@opengsd/gsd-pi 1.2.0 → 1.3.0-dev.eed73bea

package/dist/web/standalone/node_modules/postcss/lib/stringifier.js

@@ -1,5 +1,17 @@
 'use strict'
 
+// Escapes sequences that could break out of an HTML <style> context.
+// Uses CSS unicode escaping (\3c = '<') which is valid CSS and parsed
+// correctly by all compliant CSS consumers.
+const STYLE_TAG = /(<)(\/?style\b)/gi
+const COMMENT_OPEN = /(<)(!--)/g
+
+function escapeHTMLInCSS(str) {
+  if (typeof str !== 'string') return str
+  if (!str.includes('<')) return str
+  return str.replace(STYLE_TAG, '\\3c $2').replace(COMMENT_OPEN, '\\3c $2')
+}
+
 const DEFAULT_RAW = {
   after: '\n',
   beforeClose: '\n',
@@ -25,11 +37,12 @@ class Stringifier {
   }
 
   atrule(node, semicolon) {
+    let raws = node.raws
     let name = '@' + node.name
     let params = node.params ? this.rawValue(node, 'params') : ''
 
-    if (typeof node.raws.afterName !== 'undefined') {
-      name += node.raws.afterName
+    if (typeof raws.afterName !== 'undefined') {
+      name += raws.afterName
     } else if (params) {
       name += ' '
     }
@@ -37,8 +50,8 @@ class Stringifier {
     if (node.nodes) {
       this.block(node, name + params)
     } else {
-      let end = (node.raws.between || '') + (semicolon ? ';' : '')
-      this.builder(name + params + end, node)
+      let end = (raws.between || '') + (semicolon ? ';' : '')
+      this.builder(escapeHTMLInCSS(name + params + end), node)
     }
   }
 
@@ -72,53 +85,77 @@ class Stringifier {
   }
 
   block(node, start) {
-    let between = this.raw(node, 'between', 'beforeOpen')
-    this.builder(start + between + '{', node, 'start')
+    let raws = node.raws
+    let between = typeof raws.between !== 'undefined'
+      ? raws.between
+      : this.raw(node, 'between', 'beforeOpen')
+    this.builder(escapeHTMLInCSS(start + between) + '{', node, 'start')
 
     let after
     if (node.nodes && node.nodes.length) {
       this.body(node)
-      after = this.raw(node, 'after')
+      after = typeof raws.after !== 'undefined'
+        ? raws.after
+        : this.raw(node, 'after')
     } else {
-      after = this.raw(node, 'after', 'emptyBody')
+      after = typeof raws.after !== 'undefined'
+        ? raws.after
+        : this.raw(node, 'after', 'emptyBody')
     }
 
-    if (after) this.builder(after)
+    if (after) this.builder(escapeHTMLInCSS(after))
     this.builder('}', node, 'end')
   }
 
   body(node) {
-    let last = node.nodes.length - 1
+    let nodes = node.nodes
+    let last = nodes.length - 1
     while (last > 0) {
-      if (node.nodes[last].type !== 'comment') break
+      if (nodes[last].type !== 'comment') break
       last -= 1
     }
 
     let semicolon = this.raw(node, 'semicolon')
-    for (let i = 0; i < node.nodes.length; i++) {
-      let child = node.nodes[i]
-      let before = this.raw(child, 'before')
-      if (before) this.builder(before)
+    let isDocument = node.type === 'document'
+    for (let i = 0; i < nodes.length; i++) {
+      let child = nodes[i]
+      let before = child.raws.before
+      if (typeof before === 'undefined') {
+        before = this.raw(child, 'before')
+      }
+      if (before) this.builder(isDocument ? before : escapeHTMLInCSS(before))
       this.stringify(child, last !== i || semicolon)
     }
   }
 
   comment(node) {
-    let left = this.raw(node, 'left', 'commentLeft')
-    let right = this.raw(node, 'right', 'commentRight')
-    this.builder('/*' + left + node.text + right + '*/', node)
+    let raws = node.raws
+    let left = typeof raws.left !== 'undefined'
+      ? raws.left
+      : this.raw(node, 'left', 'commentLeft')
+    let right = typeof raws.right !== 'undefined'
+      ? raws.right
+      : this.raw(node, 'right', 'commentRight')
+    this.builder(escapeHTMLInCSS('/*' + left + node.text + right + '*/'), node)
   }
 
   decl(node, semicolon) {
-    let between = this.raw(node, 'between', 'colon')
-    let string = node.prop + between + this.rawValue(node, 'value')
+    let raws = node.raws
+    let between = typeof raws.between !== 'undefined'
+      ? raws.between
+      : this.raw(node, 'between', 'colon')
+
+    let rawVal = raws.value
+    let value = rawVal && rawVal.value === node.value ? rawVal.raw : node.value
+
+    let string = node.prop + between + value
 
     if (node.important) {
-      string += node.raws.important || ' !important'
+      string += raws.important || ' !important'
     }
 
     if (semicolon) string += ';'
-    this.builder(string, node)
+    this.builder(escapeHTMLInCSS(string), node)
   }
 
   document(node) {
@@ -154,9 +191,9 @@ class Stringifier {
 
     // Detect style by other nodes
     let root = node.root()
-    if (!root.rawCache) root.rawCache = {}
-    if (typeof root.rawCache[detect] !== 'undefined') {
-      return root.rawCache[detect]
+    let cache = root.rawCache || (root.rawCache = {})
+    if (typeof cache[detect] !== 'undefined') {
+      return cache[detect]
     }
 
     if (detect === 'before' || detect === 'after') {
@@ -175,7 +212,7 @@ class Stringifier {
 
     if (typeof value === 'undefined') value = DEFAULT_RAW[detect]
 
-    root.rawCache[detect] = value
+    cache[detect] = value
     return value
   }
 
@@ -324,13 +361,17 @@ class Stringifier {
 
   root(node) {
     this.body(node)
-    if (node.raws.after) this.builder(node.raws.after)
+    if (node.raws.after) {
+      let after = node.raws.after
+      let isDocument = node.parent && node.parent.type === 'document'
+      this.builder(isDocument ? after : escapeHTMLInCSS(after))
+    }
   }
 
   rule(node) {
     this.block(node, this.rawValue(node, 'selector'))
     if (node.raws.ownSemicolon) {
-      this.builder(node.raws.ownSemicolon, node, 'end')
+      this.builder(escapeHTMLInCSS(node.raws.ownSemicolon), node, 'end')
     }
   }
 

package/dist/web/standalone/node_modules/postcss/lib/tokenize.js

@@ -29,13 +29,14 @@ module.exports = function tokenizer(input, options = {}) {
   let css = input.css.valueOf()
   let ignore = options.ignoreErrors
 
-  let code, next, quote, content, escape
-  let escaped, escapePos, prev, n, currentToken
+  let code, content, escape, next, quote
+  let currentToken, escaped, escapePos, n, prev
 
   let length = css.length
   let pos = 0
   let buffer = []
   let returned = []
+  let lastBadParen = -1
 
   function position() {
     return pos
@@ -127,11 +128,14 @@ module.exports = function tokenizer(input, options = {}) {
           currentToken = ['brackets', css.slice(pos, next + 1), pos, next]
 
           pos = next
+        } else if (pos <= lastBadParen) {
+          currentToken = ['(', '(', pos]
         } else {
           next = css.indexOf(')', pos + 1)
           content = css.slice(pos, next + 1)
 
           if (next === -1 || RE_BAD_BRACKET.test(content)) {
+            lastBadParen = next === -1 ? length : next
             currentToken = ['(', '(', pos]
           } else {
             currentToken = ['brackets', content, pos, next]

package/dist/web/standalone/node_modules/postcss/package.json

@@ -1,14 +1,52 @@
 {
   "name": "postcss",
-  "version": "8.4.31",
+  "version": "8.5.12",
   "description": "Tool for transforming styles with JS plugins",
-  "engines": {
-    "node": "^10 || ^12 || >=14"
+  "keywords": [
+    "css",
+    "manipulation",
+    "parser",
+    "postcss",
+    "preprocessor",
+    "rework",
+    "source map",
+    "transform",
+    "transpiler"
+  ],
+  "homepage": "https://postcss.org/",
+  "bugs": {
+    "url": "https://github.com/postcss/postcss/issues"
   },
+  "license": "MIT",
+  "author": "Andrey Sitnik <andrey@sitnik.es>",
+  "repository": "postcss/postcss",
+  "funding": [
+    {
+      "type": "opencollective",
+      "url": "https://opencollective.com/postcss/"
+    },
+    {
+      "type": "tidelift",
+      "url": "https://tidelift.com/funding/github/npm/postcss"
+    },
+    {
+      "type": "github",
+      "url": "https://github.com/sponsors/ai"
+    }
+  ],
+  "main": "./lib/postcss.js",
+  "browser": {
+    "./lib/terminal-highlight": false,
+    "source-map-js": false,
+    "path": false,
+    "url": false,
+    "fs": false
+  },
+  "types": "./lib/postcss.d.ts",
   "exports": {
     ".": {
-      "require": "./lib/postcss.js",
-      "import": "./lib/postcss.mjs"
+      "import": "./lib/postcss.mjs",
+      "require": "./lib/postcss.js"
     },
     "./lib/at-rule": "./lib/at-rule.js",
     "./lib/comment": "./lib/comment.js",
@@ -39,50 +77,12 @@
     "./lib/warning": "./lib/warning.js",
     "./package.json": "./package.json"
   },
-  "main": "./lib/postcss.js",
-  "types": "./lib/postcss.d.ts",
-  "keywords": [
-    "css",
-    "postcss",
-    "rework",
-    "preprocessor",
-    "parser",
-    "source map",
-    "transform",
-    "manipulation",
-    "transpiler"
-  ],
-  "funding": [
-    {
-      "type": "opencollective",
-      "url": "https://opencollective.com/postcss/"
-    },
-    {
-      "type": "tidelift",
-      "url": "https://tidelift.com/funding/github/npm/postcss"
-    },
-    {
-      "type": "github",
-      "url": "https://github.com/sponsors/ai"
-    }
-  ],
-  "author": "Andrey Sitnik <andrey@sitnik.ru>",
-  "license": "MIT",
-  "homepage": "https://postcss.org/",
-  "repository": "postcss/postcss",
-  "bugs": {
-    "url": "https://github.com/postcss/postcss/issues"
-  },
   "dependencies": {
-    "nanoid": "^3.3.6",
-    "picocolors": "^1.0.0",
-    "source-map-js": "^1.0.2"
+    "nanoid": "^3.3.11",
+    "picocolors": "^1.1.1",
+    "source-map-js": "^1.2.1"
   },
-  "browser": {
-    "./lib/terminal-highlight": false,
-    "source-map-js": false,
-    "path": false,
-    "url": false,
-    "fs": false
+  "engines": {
+    "node": "^10 || ^12 || >=14"
   }
 }

package/dist/web/standalone/package.json

@@ -82,7 +82,7 @@
     "esbuild": "^0.27.4",
     "eslint": "^9.38.0",
     "eslint-config-next": "16.2.4",
-    "postcss": "8.5.12",
+    "postcss": "^8.5.10",
     "tailwindcss": "^4.2.4",
     "tw-animate-css": "1.3.3",
     "typescript": "5.7.3"

package/dist/web/standalone/server.js

@@ -15,7 +15,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{},"typescript":{"ignoreBuildErrors":true},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.mjs","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/gsd-pi/gsd-pi","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.mjs","serverExternalPackages":["@gsd/native","@gsd/pi-ai","@gsd/pi-agent-core","@gsd/pi-coding-agent","@gsd/agent-core","node-pty","proper-lockfile"],"turbopack":{"root":"/home/runner/work/gsd-pi/gsd-pi"},"distDirRoot":".next"}
+const nextConfig = {"env":{},"typescript":{"ignoreBuildErrors":true},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.mjs","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/__w/gsd-pi/gsd-pi","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.mjs","serverExternalPackages":["@gsd/native","@gsd/pi-ai","@gsd/pi-agent-core","@gsd/pi-coding-agent","@gsd/agent-core","node-pty","proper-lockfile"],"turbopack":{"root":"/__w/gsd-pi/gsd-pi"},"distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/dist/web-mode.d.ts

@@ -10,6 +10,8 @@ export interface WebModeLaunchOptions {
     port?: number;
     /** Additional allowed origins for CORS (forwarded as GSD_WEB_ALLOWED_ORIGINS). */
     allowedOrigins?: string[];
+    /** Disable web bearer-token auth for externally protected deployments. */
+    noAuth?: boolean;
 }
 export interface ResolvedWebHostBootstrap {
     ok: true;
@@ -67,6 +69,8 @@ export interface WebModeDeps {
     writePidFile?: (path: string, pid: number) => void;
     readPidFile?: (path: string) => number | null;
     deletePidFile?: (path: string) => void;
+    /** Override process.kill for testing (avoids sending real signals to arbitrary PIDs). */
+    kill?: (pid: number, signal: string | number) => void;
     /** Path to the multi-instance registry JSON (for testing). */
     registryPath?: string;
     /**
@@ -105,7 +109,7 @@ export interface WebModeStopOptions {
     /** Stop all running instances */
     all?: boolean;
 }
-export declare function stopWebMode(deps?: Pick<WebModeDeps, 'pidFilePath' | 'readPidFile' | 'deletePidFile' | 'stderr'>, options?: WebModeStopOptions): WebModeStopResult;
+export declare function stopWebMode(deps?: Pick<WebModeDeps, 'pidFilePath' | 'readPidFile' | 'deletePidFile' | 'stderr' | 'kill'>, options?: WebModeStopOptions): WebModeStopResult;
 export declare function resolveWebHostBootstrap(options?: {
     packageRoot?: string;
     existsSync?: (path: string) => boolean;

package/dist/web-mode.js

@@ -48,9 +48,9 @@ export function unregisterInstance(cwd, registryPath = WEB_INSTANCES_PATH) {
     delete registry[resolve(cwd)];
     writeInstanceRegistry(registry, registryPath);
 }
-function killPid(pid) {
+function killPid(pid, killFn = process.kill) {
     try {
-        process.kill(pid, 'SIGTERM');
+        killFn(pid, 'SIGTERM');
         return 'killed';
     }
     catch (error) {
@@ -83,6 +83,7 @@ export function deletePidFile(filePath) {
 }
 export function stopWebMode(deps = {}, options = {}) {
     const stderr = deps.stderr ?? process.stderr;
+    const killFn = deps.kill ?? process.kill;
     // ── Stop all instances ──────────────────────────────────────────────
     if (options.all) {
         const registry = readInstanceRegistry();
@@ -93,7 +94,7 @@ export function stopWebMode(deps = {}, options = {}) {
         }
         let stopped = 0;
         for (const [cwd, entry] of entries) {
-            const result = killPid(entry.pid);
+            const result = killPid(entry.pid, killFn);
             if (result === 'killed') {
                 stderr.write(`[gsd] Stopped web server for ${cwd} (pid=${entry.pid})\n`);
                 stopped++;
@@ -123,7 +124,7 @@ export function stopWebMode(deps = {}, options = {}) {
             stderr.write(`[gsd] No web server running for ${resolvedCwd}\n`);
             return { ok: false, reason: 'not-found' };
         }
-        const result = killPid(entry.pid);
+        const result = killPid(entry.pid, killFn);
         unregisterInstance(resolvedCwd);
         if (result === 'killed') {
             stderr.write(`[gsd] Stopped web server for ${resolvedCwd} (pid=${entry.pid})\n`);
@@ -146,13 +147,14 @@ function stopLegacyPidFile(deps) {
     const pidFilePath = deps.pidFilePath ?? defaultWebPidFilePath;
     const readPid = deps.readPidFile ?? readPidFile;
     const deletePid = deps.deletePidFile ?? deletePidFile;
+    const killFn = deps.kill ?? process.kill;
     const pid = readPid(pidFilePath);
     if (pid === null) {
         stderr.write(`[gsd] Web server is not running (no PID file found)\n`);
         return { ok: false, reason: 'no-pid-file' };
     }
     stderr.write(`[gsd] Stopping web server (pid=${pid})…\n`);
-    const result = killPid(pid);
+    const result = killPid(pid, killFn);
     deletePid(pidFilePath);
     if (result === 'killed') {
         stderr.write(`[gsd] Web server stopped.\n`);
@@ -245,6 +247,9 @@ function formatLaunchStatus(status) {
 function emitLaunchStatus(stderr, status) {
     stderr.write(formatLaunchStatus(status));
 }
+function isWebNoAuthEnabled(env) {
+    return env.GSD_WEB_NO_AUTH === '1';
+}
 function buildSpawnSpec(resolution, host, port, platform, execPath) {
     if (resolution.kind === 'packaged-standalone') {
         return {
@@ -452,15 +457,16 @@ export async function launchWebMode(options, deps = {}) {
     // without a clean shutdown (e.g. terminal closed, crash).
     cleanupStaleInstance(options.cwd, stderr, deps.registryPath);
     const port = options.port ?? await (deps.resolvePort ?? reserveWebPort)(host);
-    const authToken = randomBytes(32).toString('hex');
+    const baseEnv = deps.env ?? process.env;
+    const noAuth = options.noAuth ?? isWebNoAuthEnabled(baseEnv);
+    const authToken = noAuth ? null : randomBytes(32).toString('hex');
     const url = `http://${host}:${port}`;
     const env = {
-        ...(deps.env ?? process.env),
+        ...baseEnv,
         HOSTNAME: host,
         PORT: String(port),
         GSD_WEB_HOST: host,
         GSD_WEB_PORT: String(port),
-        GSD_WEB_AUTH_TOKEN: authToken,
         GSD_WEB_PROJECT_CWD: options.cwd,
         GSD_WEB_PROJECT_SESSIONS_DIR: options.projectSessionsDir,
         GSD_WEB_PACKAGE_ROOT: resolution.packageRoot,
@@ -468,6 +474,14 @@ export async function launchWebMode(options, deps = {}) {
         ...(resolution.kind === 'source-dev' ? { NEXT_PUBLIC_GSD_DEV: '1' } : {}),
         ...(options.allowedOrigins?.length ? { GSD_WEB_ALLOWED_ORIGINS: options.allowedOrigins.join(',') } : {}),
     };
+    if (authToken) {
+        env.GSD_WEB_AUTH_TOKEN = authToken;
+    }
+    else {
+        delete env.GSD_WEB_AUTH_TOKEN;
+        env.GSD_WEB_NO_AUTH = '1';
+        stderr.write('[gsd] WARNING: Web token auth is disabled. The interface is unprotected unless external access control is in place.\n');
+    }
     try {
         stderr.write(`[gsd] Initialising resources…\n`);
         const bootstrap = deps.initResources ? { initResources: deps.initResources } : await loadResourceBootstrap();
@@ -565,7 +579,7 @@ export async function launchWebMode(options, deps = {}) {
         failureReason,
     });
     try {
-        const bootReadyFn = deps.waitForBootReady ?? ((u) => waitForBootReady(u, 180_000, stderr, authToken));
+        const bootReadyFn = deps.waitForBootReady ?? ((u) => waitForBootReady(u, 180_000, stderr, authToken ?? undefined));
         const readyOutcome = bootReadyFn(url).then(() => ({ kind: 'ready' }));
         // If the child-exit branch wins, `readyOutcome` may reject later; swallow it
         // so it never surfaces as an unhandledRejection after the race has settled.
@@ -599,10 +613,10 @@ export async function launchWebMode(options, deps = {}) {
             // Register in multi-instance registry
             registerInstance(options.cwd, { pid, port, url }, deps.registryPath);
         }
-        const authenticatedUrl = `${url}/#token=${authToken}`;
+        const browserUrl = authToken ? `${url}/#token=${authToken}` : url;
         try {
             ;
-            (deps.openBrowser ?? openBrowser)(authenticatedUrl);
+            (deps.openBrowser ?? openBrowser)(browserUrl);
         }
         catch (browserError) {
             stderr.write(`[gsd] Could not open browser: ${browserError instanceof Error ? browserError.message : String(browserError)}\n`);
@@ -625,7 +639,7 @@ export async function launchWebMode(options, deps = {}) {
         emitLaunchStatus(stderr, failure);
         return failure;
     }
-    const authenticatedUrl = `${url}/#token=${authToken}`;
+    const readyUrl = authToken ? `${url}/#token=${authToken}` : url;
     const success = {
         mode: 'web',
         ok: true,
@@ -638,7 +652,7 @@ export async function launchWebMode(options, deps = {}) {
         hostPath: resolution.entryPath,
         hostRoot: resolution.hostRoot,
     };
-    stderr.write(`[gsd] Ready → ${authenticatedUrl}\n`);
+    stderr.write(`[gsd] Ready → ${readyUrl}\n`);
     emitLaunchStatus(stderr, success);
     return success;
 }

package/dist/worktree-cli.js

@@ -18,6 +18,7 @@
  * from resources/extensions/gsd/ which are shipped as raw .ts (#1283).
  */
 import chalk from 'chalk';
+import { bannerLines, name as styledName, warn } from './cli-style.js';
 import { createJiti } from '@mariozechner/jiti';
 import { fileURLToPath } from 'node:url';
 import { generateWorktreeName } from './worktree-name-gen.js';
@@ -283,12 +284,8 @@ async function handleStatusBanner(basePath) {
     });
     if (withChanges.length === 0)
         return;
-    const names = withChanges.map(w => chalk.cyan(w.name)).join(', ');
-    process.stderr.write(chalk.dim('[gsd] ') +
-        chalk.yellow(`${withChanges.length} worktree${withChanges.length === 1 ? '' : 's'} with unmerged changes: `) +
-        names + '\n' +
-        chalk.dim('[gsd] ') +
-        chalk.dim('Resume: gsd -w <name>  |  Merge: gsd worktree merge <name>  |  List: gsd worktree list\n\n'));
+    const names = withChanges.map(w => styledName(w.name)).join(', ');
+    process.stderr.write(bannerLines(warn(`${withChanges.length} worktree${withChanges.length === 1 ? '' : 's'} with unmerged changes: `) + names, 'Resume: gsd -w <name>  |  Merge: gsd worktree merge <name>  |  List: gsd worktree list'));
 }
 // ─── -w flag: create/resume worktree for interactive session ────────────────
 async function handleWorktreeFlag(worktreeFlag) {

package/dist/worktree-status-banner.js

@@ -1,8 +1,9 @@
 // GSD worktree startup banner
 import { execFileSync } from 'node:child_process';
 import { existsSync, realpathSync } from 'node:fs';
-import { join, resolve, sep } from 'node:path';
-import chalk from 'chalk';
+import { resolve, sep } from 'node:path';
+import { bannerLines, name, warn } from './cli-style.js';
+import { worktreesDirs } from './resources/extensions/gsd/worktree-placement.js';
 function normalizePath(path) {
     const normalized = path
         .replaceAll('\\', '/')
@@ -55,7 +56,7 @@ function existingPathVariants(path) {
     return [...new Set(variants.map(normalizePath))];
 }
 function findGsdWorktrees(basePath, entries) {
-    const roots = existingPathVariants(join(basePath, '.gsd', 'worktrees'));
+    const roots = worktreesDirs(basePath).flatMap((dir) => existingPathVariants(dir));
     const worktrees = [];
     for (const entry of entries) {
         if (entry.isBare || !entry.branch)
@@ -110,8 +111,7 @@ function branchHasChanges(basePath, mainBranch, branch) {
     }
 }
 export function showWorktreeStatusBanner(basePath) {
-    const worktreesDir = join(basePath, '.gsd', 'worktrees');
-    if (!existsSync(worktreesDir))
+    if (!worktreesDirs(basePath).some((dir) => existsSync(dir)))
         return;
     const entries = parseWorktreeList(gitExec(basePath, ['worktree', 'list', '--porcelain']));
     const worktrees = findGsdWorktrees(basePath, entries);
@@ -123,10 +123,6 @@ export function showWorktreeStatusBanner(basePath) {
     const withChanges = worktrees.filter((worktree) => branchHasChanges(basePath, mainBranch, worktree.branch));
     if (withChanges.length === 0)
         return;
-    const names = withChanges.map((worktree) => chalk.cyan(worktree.name)).join(', ');
-    process.stderr.write(chalk.dim('[gsd] ') +
-        chalk.yellow(`${withChanges.length} worktree${withChanges.length === 1 ? '' : 's'} with unmerged changes: `) +
-        names + '\n' +
-        chalk.dim('[gsd] ') +
-        chalk.dim('Resume: gsd -w <name>  |  Merge: gsd worktree merge <name>  |  List: gsd worktree list\n\n'));
+    const names = withChanges.map((worktree) => name(worktree.name)).join(', ');
+    process.stderr.write(bannerLines(warn(`${withChanges.length} worktree${withChanges.length === 1 ? '' : 's'} with unmerged changes: `) + names, 'Resume: gsd -w <name>  |  Merge: gsd worktree merge <name>  |  List: gsd worktree list'));
 }