@opengsd/gsd-pi 1.8.1 → 1.9.0

package/packages/gsd-cloud/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { handleCloudCommand, formatUsage } from "./cli.js";
+export { injectDefaultGateway, DEFAULT_GATEWAY } from "./inject-gateway.js";
+export { CloudRuntime } from "./cloud-runtime.js";
+export { runDeviceFlow } from "./device-flow.js";
+export { selectExecutor, GsdPiExecutor, type Executor, type AdvertisedProject, type ExecutorKind, type SelectExecutorOptions, } from "./executors/index.js";
+export type { DaemonConfig, LogLevel, LogEntry } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/gsd-cloud/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,cAAc,EACd,aAAa,EACb,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/packages/gsd-cloud/dist/index.js

@@ -0,0 +1,8 @@
+// Project/App: Open GSD
+// File Purpose: Public entry for @opengsd/gsd-cloud — the standalone cloud agent.
+export { handleCloudCommand, formatUsage } from "./cli.js";
+export { injectDefaultGateway, DEFAULT_GATEWAY } from "./inject-gateway.js";
+export { CloudRuntime } from "./cloud-runtime.js";
+export { runDeviceFlow } from "./device-flow.js";
+export { selectExecutor, GsdPiExecutor, } from "./executors/index.js";
+//# sourceMappingURL=index.js.map

package/packages/gsd-cloud/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,kFAAkF;AAElF,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,cAAc,EACd,aAAa,GAKd,MAAM,sBAAsB,CAAC","sourcesContent":["// Project/App: Open GSD\n// File Purpose: Public entry for @opengsd/gsd-cloud — the standalone cloud agent.\n\nexport { handleCloudCommand, formatUsage } from \"./cli.js\";\nexport { injectDefaultGateway, DEFAULT_GATEWAY } from \"./inject-gateway.js\";\nexport { CloudRuntime } from \"./cloud-runtime.js\";\nexport { runDeviceFlow } from \"./device-flow.js\";\nexport {\n  selectExecutor,\n  GsdPiExecutor,\n  type Executor,\n  type AdvertisedProject,\n  type ExecutorKind,\n  type SelectExecutorOptions,\n} from \"./executors/index.js\";\nexport type { DaemonConfig, LogLevel, LogEntry } from \"./types.js\";\n"]}

package/packages/gsd-cloud/dist/inject-gateway.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The public GSD Cloud gateway. This default lives ONLY in @opengsd/gsd-cloud
+ * (D-01): the SaaS-branded wrapper is the one place the cloud.opengsd.net URL is
+ * intended to appear. The generic @opengsd/daemon requires --gateway explicitly.
+ */
+export declare const DEFAULT_GATEWAY = "https://cloud.opengsd.net";
+/**
+ * Insert `--gateway https://cloud.opengsd.net` for the `login` and `pair`
+ * commands when the caller has not supplied their own `--gateway`. Any other
+ * command (status/connect/disconnect) is returned unchanged, as is an explicit
+ * `--gateway` (the caller-supplied flag always wins) and empty argv.
+ *
+ * Pure function — no process.argv side effects — so the contract is unit-testable.
+ */
+export declare function injectDefaultGateway(argv: string[]): string[];
+//# sourceMappingURL=inject-gateway.d.ts.map

package/packages/gsd-cloud/dist/inject-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-gateway.d.ts","sourceRoot":"","sources":["../src/inject-gateway.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,eAAO,MAAM,eAAe,8BAA8B,CAAC;AAE3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAW7D"}

package/packages/gsd-cloud/dist/inject-gateway.js

@@ -0,0 +1,29 @@
+// Project/App: Open GSD
+// File Purpose: Default the cloud gateway for login/pair when the caller omits --gateway.
+/**
+ * The public GSD Cloud gateway. This default lives ONLY in @opengsd/gsd-cloud
+ * (D-01): the SaaS-branded wrapper is the one place the cloud.opengsd.net URL is
+ * intended to appear. The generic @opengsd/daemon requires --gateway explicitly.
+ */
+export const DEFAULT_GATEWAY = "https://cloud.opengsd.net";
+/**
+ * Insert `--gateway https://cloud.opengsd.net` for the `login` and `pair`
+ * commands when the caller has not supplied their own `--gateway`. Any other
+ * command (status/connect/disconnect) is returned unchanged, as is an explicit
+ * `--gateway` (the caller-supplied flag always wins) and empty argv.
+ *
+ * Pure function — no process.argv side effects — so the contract is unit-testable.
+ */
+export function injectDefaultGateway(argv) {
+    const command = argv[0];
+    const gatewayAwareCommand = command === "login" || command === "pair";
+    // Respect both flag forms `parseArgs` accepts: `--gateway <url>` and
+    // `--gateway=<url>`. Matching only the bare token let an explicit
+    // `--gateway=<url>` slip through and get overridden by the appended default.
+    const hasGateway = argv.some((arg) => arg === "--gateway" || arg.startsWith("--gateway="));
+    if (!gatewayAwareCommand || hasGateway) {
+        return argv;
+    }
+    return [...argv, "--gateway", DEFAULT_GATEWAY];
+}
+//# sourceMappingURL=inject-gateway.js.map

package/packages/gsd-cloud/dist/inject-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-gateway.js","sourceRoot":"","sources":["../src/inject-gateway.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,0FAA0F;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,mBAAmB,GAAG,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC;IACtE,qEAAqE;IACrE,kEAAkE;IAClE,6EAA6E;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,mBAAmB,IAAI,UAAU,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AACjD,CAAC","sourcesContent":["// Project/App: Open GSD\n// File Purpose: Default the cloud gateway for login/pair when the caller omits --gateway.\n\n/**\n * The public GSD Cloud gateway. This default lives ONLY in @opengsd/gsd-cloud\n * (D-01): the SaaS-branded wrapper is the one place the cloud.opengsd.net URL is\n * intended to appear. The generic @opengsd/daemon requires --gateway explicitly.\n */\nexport const DEFAULT_GATEWAY = \"https://cloud.opengsd.net\";\n\n/**\n * Insert `--gateway https://cloud.opengsd.net` for the `login` and `pair`\n * commands when the caller has not supplied their own `--gateway`. Any other\n * command (status/connect/disconnect) is returned unchanged, as is an explicit\n * `--gateway` (the caller-supplied flag always wins) and empty argv.\n *\n * Pure function — no process.argv side effects — so the contract is unit-testable.\n */\nexport function injectDefaultGateway(argv: string[]): string[] {\n  const command = argv[0];\n  const gatewayAwareCommand = command === \"login\" || command === \"pair\";\n  // Respect both flag forms `parseArgs` accepts: `--gateway <url>` and\n  // `--gateway=<url>`. Matching only the bare token let an explicit\n  // `--gateway=<url>` slip through and get overridden by the appended default.\n  const hasGateway = argv.some((arg) => arg === \"--gateway\" || arg.startsWith(\"--gateway=\"));\n  if (!gatewayAwareCommand || hasGateway) {\n    return argv;\n  }\n  return [...argv, \"--gateway\", DEFAULT_GATEWAY];\n}\n"]}

package/packages/gsd-cloud/dist/inject-gateway.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=inject-gateway.test.d.ts.map

package/packages/gsd-cloud/dist/inject-gateway.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-gateway.test.d.ts","sourceRoot":"","sources":["../src/inject-gateway.test.ts"],"names":[],"mappings":""}

package/packages/gsd-cloud/dist/inject-gateway.test.js

@@ -0,0 +1,41 @@
+// Project/App: Open GSD
+// File Purpose: Unit tests locking the default-gateway injection contract.
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { injectDefaultGateway, DEFAULT_GATEWAY } from "./inject-gateway.js";
+test("Test 1: login without --gateway injects the default gateway", () => {
+    const out = injectDefaultGateway(["login"]);
+    assert.ok(out.includes("--gateway"), "expected --gateway flag");
+    assert.ok(out.includes(DEFAULT_GATEWAY), "expected default gateway value");
+    assert.equal(DEFAULT_GATEWAY, "https://cloud.opengsd.net");
+    const idx = out.indexOf("--gateway");
+    assert.equal(out[idx + 1], DEFAULT_GATEWAY, "value must follow the flag");
+});
+test("Test 2: login with explicit --gateway is returned unchanged", () => {
+    const argv = ["login", "--gateway", "https://other.example"];
+    const out = injectDefaultGateway(argv);
+    assert.deepEqual(out, argv);
+    assert.equal(out.filter((a) => a === "--gateway").length, 1, "no double gateway");
+});
+test("Test 3: pair without --gateway injects the default gateway", () => {
+    const out = injectDefaultGateway(["pair", "--code", "X"]);
+    assert.ok(out.includes("--gateway"), "expected --gateway flag");
+    assert.ok(out.includes(DEFAULT_GATEWAY), "expected default gateway value");
+});
+test("Test 4: status/connect/disconnect are returned unchanged", () => {
+    for (const cmd of ["status", "connect", "disconnect"]) {
+        const out = injectDefaultGateway([cmd]);
+        assert.deepEqual(out, [cmd], `${cmd} must not inject a gateway`);
+    }
+});
+test("Test 5: empty argv (no command) is returned unchanged", () => {
+    assert.deepEqual(injectDefaultGateway([]), []);
+});
+test("Test 6: login with equals-form --gateway=... is returned unchanged", () => {
+    const argv = ["login", "--gateway=https://other.example"];
+    const out = injectDefaultGateway(argv);
+    assert.deepEqual(out, argv);
+    assert.ok(!out.includes(DEFAULT_GATEWAY), "default gateway must not be appended");
+    assert.equal(out.filter((a) => a === "--gateway" || a.startsWith("--gateway=")).length, 1, "no double gateway");
+});
+//# sourceMappingURL=inject-gateway.test.js.map

package/packages/gsd-cloud/dist/inject-gateway.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-gateway.test.js","sourceRoot":"","sources":["../src/inject-gateway.test.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,2EAA2E;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE5E,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,4BAA4B,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,4BAA4B,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EACzE,CAAC,EACD,mBAAmB,CACpB,CAAC;AACJ,CAAC,CAAC,CAAC","sourcesContent":["// Project/App: Open GSD\n// File Purpose: Unit tests locking the default-gateway injection contract.\nimport { test } from \"node:test\";\nimport assert from \"node:assert/strict\";\nimport { injectDefaultGateway, DEFAULT_GATEWAY } from \"./inject-gateway.js\";\n\ntest(\"Test 1: login without --gateway injects the default gateway\", () => {\n  const out = injectDefaultGateway([\"login\"]);\n  assert.ok(out.includes(\"--gateway\"), \"expected --gateway flag\");\n  assert.ok(out.includes(DEFAULT_GATEWAY), \"expected default gateway value\");\n  assert.equal(DEFAULT_GATEWAY, \"https://cloud.opengsd.net\");\n  const idx = out.indexOf(\"--gateway\");\n  assert.equal(out[idx + 1], DEFAULT_GATEWAY, \"value must follow the flag\");\n});\n\ntest(\"Test 2: login with explicit --gateway is returned unchanged\", () => {\n  const argv = [\"login\", \"--gateway\", \"https://other.example\"];\n  const out = injectDefaultGateway(argv);\n  assert.deepEqual(out, argv);\n  assert.equal(out.filter((a) => a === \"--gateway\").length, 1, \"no double gateway\");\n});\n\ntest(\"Test 3: pair without --gateway injects the default gateway\", () => {\n  const out = injectDefaultGateway([\"pair\", \"--code\", \"X\"]);\n  assert.ok(out.includes(\"--gateway\"), \"expected --gateway flag\");\n  assert.ok(out.includes(DEFAULT_GATEWAY), \"expected default gateway value\");\n});\n\ntest(\"Test 4: status/connect/disconnect are returned unchanged\", () => {\n  for (const cmd of [\"status\", \"connect\", \"disconnect\"]) {\n    const out = injectDefaultGateway([cmd]);\n    assert.deepEqual(out, [cmd], `${cmd} must not inject a gateway`);\n  }\n});\n\ntest(\"Test 5: empty argv (no command) is returned unchanged\", () => {\n  assert.deepEqual(injectDefaultGateway([]), []);\n});\n\ntest(\"Test 6: login with equals-form --gateway=... is returned unchanged\", () => {\n  const argv = [\"login\", \"--gateway=https://other.example\"];\n  const out = injectDefaultGateway(argv);\n  assert.deepEqual(out, argv);\n  assert.ok(!out.includes(DEFAULT_GATEWAY), \"default gateway must not be appended\");\n  assert.equal(\n    out.filter((a) => a === \"--gateway\" || a.startsWith(\"--gateway=\")).length,\n    1,\n    \"no double gateway\",\n  );\n});\n"]}

package/packages/gsd-cloud/dist/logger.d.ts

@@ -0,0 +1,25 @@
+import type { LogLevel } from './types.js';
+export interface LoggerOptions {
+    filePath: string;
+    level: LogLevel;
+    verbose?: boolean;
+}
+/**
+ * Structured JSON-lines file logger.
+ * Writes LogEntry objects one per line in append mode.
+ * The open write stream keeps the Node event loop alive (daemon keepalive).
+ */
+export declare class Logger {
+    private readonly stream;
+    private readonly level;
+    private readonly verbose;
+    constructor(opts: LoggerOptions);
+    debug(msg: string, data?: Record<string, unknown>): void;
+    info(msg: string, data?: Record<string, unknown>): void;
+    warn(msg: string, data?: Record<string, unknown>): void;
+    error(msg: string, data?: Record<string, unknown>): void;
+    /** End the write stream. Resolves when the stream is fully flushed. */
+    close(): Promise<void>;
+    private write;
+}
+//# sourceMappingURL=logger.d.ts.map

package/packages/gsd-cloud/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAY,MAAM,YAAY,CAAC;AASrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;gBAEtB,IAAI,EAAE,aAAa;IAe/B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIvD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIvD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIxD,uEAAuE;IACvE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAUtB,OAAO,CAAC,KAAK;CAmBd"}

package/packages/gsd-cloud/dist/logger.js

@@ -0,0 +1,72 @@
+import { createWriteStream, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+const LEVEL_ORDER = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+/**
+ * Structured JSON-lines file logger.
+ * Writes LogEntry objects one per line in append mode.
+ * The open write stream keeps the Node event loop alive (daemon keepalive).
+ */
+export class Logger {
+    stream;
+    level;
+    verbose;
+    constructor(opts) {
+        // Ensure parent directory exists
+        const dir = dirname(opts.filePath);
+        try {
+            mkdirSync(dir, { recursive: true });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new Error(`Cannot create log directory ${dir}: ${msg}`);
+        }
+        this.stream = createWriteStream(opts.filePath, { flags: 'a' });
+        this.level = LEVEL_ORDER[opts.level] ?? LEVEL_ORDER.info;
+        this.verbose = opts.verbose ?? false;
+    }
+    debug(msg, data) {
+        this.write('debug', msg, data);
+    }
+    info(msg, data) {
+        this.write('info', msg, data);
+    }
+    warn(msg, data) {
+        this.write('warn', msg, data);
+    }
+    error(msg, data) {
+        this.write('error', msg, data);
+    }
+    /** End the write stream. Resolves when the stream is fully flushed. */
+    close() {
+        return new Promise((resolve, reject) => {
+            // Attach listeners BEFORE triggering end() so a synchronous error
+            // from end() or an immediate 'close' cannot slip past the listener.
+            this.stream.once('close', () => resolve());
+            this.stream.once('error', reject);
+            this.stream.end();
+        });
+    }
+    write(level, msg, data) {
+        if (LEVEL_ORDER[level] < this.level)
+            return;
+        const entry = {
+            ts: new Date().toISOString(),
+            level,
+            msg,
+            ...(data !== undefined ? { data } : {}),
+        };
+        const line = JSON.stringify(entry) + '\n';
+        this.stream.write(line);
+        if (this.verbose) {
+            const prefix = `[${entry.ts}] ${level.toUpperCase()}`;
+            const suffix = data ? ` ${JSON.stringify(data)}` : '';
+            process.stderr.write(`${prefix}: ${msg}${suffix}\n`);
+        }
+    }
+}
+//# sourceMappingURL=logger.js.map

package/packages/gsd-cloud/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAoB,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAQF;;;;GAIG;AACH,MAAM,OAAO,MAAM;IACA,MAAM,CAAc;IACpB,KAAK,CAAS;IACd,OAAO,CAAU;IAElC,YAAY,IAAmB;QAC7B,iCAAiC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC;QACzD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAA8B;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,IAA8B;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,IAA8B;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAA8B;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,uEAAuE;IACvE,KAAK;QACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAe,EAAE,GAAW,EAAE,IAA8B;QACxE,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO;QAE5C,MAAM,KAAK,GAAa;YACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK;YACL,GAAG;YACH,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAExB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { createWriteStream, mkdirSync, type WriteStream } from 'node:fs';\nimport { dirname } from 'node:path';\nimport type { LogLevel, LogEntry } from './types.js';\n\nconst LEVEL_ORDER: Record<LogLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\nexport interface LoggerOptions {\n  filePath: string;\n  level: LogLevel;\n  verbose?: boolean;\n}\n\n/**\n * Structured JSON-lines file logger.\n * Writes LogEntry objects one per line in append mode.\n * The open write stream keeps the Node event loop alive (daemon keepalive).\n */\nexport class Logger {\n  private readonly stream: WriteStream;\n  private readonly level: number;\n  private readonly verbose: boolean;\n\n  constructor(opts: LoggerOptions) {\n    // Ensure parent directory exists\n    const dir = dirname(opts.filePath);\n    try {\n      mkdirSync(dir, { recursive: true });\n    } catch (err: unknown) {\n      const msg = err instanceof Error ? err.message : String(err);\n      throw new Error(`Cannot create log directory ${dir}: ${msg}`);\n    }\n\n    this.stream = createWriteStream(opts.filePath, { flags: 'a' });\n    this.level = LEVEL_ORDER[opts.level] ?? LEVEL_ORDER.info;\n    this.verbose = opts.verbose ?? false;\n  }\n\n  debug(msg: string, data?: Record<string, unknown>): void {\n    this.write('debug', msg, data);\n  }\n\n  info(msg: string, data?: Record<string, unknown>): void {\n    this.write('info', msg, data);\n  }\n\n  warn(msg: string, data?: Record<string, unknown>): void {\n    this.write('warn', msg, data);\n  }\n\n  error(msg: string, data?: Record<string, unknown>): void {\n    this.write('error', msg, data);\n  }\n\n  /** End the write stream. Resolves when the stream is fully flushed. */\n  close(): Promise<void> {\n    return new Promise<void>((resolve, reject) => {\n      // Attach listeners BEFORE triggering end() so a synchronous error\n      // from end() or an immediate 'close' cannot slip past the listener.\n      this.stream.once('close', () => resolve());\n      this.stream.once('error', reject);\n      this.stream.end();\n    });\n  }\n\n  private write(level: LogLevel, msg: string, data?: Record<string, unknown>): void {\n    if (LEVEL_ORDER[level] < this.level) return;\n\n    const entry: LogEntry = {\n      ts: new Date().toISOString(),\n      level,\n      msg,\n      ...(data !== undefined ? { data } : {}),\n    };\n\n    const line = JSON.stringify(entry) + '\\n';\n    this.stream.write(line);\n\n    if (this.verbose) {\n      const prefix = `[${entry.ts}] ${level.toUpperCase()}`;\n      const suffix = data ? ` ${JSON.stringify(data)}` : '';\n      process.stderr.write(`${prefix}: ${msg}${suffix}\\n`);\n    }\n  }\n}\n"]}

package/packages/gsd-cloud/dist/types.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Log severity levels, ordered from most to least verbose.
+ */
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+/**
+ * A single structured log entry written as JSON-lines.
+ */
+export interface LogEntry {
+    /** ISO-8601 timestamp */
+    ts: string;
+    level: LogLevel;
+    msg: string;
+    data?: Record<string, unknown>;
+}
+/**
+ * Top-level daemon configuration, loaded from YAML.
+ *
+ * Only the `cloud` and `log` blocks are load-bearing for the standalone agent.
+ * The `discord` and `projects` blocks are preserved so an existing
+ * `~/.gsd/daemon.yaml` written by the full daemon parses without loss, but the
+ * standalone agent does not act on them (it uses its own project source).
+ */
+export interface DaemonConfig {
+    cloud?: {
+        gateway_url: string;
+        device_token?: string;
+        runtime_id?: string;
+        runtime_name?: string;
+        enabled?: boolean;
+    };
+    discord?: {
+        token: string;
+        guild_id: string;
+        owner_id: string;
+        dm_on_blocker?: boolean;
+        control_channel_id?: string;
+        orchestrator?: {
+            model?: string;
+            max_tokens?: number;
+        };
+    };
+    projects: {
+        scan_roots: string[];
+    };
+    log: {
+        file: string;
+        level: LogLevel;
+        max_size_mb: number;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/gsd-cloud/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,YAAY,CAAC,EAAE;YACb,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,CAAC;KACH,CAAC;IACF,QAAQ,EAAE;QACR,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,GAAG,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,QAAQ,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH"}

package/packages/gsd-cloud/dist/types.js

@@ -0,0 +1,9 @@
+// Project/App: Open GSD
+// File Purpose: Trimmed, self-contained config/log types for the standalone cloud agent.
+//
+// This is a deliberately minimal copy of the daemon's types.ts. It defines ONLY
+// what the extracted cloud path needs (config parsing, logging) and imports NO
+// `@opengsd/rpc-client` or `@opengsd/contracts` — that is what makes this package
+// installable without the internal `@gsd/*` scope.
+export {};
+//# sourceMappingURL=types.js.map

package/packages/gsd-cloud/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,yFAAyF;AACzF,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,mDAAmD","sourcesContent":["// Project/App: Open GSD\n// File Purpose: Trimmed, self-contained config/log types for the standalone cloud agent.\n//\n// This is a deliberately minimal copy of the daemon's types.ts. It defines ONLY\n// what the extracted cloud path needs (config parsing, logging) and imports NO\n// `@opengsd/rpc-client` or `@opengsd/contracts` — that is what makes this package\n// installable without the internal `@gsd/*` scope.\n\n/**\n * Log severity levels, ordered from most to least verbose.\n */\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error';\n\n/**\n * A single structured log entry written as JSON-lines.\n */\nexport interface LogEntry {\n  /** ISO-8601 timestamp */\n  ts: string;\n  level: LogLevel;\n  msg: string;\n  data?: Record<string, unknown>;\n}\n\n/**\n * Top-level daemon configuration, loaded from YAML.\n *\n * Only the `cloud` and `log` blocks are load-bearing for the standalone agent.\n * The `discord` and `projects` blocks are preserved so an existing\n * `~/.gsd/daemon.yaml` written by the full daemon parses without loss, but the\n * standalone agent does not act on them (it uses its own project source).\n */\nexport interface DaemonConfig {\n  cloud?: {\n    gateway_url: string;\n    device_token?: string;\n    runtime_id?: string;\n    runtime_name?: string;\n    enabled?: boolean;\n  };\n  discord?: {\n    token: string;\n    guild_id: string;\n    owner_id: string;\n    dm_on_blocker?: boolean;\n    control_channel_id?: string;\n    orchestrator?: {\n      model?: string;\n      max_tokens?: number;\n    };\n  };\n  projects: {\n    scan_roots: string[];\n  };\n  log: {\n    file: string;\n    level: LogLevel;\n    max_size_mb: number;\n  };\n}\n"]}

package/packages/gsd-cloud/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengsd/gsd-cloud",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "Standalone CLI agent that connects a local GSD runtime to GSD Cloud (cloud.opengsd.net)",
   "license": "MIT",
   "repository": {
@@ -16,8 +16,8 @@
     "gsd-cloud": "./bin/gsd-cloud.js"
   },
   "scripts": {
-    "build": "node ../../scripts/clean-package-dist.cjs && tsc",
-    "test": "pnpm run build && node --test dist/inject-gateway.test.js dist/cloud-gateway-lookup.test.js dist/cloud-runtime.test.js dist/executors/mcp-stdio-client.test.js dist/executors/gsd-pi-executor.test.js"
+    "build": "node ../../scripts/clean-package-dist.cjs && tsc -p tsconfig.json --incremental false",
+    "test": "pnpm run build && node --test dist/inject-gateway.test.js dist/cloud-gateway-lookup.test.js dist/cloud-config.test.js dist/device-flow.test.js dist/cloud-runtime.test.js dist/executors/mcp-stdio-client.test.js dist/executors/gsd-pi-executor.test.js"
   },
   "dependencies": {
     "ws": "^8.21.0",

package/packages/mcp-server/README.md

@@ -87,6 +87,8 @@ The workflow MCP surface includes:
 - `gsd_plan_slice`
 - `gsd_plan_task`
 - `gsd_replan_slice`
+- `gsd_replan_task`
+- `gsd_rework_brief_save`
 - `gsd_slice_complete`
 - `gsd_skip_slice`
 - `gsd_complete_milestone`
@@ -116,6 +118,12 @@ These tools use the same GSD workflow handlers as the native in-process tool pat
 
 `gsd_summary_save` computes artifact paths from the supplied IDs. `milestone_id` is required for milestone-, slice-, and task-scoped artifact types (`SUMMARY`, `RESEARCH`, `CONTEXT`, `ASSESSMENT`, `CONTEXT-DRAFT`) and should be omitted only for root-level `PROJECT`, `PROJECT-DRAFT`, `REQUIREMENTS`, and `REQUIREMENTS-DRAFT` artifacts. The `content` field has a schema `maxLength` of 50,000 characters per save; callers that produce larger artifacts should save incrementally by writing a substantive draft, then re-save the enriched artifact as more detail is available. For final `REQUIREMENTS` saves, the tool renders content from active database requirement rows; callers must create those rows with `gsd_requirement_save` first.
 
+`gsd_replan_task` updates one existing pending task's planning contract after rework without replacing sibling tasks. `projectDir` is optional; when omitted, the server uses its current project or worktree root. Required parameters are `milestoneId`, `sliceId`, `taskId`, `title`, `description`, `estimate`, `files`, `verify`, `inputs`, and `expectedOutput`; `reworkBriefRef` is optional and records the brief that triggered the update. The tool rejects missing tasks and closed/completed tasks; reopen a completed task first with `gsd_task_reopen`.
+
+`gsd_rework_brief_save` persists structured rework findings for a task. `projectDir` is optional; required parameters are `milestoneId`, `sliceId`, `taskId`, and a non-empty `findings` array. Each finding requires `findingId`, `severity` (`blocking` or `advisory`), `description`, `requiredFix`, and `verificationCommands`; optional fields are `status`, `evidence`, and `decisionRef`.
+
+Blocking findings saved by `gsd_rework_brief_save` gate `gsd_task_complete`. To complete the task, the `gsd_task_complete` call must include a `reworkResolution` entry for each pending blocking `findingId` with `status: "resolved"` and non-empty `evidence`. Deferred findings must use `status: "deferred-with-override"` with non-empty `evidence` and a `decisionRef`.
+
 ### Interactive tools
 
 The packaged server exposes `ask_user_questions` through MCP form elicitation. This keeps the existing GSD answer payload shape while allowing Claude Code CLI and other elicitation-capable clients to surface structured user choices.

package/packages/mcp-server/dist/workflow-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-tools.d.ts","sourceRoot":"","sources":["../src/workflow-tools.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwXxB,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CA+BnG;AA+GD,wBAAgB,yBAAyB,CAAC,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAE5B;AA6JD,4CAA4C;AAC5C,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrE;AAED,4CAA4C;AAC5C,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3E;AA6FD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG7D;AAgCD,UAAU,aAAa;IACrB,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAC7F,OAAO,CAAC;CACZ;AAED,eAAO,MAAM,mBAAmB,mBAA+B,CAAC;AAChE,eAAO,MAAM,6BAA6B,mBAAyC,CAAC;AACpF,eAAO,MAAM,yBAAyB,mBAAqC,CAAC;AA0G5E,4CAA4C;AAC5C,wBAAgB,sCAAsC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE1F;AAyuBD,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AA4B/D,eAAO,MAAM,yBAAyB;;;;;;;iBAAoB,CAAC;AA+R3D,MAAM,WAAW,4BAA4B;IAC3C;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,aAAa,EACzB,OAAO,GAAE,4BAAiC,GACzC,IAAI,CAuyBN"}
+{"version":3,"file":"workflow-tools.d.ts","sourceRoot":"","sources":["../src/workflow-tools.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiaxB,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CA+BnG;AA+GD,wBAAgB,yBAAyB,CAAC,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAE5B;AA+JD,4CAA4C;AAC5C,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrE;AAED,4CAA4C;AAC5C,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3E;AA6FD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG7D;AAgCD,UAAU,aAAa;IACrB,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAC7F,OAAO,CAAC;CACZ;AAED,eAAO,MAAM,mBAAmB,mBAA+B,CAAC;AAChE,eAAO,MAAM,6BAA6B,mBAAyC,CAAC;AACpF,eAAO,MAAM,yBAAyB,mBAAqC,CAAC;AA0G5E,4CAA4C;AAC5C,wBAAgB,sCAAsC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE1F;AAqyBD,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AA4B/D,eAAO,MAAM,yBAAyB;;;;;;;iBAAoB,CAAC;AAqS3D,MAAM,WAAW,4BAA4B;IAC3C;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,aAAa,EACzB,OAAO,GAAE,4BAAiC,GACzC,IAAI,CA2zBN"}

package/packages/mcp-server/dist/workflow-tools.js

@@ -216,6 +216,8 @@ function isWorkflowToolExecutors(value) {
         "executePlanMilestone",
         "executePlanSlice",
         "executeReplanSlice",
+        "executeReplanTask",
+        "executeReworkBriefSave",
         "executeSliceComplete",
         "executeCompleteMilestone",
         "executeValidateMilestone",
@@ -610,6 +612,18 @@ async function handleReplanSlice(projectDir, args) {
     const { projectDir: _projectDir, ...params } = args;
     return adaptExecutorResult(await runSerializedWorkflowOperation(() => executeReplanSlice(params, projectDir)));
 }
+async function handleReplanTask(projectDir, args) {
+    await enforceWorkflowWriteGate("gsd_replan_task", projectDir, args.milestoneId);
+    const { executeReplanTask } = await getWorkflowToolExecutors();
+    const { projectDir: _projectDir, ...params } = args;
+    return adaptExecutorResult(await runSerializedWorkflowOperation(() => executeReplanTask(params, projectDir)));
+}
+async function handleReworkBriefSave(projectDir, args) {
+    await enforceWorkflowWriteGate("gsd_rework_brief_save", projectDir, args.milestoneId);
+    const { executeReworkBriefSave } = await getWorkflowToolExecutors();
+    const { projectDir: _projectDir, ...params } = args;
+    return adaptExecutorResult(await runSerializedWorkflowOperation(() => executeReworkBriefSave(params, projectDir)));
+}
 async function handleCompleteMilestone(projectDir, args) {
     await enforceWorkflowWriteGate("gsd_complete_milestone", projectDir, args.milestoneId);
     const { executeCompleteMilestone } = await getWorkflowToolExecutors();
@@ -1085,6 +1099,40 @@ const replanSliceParams = {
     removedTaskIds: z.array(z.string()).describe("Task IDs to remove from the slice"),
 };
 const replanSliceSchema = z.object(replanSliceParams);
+const replanTaskParams = {
+    projectDir: projectDirParam,
+    milestoneId: nonEmptyString("milestoneId").describe("Milestone ID (e.g. M001)"),
+    sliceId: nonEmptyString("sliceId").describe("Slice ID (e.g. S01)"),
+    taskId: nonEmptyString("taskId").describe("Task ID (e.g. T01)"),
+    title: nonEmptyString("title").describe("Updated task title"),
+    description: nonEmptyString("description").describe("Updated task description incorporating rework scope"),
+    estimate: nonEmptyString("estimate").describe("Updated task estimate"),
+    files: z.array(z.string()).describe("Updated files likely touched"),
+    verify: nonEmptyString("verify").describe("Updated verification command or block"),
+    inputs: z.array(z.string()).describe("Updated input files or references"),
+    expectedOutput: z.array(z.string()).describe("Updated files this task creates or overwrites"),
+    reworkBriefRef: z.string().optional().describe("Rework brief ID/reference that triggered this task replan"),
+};
+const replanTaskSchema = z.object(replanTaskParams);
+const reworkFindingSchema = z.object({
+    findingId: nonEmptyString("findingId"),
+    severity: z.enum(["blocking", "advisory"]),
+    description: nonEmptyString("description"),
+    requiredFix: nonEmptyString("requiredFix"),
+    verificationCommands: z.array(z.string()),
+    status: z.enum(["pending", "resolved", "deferred-with-override"]).optional(),
+    evidence: z.string().optional(),
+    decisionRef: z.string().optional(),
+});
+const reworkBriefSaveParams = {
+    projectDir: projectDirParam,
+    briefId: z.string().optional().describe("Stable brief ID"),
+    milestoneId: nonEmptyString("milestoneId").describe("Milestone ID (e.g. M001)"),
+    sliceId: nonEmptyString("sliceId").describe("Slice ID (e.g. S01)"),
+    taskId: nonEmptyString("taskId").describe("Task ID (e.g. T01)"),
+    findings: z.array(reworkFindingSchema).min(1).describe("Structured rework findings for this task"),
+};
+const reworkBriefSaveSchema = z.object(reworkBriefSaveParams);
 const sliceCompleteParams = {
     projectDir: projectDirParam,
     sliceId: nonEmptyString("sliceId").describe("Slice ID (e.g. S01)"),
@@ -1242,6 +1290,12 @@ const taskCompleteParams = {
         continueWithDefault: z.boolean().describe("When true, the recommendation is recorded as the default, but auto-mode still pauses until the user resolves via /gsd escalate resolve."),
     }).optional().describe("ADR-011 Phase 2: optional escalation payload. Only honored when phases.mid_execution_escalation is true."),
     verificationEvidence: z.array(verificationEvidenceItemSchema).optional().describe("Verification evidence entries"),
+    reworkResolution: z.array(z.object({
+        findingId: nonEmptyString("findingId"),
+        status: z.enum(["resolved", "deferred-with-override"]),
+        evidence: nonEmptyString("evidence"),
+        decisionRef: z.string().optional(),
+    })).optional().describe("Resolution evidence for structured rework findings linked to this task"),
 };
 const taskCompleteSchema = z.object(taskCompleteParams);
 const taskReopenParams = {
@@ -1538,7 +1592,7 @@ export function registerWorkflowTools(realServer, options = {}) {
         const { executePlanSlice } = await getWorkflowToolExecutors();
         return adaptExecutorResult(await runSerializedWorkflowOperation(() => executePlanSlice(params, projectDir)));
     });
-    server.tool("gsd_plan_task", "Write task planning state to the GSD database and render tasks/T##-PLAN.md from DB.", planTaskParams, async (args) => {
+    server.tool("gsd_plan_task", "Write task planning state to the GSD database and render the slice PLAN from DB.", planTaskParams, async (args) => {
         const parsed = parseWorkflowArgs(planTaskSchema, args);
         const { projectDir, ...params } = parsed;
         await enforceWorkflowWriteGate("gsd_plan_task", projectDir, params.milestoneId);
@@ -1553,7 +1607,7 @@ export function registerWorkflowTools(realServer, options = {}) {
             content: [{ type: "text", text: `Planned task ${result.taskId} (${result.sliceId}/${result.milestoneId})` }],
         };
     });
-    server.tool("gsd_task_plan", "Alias for gsd_plan_task. Write task planning state to the GSD database and render tasks/T##-PLAN.md from DB.", planTaskParams, async (args) => {
+    server.tool("gsd_task_plan", "Alias for gsd_plan_task. Write task planning state to the GSD database and render the slice PLAN from DB.", planTaskParams, async (args) => {
         logAliasUsage("gsd_task_plan", "gsd_plan_task");
         const parsed = parseWorkflowArgs(planTaskSchema, args);
         const { projectDir, ...params } = parsed;
@@ -1578,6 +1632,14 @@ export function registerWorkflowTools(realServer, options = {}) {
         const parsed = parseWorkflowArgs(replanSliceSchema, args);
         return handleReplanSlice(parsed.projectDir, parsed);
     });
+    server.tool("gsd_replan_task", "Update one pending task's planning contract after rework without touching sibling tasks.", replanTaskParams, async (args) => {
+        const parsed = parseWorkflowArgs(replanTaskSchema, args);
+        return handleReplanTask(parsed.projectDir, parsed);
+    });
+    server.tool("gsd_rework_brief_save", "Persist a structured task rework brief whose blocking findings gate gsd_task_complete.", reworkBriefSaveParams, async (args) => {
+        const parsed = parseWorkflowArgs(reworkBriefSaveSchema, args);
+        return handleReworkBriefSave(parsed.projectDir, parsed);
+    });
     server.tool("gsd_slice_complete", "Record a completed slice to the GSD database, render SUMMARY.md + UAT.md, and update roadmap projection.", sliceCompleteParams, async (args) => {
         const parsed = parseWorkflowArgs(sliceCompleteSchema, args);
         return handleSliceComplete(parsed.projectDir, parsed);