@opengsd/gsd-pi 1.2.0-dev.fbdca60b → 1.3.0-dev.65546769

package/README.md

@@ -27,13 +27,19 @@ See [CHANGELOG.md](./CHANGELOG.md) for release-by-release fixes and [Legacy Rele
 
 ## Latest Release Highlights
 
-- **Claude Opus 4.8 support** — Add the latest Claude model option to the generated model catalog.
-- **Better `/gsd` observability** — Add `/gsd usage` and `/gsd context` commands for inspecting session usage and context state.
-- **Sharper skill scoping** — Scope the skill catalog per unit, trim duplicate prompt surfaces, and apply unit-context manifest policy during auto-mode dispatch.
-- **Improved guided installs** — Redesign the `npx @opengsd/gsd-pi@latest` flow so first-time and scripted installs are clearer and more reliable.
-- **Smoother auto-mode progress** — Improve requirements backlog handling, completion summaries, quick branch inference, cleanup logic, and milestone closeout behavior.
-- **Cloud MCP gateway runtime** — Add the local cloud MCP gateway runtime with persisted auth state.
-- **More reliable installs** — Resolve native engine packages to the matching release version across npm installs and Docker images.
+<!-- release-highlights:start -->
+Latest release: **v1.3.0**
+
+- **update:** Reconcile stale PATH gsd-browser binary after install.
+- **gsd:** Route UAT sign-off and worktree-degradation blockers through the guidance catalog.
+- **gsd:** Fix shell-tool selection — uncapped sync bash, interruptible await, graceful kills.
+- **browser-tools:** Proven engine resolution — gsd-browser primary for web apps (ADR-037).
+- **gsd:** Add the Unit Closeout module with the Interactive Closeout adapter (ADR-032).
+- **gsd:** Tool Surface Readiness gate — verify live tool surface at SDK init before the first model turn.
+- **claude-code-cli:** Expose Claude Fable 5 as an Opus-tier model.
+- **pi-ai:** Add Claude Fable 5 with Opus-tier thinking.
+
+<!-- release-highlights:end -->
 
 ## Status
 

package/dist/cli.js

@@ -13,7 +13,7 @@ import { shouldRedirectAutoToHeadless } from './cli-auto-routing.js';
 import { printHelp, printSubcommandHelp } from './help-text.js';
 import { applySecurityOverrides } from './security-overrides.js';
 import { validateConfiguredModel } from './startup-model-validation.js';
-import { migrateAnthropicDefaultToClaudeCode } from './provider-migrations.js';
+import { migrateAnthropicDefaultToClaudeCode, migrateGeminiCliDefaultToAntigravity } from './provider-migrations.js';
 import { applyModelOverride } from './cli-model-override.js';
 import { buildHeadlessAutoArgs, parseCliArgs, runWebCliBranch, migrateLegacyFlatSessions, } from './cli-web-branch.js';
 import { stopWebMode } from './web-mode.js';
@@ -194,6 +194,14 @@ if (shouldBypassManagedResourceMismatchGate(cliFlags.messages[0])) {
     process.exit(0);
 }
 // ---------------------------------------------------------------------------
+// Hermes integration subcommand — `gsd hermes install`
+// ---------------------------------------------------------------------------
+if (cliFlags.messages[0] === 'hermes') {
+    const { runHermesIntegrationCommand } = await import('./hermes-integration-install.js');
+    const exitCode = await runHermesIntegrationCommand(process.argv);
+    process.exit(exitCode);
+}
+// ---------------------------------------------------------------------------
 // Graph subcommand — `gsd graph build|status|query|diff`
 // ---------------------------------------------------------------------------
 if (cliFlags.messages[0] === 'graph') {
@@ -291,6 +299,8 @@ const subcommandsExemptFromEarlyTtyCheck = new Set([
     'config',
     'graph',
     'headless',
+    'hermes',
+    'read',
     'install',
     'list',
     'remove',
@@ -409,6 +419,11 @@ if (cliFlags.messages[0] === 'sessions') {
     cliFlags.continue = true;
     cliFlags._selectedSessionPath = selected.path;
 }
+// `gsd read` — JSON read seam for integrations (Hermes 6c)
+if (cliFlags.messages[0] === 'read') {
+    const { runReadCli } = await import('./read-cli.js');
+    process.exit(await runReadCli(process.argv));
+}
 // `gsd headless` — run auto-mode without TUI
 if (cliFlags.messages[0] === 'headless') {
     await ensureRtkBootstrap();
@@ -612,6 +627,12 @@ if (isPrintMode) {
         settingsManager,
         modelRegistry,
     });
+    migrateGeminiCliDefaultToAntigravity({
+        authStorage,
+        isAntigravityReady: () => modelRegistry.isProviderRequestReady('google-antigravity'),
+        settingsManager,
+        modelRegistry,
+    });
     const { session, extensionsResult, modelFallbackMessage } = await createAgentSession({
         authStorage,
         modelRegistry,
@@ -716,6 +737,12 @@ migrateAnthropicDefaultToClaudeCode({
     settingsManager,
     modelRegistry,
 });
+migrateGeminiCliDefaultToAntigravity({
+    authStorage,
+    isAntigravityReady: () => modelRegistry.isProviderRequestReady('google-antigravity'),
+    settingsManager,
+    modelRegistry,
+});
 markStartup('providerMigrations');
 const { session, extensionsResult, modelFallbackMessage: interactiveFallbackMsg } = await createAgentSession({
     authStorage,

package/dist/headless-context.js

@@ -39,6 +39,5 @@ export async function loadContext(options) {
  */
 export function bootstrapGsdProject(basePath) {
     const gsdDir = join(basePath, '.gsd');
-    mkdirSync(join(gsdDir, 'milestones'), { recursive: true });
     mkdirSync(join(gsdDir, 'runtime'), { recursive: true });
 }

package/dist/headless-events.d.ts

@@ -53,7 +53,22 @@ export declare function isTerminalNotification(event: Record<string, unknown>):
 export declare function isBlockedNotification(event: Record<string, unknown>): boolean;
 export declare function isMilestoneReadyNotification(event: Record<string, unknown>): boolean;
 export declare function isInteractiveHeadlessTool(toolName: string | undefined): boolean;
-export declare function shouldArmHeadlessIdleTimeout(toolCallCount: number, interactiveToolCount: number): boolean;
+/**
+ * Decide whether to arm the headless idle-completion timer.
+ *
+ * Arms once at least one tool call has started (and no interactive tool —
+ * ask_user_questions / secure_env_collect — is still awaiting a human answer),
+ * so a multi-step command that pauses between tool calls still resolves.
+ *
+ * Also arms for *quick commands* that are handled entirely in the extension
+ * layer (e.g. `/gsd status`, `/gsd history`, `/gsd help`). These never enter
+ * the LLM agent loop, so they emit no `agent_end` / `execution_complete` and
+ * make zero tool calls. Without this branch the idle timer never arms, the
+ * completion promise never resolves, and the process exits with a spurious
+ * "cancelled" (11) code once the event loop drains. See live-regression
+ * scenario `headless status exits 0 on a seeded project`.
+ */
+export declare function shouldArmHeadlessIdleTimeout(toolCallCount: number, interactiveToolCount: number, isQuickCommand?: boolean): boolean;
 export interface HeadlessTrackedEventLike {
     type: string;
     detail?: string;

package/dist/headless-events.js

@@ -125,8 +125,25 @@ export function isMilestoneReadyNotification(event) {
 export function isInteractiveHeadlessTool(toolName) {
     return INTERACTIVE_HEADLESS_TOOLS.has(canonicalHeadlessToolName(toolName));
 }
-export function shouldArmHeadlessIdleTimeout(toolCallCount, interactiveToolCount) {
-    return toolCallCount > 0 && interactiveToolCount === 0;
+/**
+ * Decide whether to arm the headless idle-completion timer.
+ *
+ * Arms once at least one tool call has started (and no interactive tool —
+ * ask_user_questions / secure_env_collect — is still awaiting a human answer),
+ * so a multi-step command that pauses between tool calls still resolves.
+ *
+ * Also arms for *quick commands* that are handled entirely in the extension
+ * layer (e.g. `/gsd status`, `/gsd history`, `/gsd help`). These never enter
+ * the LLM agent loop, so they emit no `agent_end` / `execution_complete` and
+ * make zero tool calls. Without this branch the idle timer never arms, the
+ * completion promise never resolves, and the process exits with a spurious
+ * "cancelled" (11) code once the event loop drains. See live-regression
+ * scenario `headless status exits 0 on a seeded project`.
+ */
+export function shouldArmHeadlessIdleTimeout(toolCallCount, interactiveToolCount, isQuickCommand = false) {
+    if (interactiveToolCount > 0)
+        return false;
+    return toolCallCount > 0 || isQuickCommand;
 }
 function hasCancelledDetail(detail) {
     return /\bcancelled\b/i.test(String(detail ?? ''));

package/dist/headless.js

@@ -434,6 +434,13 @@ async function runHeadlessOnce(options, restartCount) {
     });
     // Idle timeout — fallback completion detection
     let idleTimer = null;
+    // Quick commands (status, history, help, …) are short extension-layer
+    // operations that never enter the LLM agent loop, so they emit no
+    // execution_complete and make no tool calls. The idle timer is what
+    // resolves them; without arming it for zero-tool quick commands the run
+    // hangs and exits with a spurious "cancelled" (11). See
+    // shouldArmHeadlessIdleTimeout.
+    const isQuickCmd = isQuickCommand(options.command, options.commandArgs);
     let effectiveIdleTimeout = isNewMilestone
         ? NEW_MILESTONE_IDLE_TIMEOUT_MS
         : isAutoMode
@@ -443,7 +450,7 @@ async function runHeadlessOnce(options, restartCount) {
         if (idleTimer)
             clearTimeout(idleTimer);
         if (effectiveIdleTimeout > 0 &&
-            shouldArmHeadlessIdleTimeout(toolCallCount, interactiveToolCallIds.size)) {
+            shouldArmHeadlessIdleTimeout(toolCallCount, interactiveToolCallIds.size, isQuickCmd)) {
             idleTimer = setTimeout(() => {
                 completed = true;
                 resolveCompletion();

package/dist/help-text.js

@@ -122,6 +122,34 @@ const SUBCOMMAND_HELP = {
         '  gsd graph query auth                   Find nodes related to "auth"',
         '  gsd graph diff                         Show changes since last snapshot',
     ].join('\n'),
+    hermes: [
+        'Usage: gsd hermes install [options]',
+        '',
+        'Install the bundled open-gsd-hermes plugin into Hermes Agent.',
+        '',
+        'Options:',
+        '  --hermes-home <path>    Hermes home (default: $HERMES_HOME or ~/.hermes)',
+        '  --project <path>        Default GSD project to write into gsd.yaml',
+        '  --plugin-source <path>  Override bundled integrations/hermes source',
+        '  --skip-pip             Copy plugin only; do not pip install editable package',
+        '  --skip-enable          Do not run hermes plugins enable',
+        '  --dry-run              Print intended actions without writing',
+        '',
+        'Examples:',
+        '  gsd hermes install --project ~/code/myapp',
+        '  HERMES_HOME=~/.hermes gsd hermes install --skip-enable',
+    ].join('\n'),
+    read: [
+        'Usage: gsd read <progress|roadmap|memory> --json --project <path>',
+        '',
+        'JSON read seam for external integrations (e.g. open-gsd-hermes).',
+        'Emits envelope: { integration_version, kind, projectDir, data }.',
+        '',
+        'Examples:',
+        '  gsd read progress --json --project ~/code/myapp',
+        '  gsd read roadmap --json --project ~/code/myapp --milestone M001',
+        '  gsd read memory --json --project ~/code/myapp --query auth',
+    ].join('\n'),
     headless: [
         'Usage: gsd headless [flags] [command] [args...]',
         '',
@@ -211,6 +239,7 @@ export function printHelp(version) {
     process.stdout.write('  auto [args]              Run auto-mode without TUI (pipeable)\n');
     process.stdout.write('  headless [cmd] [args]    Run /gsd commands without TUI (default: auto)\n');
     process.stdout.write('  graph <subcommand>       Manage knowledge graph (build, query, status, diff)\n');
+    process.stdout.write('  hermes install           Install the Hermes Agent plugin\n');
     process.stdout.write('\nRun gsd <subcommand> --help for subcommand-specific help.\n');
 }
 export function printSubcommandHelp(subcommand, version) {

package/dist/hermes-integration-install.d.ts

@@ -0,0 +1,17 @@
+export interface HermesInstallOptions {
+    hermesHome: string;
+    pluginSource: string;
+    project?: string;
+    dryRun: boolean;
+    skipPip: boolean;
+    skipEnable: boolean;
+}
+export interface HermesInstallResult {
+    pluginTarget: string;
+    configPath: string;
+    actions: string[];
+    warnings: string[];
+}
+export declare function runHermesIntegrationCommand(argv: string[]): Promise<number>;
+export declare function parseHermesInstallArgs(args: string[]): HermesInstallOptions;
+export declare function installHermesPlugin(options: HermesInstallOptions): HermesInstallResult;

package/dist/hermes-integration-install.js

@@ -0,0 +1,199 @@
+import { existsSync, mkdirSync, rmSync, cpSync, writeFileSync, readFileSync } from 'node:fs';
+import { dirname, resolve, join, isAbsolute } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { homedir } from 'node:os';
+import { spawnSync } from 'node:child_process';
+const PLUGIN_NAME = 'open-gsd-hermes';
+export async function runHermesIntegrationCommand(argv) {
+    const hermesIndex = argv.indexOf('hermes', 2);
+    if (hermesIndex === -1) {
+        printHermesHelp();
+        return 0;
+    }
+    const sub = argv[hermesIndex + 1];
+    if (!sub || sub === 'help' || sub === '--help' || sub === '-h') {
+        printHermesHelp();
+        return 0;
+    }
+    if (sub !== 'install') {
+        process.stderr.write(`[gsd] Unknown hermes command: ${sub}\n`);
+        printHermesHelp(process.stderr);
+        return 1;
+    }
+    let options;
+    try {
+        options = parseHermesInstallArgs(argv.slice(hermesIndex + 2));
+    }
+    catch (err) {
+        process.stderr.write(`[gsd] hermes install: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+    try {
+        const result = installHermesPlugin(options);
+        for (const action of result.actions)
+            process.stdout.write(`✓ ${action}\n`);
+        for (const warning of result.warnings)
+            process.stderr.write(`[gsd] Warning: ${warning}\n`);
+        process.stdout.write(`\nHermes plugin installed at: ${result.pluginTarget}\n`);
+        process.stdout.write(`Config path: ${result.configPath}\n`);
+        process.stdout.write('Next: restart Hermes/gateway, then run `hermes plugins list` and `/gsd status`.\n');
+        return 0;
+    }
+    catch (err) {
+        process.stderr.write(`[gsd] hermes install failed: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+}
+export function parseHermesInstallArgs(args) {
+    let hermesHome = process.env.HERMES_HOME || join(homedir(), '.hermes');
+    let pluginSource = process.env.GSD_HERMES_PLUGIN_SOURCE || findBundledHermesPluginSource();
+    let project;
+    let dryRun = false;
+    let skipPip = false;
+    let skipEnable = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        const next = () => {
+            const value = args[++i];
+            if (!value)
+                throw new Error(`${arg} requires a value`);
+            return value;
+        };
+        if (arg === '--hermes-home')
+            hermesHome = next();
+        else if (arg === '--plugin-source')
+            pluginSource = next();
+        else if (arg === '--project')
+            project = next();
+        else if (arg === '--dry-run')
+            dryRun = true;
+        else if (arg === '--skip-pip')
+            skipPip = true;
+        else if (arg === '--skip-enable')
+            skipEnable = true;
+        else
+            throw new Error(`unknown option: ${arg}`);
+    }
+    return {
+        hermesHome: expandHome(hermesHome),
+        pluginSource: expandHome(pluginSource),
+        project: project ? resolve(expandHome(project)) : undefined,
+        dryRun,
+        skipPip,
+        skipEnable,
+    };
+}
+export function installHermesPlugin(options) {
+    const source = resolve(options.pluginSource);
+    if (!existsSync(join(source, 'plugin.yaml'))) {
+        throw new Error(`plugin source does not contain plugin.yaml: ${source}`);
+    }
+    const hermesHome = resolve(options.hermesHome);
+    const pluginRoot = join(hermesHome, 'plugins');
+    const pluginTarget = join(pluginRoot, PLUGIN_NAME);
+    const configPath = join(hermesHome, 'gsd.yaml');
+    const actions = [];
+    const warnings = [];
+    if (!options.dryRun) {
+        mkdirSync(pluginRoot, { recursive: true });
+        if (existsSync(pluginTarget)) {
+            rmSync(pluginTarget, { recursive: true, force: true });
+        }
+        cpSync(source, pluginTarget, {
+            recursive: true,
+            filter: (src) => !src.includes('__pycache__') && !src.includes('.pytest_cache'),
+        });
+    }
+    actions.push(`${options.dryRun ? 'Would copy' : 'Copied'} ${PLUGIN_NAME} into Hermes plugin directory`);
+    const config = renderGsdYaml(options.project);
+    if (!existsSync(configPath)) {
+        if (!options.dryRun)
+            writeFileSync(configPath, config, 'utf8');
+        actions.push(`${options.dryRun ? 'Would create' : 'Created'} ${configPath}`);
+    }
+    else if (!readFileSync(configPath, 'utf8').includes('gsd:')) {
+        warnings.push(`${configPath} exists but does not contain a gsd: section; merge the sample config from ${pluginTarget}/docs/setup.md`);
+    }
+    else {
+        actions.push(`Left existing ${configPath} unchanged`);
+    }
+    if (!options.skipPip) {
+        const python = findHermesPython(hermesHome);
+        const pipArgs = ['-m', 'pip', 'install', '-e', pluginTarget];
+        if (options.dryRun) {
+            actions.push(`Would run ${python} ${pipArgs.join(' ')}`);
+        }
+        else {
+            const pip = spawnSync(python, pipArgs, { stdio: 'pipe', encoding: 'utf8' });
+            if (pip.status !== 0) {
+                warnings.push(`Python package install failed with ${python}; Hermes may not import the plugin until you run: ${python} ${pipArgs.join(' ')}`);
+                if (pip.stderr.trim())
+                    warnings.push(pip.stderr.trim().split('\n').slice(-3).join(' | '));
+            }
+            else {
+                actions.push('Installed Python package into Hermes environment');
+            }
+        }
+    }
+    if (!options.skipEnable) {
+        if (options.dryRun) {
+            actions.push(`Would run HERMES_HOME=${hermesHome} hermes plugins enable ${PLUGIN_NAME}`);
+        }
+        else {
+            const enable = spawnSync('hermes', ['plugins', 'enable', PLUGIN_NAME], {
+                stdio: 'pipe',
+                encoding: 'utf8',
+                env: { ...process.env, HERMES_HOME: hermesHome },
+            });
+            if (enable.status !== 0) {
+                warnings.push(`Could not auto-enable plugin; run manually: HERMES_HOME=${hermesHome} hermes plugins enable ${PLUGIN_NAME}`);
+            }
+            else {
+                actions.push('Enabled plugin in Hermes');
+            }
+        }
+    }
+    return { pluginTarget, configPath, actions, warnings };
+}
+function quoteYamlScalar(value) {
+    return `'${value.replace(/'/g, "''")}'`;
+}
+function renderGsdYaml(project) {
+    const defaultProject = project ?? '~/code/myapp';
+    return `# open-gsd-hermes configuration. Edit paths for your machine.\ngsd:\n  cli_path: gsd\n  mcp_server_path: gsd-mcp-server\n  credential_source: gsd\n  default_project: ${quoteYamlScalar(defaultProject)}\n  poll_interval_seconds: 12\n  cache_ttl_seconds: 45\n  notification_level: normal\n  bindings: {}\n`;
+}
+function findHermesPython(hermesHome) {
+    const suffix = process.platform === 'win32' ? join('Scripts', 'python.exe') : join('bin', 'python');
+    const bundled = join(hermesHome, 'hermes-agent', 'venv', suffix);
+    if (existsSync(bundled))
+        return bundled;
+    return process.env.PYTHON || 'python3';
+}
+function findBundledHermesPluginSource() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+        resolve(process.cwd(), 'integrations/hermes'),
+        resolve(here, '../integrations/hermes'),
+        resolve(here, '../../integrations/hermes'),
+    ];
+    const found = candidates.find((candidate) => existsSync(join(candidate, 'plugin.yaml')));
+    return found ?? candidates[0];
+}
+function expandHome(value) {
+    if (value === '~')
+        return homedir();
+    if (value.startsWith('~/'))
+        return join(homedir(), value.slice(2));
+    return isAbsolute(value) ? value : resolve(value);
+}
+function printHermesHelp(stream = process.stdout) {
+    stream.write('Usage: gsd hermes install [options]\n');
+    stream.write('\nInstall the bundled open-gsd-hermes plugin into a Hermes Agent home.\n\n');
+    stream.write('Options:\n');
+    stream.write('  --hermes-home <path>    Hermes home (default: $HERMES_HOME or ~/.hermes)\n');
+    stream.write('  --project <path>        Default GSD project to write into gsd.yaml\n');
+    stream.write('  --plugin-source <path>  Override bundled integrations/hermes source\n');
+    stream.write('  --skip-pip             Copy plugin only; do not pip install editable package\n');
+    stream.write('  --skip-enable          Do not run hermes plugins enable\n');
+    stream.write('  --dry-run              Print intended actions without writing\n');
+}

package/dist/jiti-workspace-aliases.d.ts

@@ -1,2 +1,11 @@
-/** jiti alias map for @gsd/* workspace packages (CJS require cannot load ESM file:// URLs). */
-export declare function getJitiWorkspaceAliases(importUrl: string): Record<string, string>;
+export type FileExists = (path: string) => boolean;
+/**
+ * jiti alias map for @gsd/* workspace packages (CJS require cannot load ESM file:// URLs).
+ *
+ * In the monorepo the canonical entry points are raw TypeScript under `packages/<name>/src/`,
+ * which jiti loads directly. The published tarball ships only the compiled `packages/<name>/dist/`
+ * (see each package's `files` field) — `src/` is absent. Resolve each alias to the `src/*.ts`
+ * entry when present, otherwise fall back to the compiled `dist/*.js`, so the merge CLI loads in
+ * both layouts instead of crashing with MODULE_NOT_FOUND on the missing source path.
+ */
+export declare function getJitiWorkspaceAliases(importUrl: string, fileExists?: FileExists): Record<string, string>;

package/dist/jiti-workspace-aliases.js

@@ -1,9 +1,25 @@
+import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { resolvePackageRoot } from "./bundled-resource-path.js";
-/** jiti alias map for @gsd/* workspace packages (CJS require cannot load ESM file:// URLs). */
-export function getJitiWorkspaceAliases(importUrl) {
+/**
+ * jiti alias map for @gsd/* workspace packages (CJS require cannot load ESM file:// URLs).
+ *
+ * In the monorepo the canonical entry points are raw TypeScript under `packages/<name>/src/`,
+ * which jiti loads directly. The published tarball ships only the compiled `packages/<name>/dist/`
+ * (see each package's `files` field) — `src/` is absent. Resolve each alias to the `src/*.ts`
+ * entry when present, otherwise fall back to the compiled `dist/*.js`, so the merge CLI loads in
+ * both layouts instead of crashing with MODULE_NOT_FOUND on the missing source path.
+ */
+export function getJitiWorkspaceAliases(importUrl, fileExists = existsSync) {
     const root = resolvePackageRoot(importUrl);
-    const pkg = (dir, ...segments) => join(root, "packages", dir, "src", ...segments);
+    // Prefer the source `.ts` entry (monorepo); fall back to the compiled `.js` (published tarball).
+    const pkg = (dir, ...segments) => {
+        const srcEntry = join(root, "packages", dir, "src", ...segments);
+        if (fileExists(srcEntry))
+            return srcEntry;
+        const distSegments = segments.map((s) => s.replace(/\.ts$/, ".js"));
+        return join(root, "packages", dir, "dist", ...distSegments);
+    };
     const piAi = pkg("pi-ai", "index.ts");
     const piAiOauth = pkg("pi-ai", "utils", "oauth", "index.ts");
     const piAgentCore = pkg("pi-agent-core", "index.ts");

package/dist/onboarding.js

@@ -359,11 +359,15 @@ export async function runLlmStep(p, pc, authStorage) {
     if (isClaudeCliReady()) {
         authOptions.push({ value: 'claude-cli', label: 'Use Claude Code CLI', hint: 'uses your existing Claude subscription' });
     }
-    if (isGeminiCliReady()) {
-        authOptions.push({ value: 'gemini-cli', label: 'Use Google Gemini CLI', hint: 'uses your existing Gemini CLI session' });
-    }
     if (isAntigravityCliReady()) {
-        authOptions.push({ value: 'antigravity-cli', label: 'Use Antigravity CLI', hint: 'uses your existing Antigravity session' });
+        authOptions.push({ value: 'antigravity-cli', label: 'Use Antigravity CLI', hint: 'recommended — replaces Gemini CLI for individuals' });
+    }
+    else if (isGeminiCliReady()) {
+        authOptions.push({
+            value: 'gemini-cli',
+            label: 'Use Google Gemini CLI (deprecated)',
+            hint: 'individual tier no longer supported — install Antigravity from https://antigravity.google',
+        });
     }
     authOptions.push({ value: 'browser', label: 'Sign in with your browser', hint: 'GitHub Copilot or ChatGPT/Codex' }, { value: 'api-key', label: 'Paste an API key', hint: 'from your provider dashboard' }, { value: 'skip', label: 'Skip for now', hint: 'use /login inside GSD later' });
     const method = await p.select({
@@ -385,6 +389,7 @@ export async function runLlmStep(p, pc, authStorage) {
         return true;
     }
     if (method === 'gemini-cli') {
+        p.log.warn('Google Gemini CLI is deprecated for individual users — install Antigravity: https://antigravity.google');
         p.log.success('Google Gemini CLI detected — routing through local CLI');
         p.log.info('Your Gemini CLI session will be used for inference. No API key needed.');
         authStorage.set('google-gemini-cli', { type: 'api_key', key: 'cli' });

package/dist/provider-migrations.d.ts

@@ -25,4 +25,27 @@ type AnthropicDefaultMigrationDeps = {
 export declare function hasDirectAnthropicApiKey(authStorage: Pick<AuthStorage, "getCredentialsForProvider">, env?: NodeJS.ProcessEnv): boolean;
 export declare function shouldMigrateAnthropicToClaudeCode({ authStorage, isClaudeCodeReady, defaultProvider, env, }: AnthropicMigrationDeps): boolean;
 export declare function migrateAnthropicDefaultToClaudeCode({ authStorage, isClaudeCodeReady, settingsManager, modelRegistry, env, }: AnthropicDefaultMigrationDeps): boolean;
+type GeminiCliMigrationDeps = {
+    authStorage: Pick<AuthStorage, "getCredentialsForProvider">;
+    isAntigravityReady: boolean | (() => boolean);
+    defaultProvider: string | undefined;
+    env?: NodeJS.ProcessEnv;
+};
+type GeminiCliDefaultMigrationDeps = {
+    authStorage: Pick<AuthStorage, "getCredentialsForProvider" | "set">;
+    isAntigravityReady: boolean | (() => boolean);
+    settingsManager: {
+        getDefaultProvider(): string | undefined;
+        getDefaultModel(): string | undefined;
+        setDefaultModelAndProvider(provider: string, modelId: string): void;
+    };
+    modelRegistry: {
+        getAvailable(): MigrationModel[];
+    };
+    env?: NodeJS.ProcessEnv;
+};
+export declare function hasGeminiCliExternalAuth(authStorage: Pick<AuthStorage, "getCredentialsForProvider">): boolean;
+export declare function hasDirectGoogleApiKey(authStorage: Pick<AuthStorage, "getCredentialsForProvider">, env?: NodeJS.ProcessEnv): boolean;
+export declare function shouldMigrateGeminiCliToAntigravity({ authStorage, isAntigravityReady, defaultProvider, env, }: GeminiCliMigrationDeps): boolean;
+export declare function migrateGeminiCliDefaultToAntigravity({ authStorage, isAntigravityReady, settingsManager, modelRegistry, env, }: GeminiCliDefaultMigrationDeps): boolean;
 export {};

package/dist/provider-migrations.js

@@ -27,3 +27,44 @@ export function migrateAnthropicDefaultToClaudeCode({ authStorage, isClaudeCodeR
     settingsManager.setDefaultModelAndProvider(target.provider, target.id);
     return true;
 }
+export function hasGeminiCliExternalAuth(authStorage) {
+    return authStorage.getCredentialsForProvider("google-gemini-cli").some((credential) => credential?.type === "api_key" && credential?.key === "cli");
+}
+export function hasDirectGoogleApiKey(authStorage, env = process.env) {
+    if ((env.GEMINI_API_KEY ?? env.GOOGLE_API_KEY ?? "").trim()) {
+        return true;
+    }
+    return authStorage.getCredentialsForProvider("google").some((credential) => credential?.type === "api_key" && typeof credential?.key === "string" && credential.key.trim().length > 0);
+}
+export function shouldMigrateGeminiCliToAntigravity({ authStorage, isAntigravityReady, defaultProvider, env = process.env, }) {
+    if (defaultProvider !== "google-gemini-cli") {
+        return false;
+    }
+    if (!hasGeminiCliExternalAuth(authStorage)) {
+        return false;
+    }
+    if (hasDirectGoogleApiKey(authStorage, env)) {
+        return false;
+    }
+    return typeof isAntigravityReady === "function" ? isAntigravityReady() : isAntigravityReady;
+}
+export function migrateGeminiCliDefaultToAntigravity({ authStorage, isAntigravityReady, settingsManager, modelRegistry, env = process.env, }) {
+    const defaultProvider = settingsManager.getDefaultProvider();
+    if (!shouldMigrateGeminiCliToAntigravity({ authStorage, isAntigravityReady, defaultProvider, env })) {
+        return false;
+    }
+    const defaultModel = settingsManager.getDefaultModel();
+    const antigravityModels = modelRegistry.getAvailable().filter((model) => model.provider === "google-antigravity");
+    const target = (defaultModel
+        ? antigravityModels.find((model) => model.id === defaultModel)
+        : undefined) ||
+        antigravityModels.find((model) => model.id === "default") ||
+        antigravityModels[0];
+    if (!target) {
+        return false;
+    }
+    authStorage.set("google-antigravity", { type: "api_key", key: "cli" });
+    settingsManager.setDefaultModelAndProvider(target.provider, target.id);
+    process.stderr.write("[gsd] Migrated default provider google-gemini-cli → google-antigravity (Gemini CLI no longer supported for individuals)\n");
+    return true;
+}

package/dist/read-cli.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `gsd read` — JSON read seam for integrations (Hermes 6c).
+ *
+ *   gsd read progress --json --project /path
+ *   gsd read roadmap --json --project /path [--milestone M001]
+ *   gsd read memory --json --project /path --query "auth"
+ */
+export declare const INTEGRATION_VERSION = 1;
+export type ReadKind = 'progress' | 'roadmap' | 'memory';
+export interface ReadEnvelope<T = unknown> {
+    integration_version: number;
+    kind: ReadKind;
+    projectDir: string;
+    data: T;
+}
+export interface ReadCliOptions {
+    kind: ReadKind;
+    project: string;
+    milestone?: string;
+    query?: string;
+    json: boolean;
+}
+export declare function runReadCli(argv: string[]): Promise<number>;