|
||
```bash
|
||
/gsd-settings
|
||
```
|
||
|
||
Set `parallelization.enabled` to `false`.
|
||
|
||
### If a subagent appears to fail but commits were made
|
||
|
||
Check git log before concluding something broke:
|
||
|
||
```bash
|
||
git log --oneline -10
|
||
```
|
||
|
||
A known Claude Code classification bug can report failure while work succeeded. GSD's orchestrators spot-check actual output, but if you see a mismatch, the commits are the ground truth.
|
||
|
||
---
|
||
|
||
## Plan and phase problems
|
||
|
||
### If plans seem wrong or misaligned with your intent
|
||
|
||
Run `/gsd-discuss-phase N` before planning. Most plan quality issues come from assumptions that `CONTEXT.md` would have prevented:
|
||
|
||
```bash
|
||
/gsd-discuss-phase 1
|
||
```
|
||
|
||
To see what assumptions GSD is currently making without starting a full session:
|
||
|
||
```bash
|
||
/gsd-discuss-phase 3 --assumptions
|
||
```
|
||
|
||
### If you need to change something after execution
|
||
|
||
Do not re-run `/gsd-execute-phase`. Use `/gsd-quick` for targeted fixes:
|
||
|
||
```bash
|
||
/gsd-quick "Fix the login button not responding on mobile Safari"
|
||
```
|
||
|
||
Or use `/gsd-verify-work N` to systematically identify and fix issues through UAT.
|
||
|
||
### If a command appears frozen at "Spawning…"
|
||
|
||
Wait. GSD subagents run in a separate context window. Their work is invisible to the parent session while in progress. The liveness note on the spawn line confirms this is expected. Research and planning agents routinely take 1–5 minutes; verification agents can take longer on large phases.
|
||
|
||
Do not interrupt the session. Killing it discards in-progress subagent work.
|
||
|
||
If it has been more than 10 minutes, check whether the agent task still shows as active in the Claude Code sidebar.
|
||
|
||
---
|
||
|
||
## Workflow state problems
|
||
|
||
### If the workflow seems corrupted or state is inconsistent
|
||
|
||
```bash
|
||
/gsd-forensics
|
||
```
|
||
|
||
Or with a description:
|
||
|
||
```bash
|
||
/gsd-forensics "Phase 3 execution stalled after wave 1"
|
||
```
|
||
|
||
`/gsd-forensics` runs a post-mortem investigation: git history anomalies, artefact integrity, STATE.md consistency, uncommitted work, and orphaned worktrees. It writes a report to `.planning/forensics/` and surfaces recommended remediation steps. It is read-only and never modifies your project files.
|
||
|
||
### If you need to roll back a phase or plan
|
||
|
||
```bash
|
||
/gsd-undo --phase 03 # Roll back all commits for phase 3
|
||
/gsd-undo --plan 03-02 # Roll back commits for plan 02 of phase 3
|
||
/gsd-undo --last 5 # Pick interactively from the 5 most recent GSD commits
|
||
```
|
||
|
||
`/gsd-undo` checks dependent phases before reverting and always shows a confirmation gate.
|
||
|
||
---
|
||
|
||
## Install and update problems
|
||
|
||
### If GSD is not recognised after install
|
||
|
||
Restart your runtime. GSD installs slash commands into your runtime's command directory (for example `~/.claude/commands/gsd/`). Most runtimes discover new commands only at startup.
|
||
|
||
If the problem persists, verify the install:
|
||
|
||
```bash
|
||
npx @opengsd/gsd-core@latest --claude --local
|
||
```
|
||
|
||
For runtime-specific install paths and troubleshooting, see [Install on your runtime](install-on-your-runtime.md).
|
||
|
||
### If an install or uninstall was interrupted
|
||
|
||
Nothing to do — finish the interrupted command by running it again.
|
||
|
||
GSD deletes and rebuilds whole directories while installing, and some files in them are yours
|
||
rather than GSD's: `USER-PROFILE.md` (written by `/gsd-profile-user`) and `dev-preferences.md`.
|
||
Before anything is deleted, GSD copies those to a staging area under your runtime's config
|
||
directory, at `.gsd-staging/user-artifacts/`. The copy is committed to disk before the delete
|
||
begins, so pressing <kbd>Ctrl</kbd>+<kbd>C</kbd>, a crash, or a machine losing power cannot leave
|
||
you without them.
|
||
|
||
The next install or uninstall looks for staged copies left behind by an interrupted run and
|
||
restores them before doing anything else. It will not overwrite a file that is already there — a
|
||
file present on disk was never lost — and it leaves alone any staging belonging to another install
|
||
still running.
|
||
|
||
To confirm your profile came back:
|
||
|
||
```bash
|
||
ls ~/.claude/gsd-core/USER-PROFILE.md
|
||
```
|
||
|
||
If the file is missing but `.gsd-staging/user-artifacts/` still contains an entry, run the install
|
||
again; recovery happens at the start of the next run, not in the background. If you are curious
|
||
what is staged, each entry holds a `record.json` naming the directory it came from and the files it
|
||
holds — those are ordinary files you can inspect or copy out by hand.
|
||
|
||
### If Codex agents fail to spawn with a 400 about an unsupported model
|
||
|
||
Symptom — a typed agent (`gsd-planner`, `gsd-executor`, …) fails to start and the whole
|
||
plan/execute flow falls back to a generic agent:
|
||
|
||
```
|
||
400 invalid_request_error: "The 'sonnet' model is not supported when using Codex with a ChatGPT account."
|
||
```
|
||
|
||
This means an installed `~/.codex/agents/<agent>.toml` still pins a model your Codex session cannot
|
||
serve. Installs made before the passive model posture landed embedded a per-tier model; a
|
||
ChatGPT-account session exposes only its own model, so the pin fails the request outright
|
||
([ADR-2313](../adr/2313-codex-passive-model-posture.md)).
|
||
|
||
Check which agents are affected:
|
||
|
||
```bash
|
||
node gsd-tools.cjs validate agents
|
||
```
|
||
|
||
The `codex_posture` section reports one violation per offending agent, naming the file and the
|
||
offending value. Two things it flags:
|
||
|
||
- `anthropic_flavored_model` — the `.toml` pins a GSD tier alias (`opus`, `sonnet`, `haiku`,
|
||
`fable`) or a `claude-*` id. Codex rejects all of these.
|
||
- `orphaned_reasoning_effort` — a `model_reasoning_effort` with no `model`, which leaves the model
|
||
following your Codex session while the effort follows GSD.
|
||
|
||
An empty violations list means every regular `.toml` in the directory is posture-clean, so the 400
|
||
is coming from somewhere else — check that your Codex session itself is healthy.
|
||
|
||
One thing the check deliberately does not inspect: an agent file that is a **symlink** is skipped
|
||
rather than followed, matching how the effort sync treats them. If you symlink your agent configs,
|
||
verify those targets by hand.
|
||
|
||
**Fix — repair in place, without a reinstall.** Preview what would change:
|
||
|
||
```bash
|
||
node gsd-tools.cjs effort sync
|
||
```
|
||
|
||
That is a dry run; it writes nothing. When the reported changes look right, apply them:
|
||
|
||
```bash
|
||
node gsd-tools.cjs effort sync --apply
|
||
```
|
||
|
||
It removes only the offending `model` / `model_reasoning_effort` lines. Everything else — your line
|
||
endings, comments, key order, and any keys you added by hand — is preserved byte-for-byte, so the
|
||
result is a two-line diff rather than a reformatted file. An explicit real-Codex pin is left alone,
|
||
and a file it cannot parse is refused and reported rather than partially rewritten.
|
||
|
||
**Or re-run the installer**, which rewrites the agent files wholesale. Current versions write no
|
||
model at all, so agents inherit the session model:
|
||
|
||
```bash
|
||
npx @opengsd/gsd-core@latest --codex --global
|
||
```
|
||
|
||
Prefer the sync if you have hand-edited your `.toml` files — a reinstall regenerates them.
|
||
|
||
If you are on an **API-key** account and genuinely want a pinned model, name a real Codex model id
|
||
per agent instead — see [How to configure model profiles](configure-model-profiles.md#codex-does-not-do-tier-routing--pin-explicitly-instead).
|
||
|
||
> The check is read-only. It reports what is wrong and does not edit your files.
|
||
|
||
### If an update overwrote your local changes
|
||
|
||
Since v1.17, the installer backs up locally modified files to `gsd-local-patches/`. Reapply your changes:
|
||
|
||
```bash
|
||
/gsd-update --reapply
|
||
```
|
||
|
||
### If you cannot update via npm
|
||
|
||
If `npx @opengsd/gsd-core` fails due to npm outages or network restrictions, see `docs/manual-update.md` for a step-by-step manual update procedure that works without npm access.
|
||
|
||
For routine updates, see [Update GSD](update-gsd.md).
|
||
|
||
---
|
||
|
||
## Cost problems
|
||
|
||
### If model costs are too high
|
||
|
||
Switch to the budget profile:
|
||
|
||
```bash
|
||
/gsd-config --profile budget
|
||
```
|
||
|
||
Disable research and plan-check agents via settings if the domain is familiar:
|
||
|
||
```bash
|
||
/gsd-settings
|
||
```
|
||
|
||
Also audit which MCP servers are enabled. Every enabled MCP server injects its tool schema into every turn. Browser and platform-specific tools can cost 20k+ tokens each. Disable any that the current phase does not need in `.claude/settings.json`:
|
||
|
||
```json
|
||
{
|
||
"disabledMcpjsonServers": ["playwright", "mac-tools"]
|
||
}
|
||
```
|
||
|
||
---
|
||
|
||
## Recovery quick reference
|
||
|
||
| Problem | Solution |
|
||
|---------|---------|
|
||
| Lost context or new session | `/gsd-resume-work` or `/gsd-progress` |
|
||
| Don't know what step is next | `/gsd-progress --next` |
|
||
| Phase went wrong | `/gsd-undo --phase NN`, then re-plan |
|
||
| Something broke | `/gsd-debug "description"` (add `--diagnose` for analysis without fixes) |
|
||
| STATE.md out of sync | `state validate` then `state sync` |
|
||
| `.planning/` integrity uncertain | `/gsd-health`, then `/gsd-health --repair` |
|
||
| Workflow state seems corrupted | `/gsd-forensics` |
|
||
| Quick targeted fix | `/gsd-quick` |
|
||
| Plan doesn't match your vision | `/gsd-discuss-phase N` then re-plan |
|
||
| Costs running high | `/gsd-config --profile budget` and `/gsd-settings` to toggle agents off |
|
||
| Update broke local changes | `/gsd-update --reapply` |
|
||
| Want session summary | `/gsd-pause-work --report` |
|
||
| Parallel execution build errors | Update GSD or set `parallelization.enabled: false` |
|
||
| Worktree base mismatch / exit 42 | Auto-degraded to sequential (no action needed); run `worktree set-baseref` to restore parallelism |
|
||
|
||
---
|
||
|
||
## Related
|
||
|
||
- [Debug a failed execution](debug-a-failed-execution.md)
|
||
- [Fix the worktree base-mismatch (exit 42) error](fix-worktree-base-mismatch.md)
|
||
- [Install on your runtime](install-on-your-runtime.md)
|
||
- [Commands](../COMMANDS.md)
|
||
- [docs index](../README.md)
|