Upgrade to upstream GSD v1.33.0

[rokicool]

Summary

Upstream sync from GSD (Get Shit Done) v1.30.0 to v1.33.0, bringing security auditing, automated documentation generation, and major enhancements across the agent/workflow pipeline.

152 files changed, +12,157 / -2,384 lines

What's New

Security Pipeline

• /gsd-secure-phase command + gsd-security-auditor agent for retroactive threat mitigation verification of completed phases. Produces SECURITY.md reports verified against PLAN.md threat models.

Automated Documentation

• /gsd-docs-update command + gsd-doc-writer and gsd-doc-verifier agents. Generates, updates, and verifies up to 9 documentation types (README, architecture, API, etc.) with codebase-verified accuracy. No hallucinated paths or stale signatures.

Dependency Analysis

• /gsd-analyze-dependencies command for phase dependency graph analysis. Detects file overlap, semantic API dependencies, and data flow between phases to suggest ROADMAP.md Depends on entries.

Discuss Phase Power Mode

• discuss-phase-power.md workflow generates all questions upfront into a JSON state file with an HTML companion UI. Users answer asynchronously at their own pace, then all answers are processed in one pass.

Major Enhancements

Planner (Scope Reduction Prohibition)

• New scope reduction prohibition: planners can no longer silently simplify user decisions (no more "v1 static" shortcuts). If a phase is too complex, the planner must propose a phase split instead.
• Mandatory decision coverage matrix mapping every D-XX to a plan/task.
• Threat model generation in PLAN.md with STRIDE register.

Plan Checker

• Dimension 7b: Detects scope reduction where plans reference decisions but deliver only a fraction.
• Dimension 11: Validates all research questions are resolved before planning proceeds.

Executor

• Blocking anti-pattern checks from .continue-here.md before any work begins.
• Intra-wave files_modified overlap detection prevents parallel plans from conflicting on the same files.
• Threat surface scan in SUMMARY.md for new security-relevant surface not in the threat model.

Verifier

• ROADMAP success criteria now merged with PLAN frontmatter must-haves (roadmap is the non-negotiable contract).
• New human_needed status takes priority over passed when human verification items exist.
• Test quality audit: disabled test scan, circular test detection, expected value provenance analysis.

Quick Mode

• New --full flag enables the complete pipeline (discuss + research + plan-checking + verification).
• New --validate flag for plan-checking + verification only.
• Granular flags are composable: --discuss --research --validate equals --full.

Autonomous Mode

• New --to N and --only N flags for phase range and single-phase execution.
• New --interactive flag: discuss runs inline with questions, plan+execute in background.

Infrastructure

• response_language config option: all user-facing prompts across phases/subagents respect configured language.
• workflow.use_worktrees config: disable git worktree isolation for solo developers.
• Kilo runtime support added to update, reapply-patches, and config detection.
• schema-detect.cjs: detects ORM schema changes (Prisma, Drizzle, Payload, TypeORM, Supabase) and verifies push commands ran.
• Atomic state writes: state.cjs uses read-modify-write locks to prevent lost updates from concurrent agents.
• 10 new reference documents for agent contracts, artifact types, context budgets, domain probes, gate prompts, revision loops, and universal anti-patterns.
• task() removal: All task() subagent calls replaced with direct @gsd-{agent} calls for OpenCode compatibility.

Documentation

• All docs updated across 4 locales (en, ja-JP, ko-KR, pt-BR, zh-CN).
• CHANGELOG.md updated with full v1.33.0 entry.
• README.md version header updated to v1.33.0.

Commits

Hash	Message
38f3121	feat: Support for task= removal
17a7ed4	sync: upgrade upstream GSD from v1.30.0 to v1.32.0
39feda1	sync: upgrade upstream GSD from v1.32.0 to v1.33.0
f30f63e	sync: upgrade upstream GSD from v1.32.0 to v1.33.0
09c42c9	sync: upgrade upstream GSD from v1.32.0 to v1.33.0
2214728	docs: add CHANGELOG entry for v1.33.0
550e4c3	docs: update README version header to v1.33.0