@pmelab/gtd 64.1.2 → 64.3.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gtd",
-  "version": "64.1.2",
+  "version": "64.3.0",
   "description": "Drive the gtd loop inside Claude Code: agent turns run as subagents, gtd decides every beat",
   "author": {
     "name": "Philipp Melab"

package/README.md

@@ -433,22 +433,25 @@ commit. Its guide is
 Prefer a phone or another device over your editor? `gtd ui` opens the file whose
 turn it is as a small web app, over Tailscale — including a step that names no
 format, or one nothing recognizes, which still opens as plain markdown structure
-instead of refusing to start: read, plus a note on any block. It also binds on
-an idle worktree — nothing pending yet — opening `.gtd/TODO.md` free-form with a
-bare textfield so you can sketch from your phone; the sketch stays un-triaged on
-disk until you run `gtd` again, from anywhere, to pick it up. A description
-renders inline markdown — bold, code, strikethrough, links, and images — instead
-of literal asterisks and backticks. A note you add from the phone starts a
-thread: a footnote holding a `H:`/`A:` conversation. Threads show as a
-conversation under their block, question, chunk, or hunk — or, in a review chunk
-with no file pointers, under each line of its lists, so a summary's entries take
-a note apiece — and one the agent answered last carries a "waiting on you"
-badge. Tap it to reply — your reply is added as a new `H:` entry; while the
-agent has yet to answer, reopening it edits your last entry instead. Tap an
-already-answered question to leave a note on it; the agent may overturn the
-answer. A `findings` file lists its findings, each with a fix checkbox and, once
-ticked, an optional line of guidance; Done stays disabled while the file holds
-anything its gate would refuse. See
+instead of refusing to start: read, plus a note on any block and tickable
+task-list boxes (each list is pick-one: ticking a box unticks its siblings, and
+a ticked box can't be cleared from the phone). It also binds on an idle worktree
+— nothing pending yet — opening `.gtd/TODO.md` free-form with a bare textfield
+so you can sketch from your phone; the sketch stays un-triaged on disk until you
+run `gtd` again, from anywhere, to pick it up. A description renders inline
+markdown — bold, code, strikethrough, links, and images — instead of literal
+asterisks and backticks. A note you add from the phone starts a thread: a
+footnote holding a `H:`/`A:` conversation. Threads show as a conversation under
+their block, question, chunk, or hunk — or, in a review chunk with no file
+pointers, under each line of its lists, so a summary's entries take a note
+apiece — and one the agent answered last carries a "waiting on you" badge. Tap
+it to reply — your reply is added as a new `H:` entry; while the agent has yet
+to answer, reopening it edits your last entry instead. Tap an already-answered
+question to leave a note on it; the agent may overturn the answer. A `findings`
+file lists its findings, each with a fix checkbox and, once ticked, an optional
+line of guidance; Done stays disabled while the file holds anything its gate
+would refuse. Done saves and leaves the server running; it exits once the
+worktree moves on to another step. See
 [Configuration](https://github.com/pmelab/gtd/blob/main/docs/configuration.md)
 for its `ui:` settings.
 
@@ -472,6 +475,15 @@ unknown key. `gtd.config.ts` is the only repository config: gtd 23 removed the
 home directory — fails every command until you delete it. See
 [Migrating from `.gtdrc`](https://github.com/pmelab/gtd/blob/main/docs/configuration.md#migrating-from-gtdrc).
 
+## Large untracked trees
+
+`gtd next`, `gtd land`, `gtd judge answer` and `gtd start` refuse when the
+worktree holds more than 1,000 untracked, un-ignored files (a landing would
+commit them all). The error names the count and the largest untracked
+directories; add them to `.gitignore` (or `.git/info/exclude`) or delete them,
+then run again. Fixed limit, no config key. Every other command — read-only ones
+like `gtd check --open-threads`, `gtd judge`, `gtd validate` — never refuses.
+
 ## Checking a range for stray files
 
 ```sh

package/dist/chunks/{steering-CQzL-lX1.mjs → steering-DEh_MS40.mjs}

@@ -16486,6 +16486,58 @@ const appendEdit = (content, text) => {
 	const newText = trimmed.length > 0 ? `${trimmed}${eol}${eol}${normalizedText}${eol}` : `${normalizedText}${eol}`;
 	return wholeDocumentEdit(content, newText);
 };
+/** Every task-list item with its sibling task items (direct children of one list only). */
+const taskGroups = (node, out) => {
+	const n = node;
+	if (n.type === "list") out.push(n.children.filter((i) => i.checked === true || i.checked === false));
+	for (const c of n.children ?? []) taskGroups(c, out);
+};
+/** The box sits on the first child's line, which is not the marker line when a bare `-` precedes it. */
+const boxEdit = (lines, item, newText) => {
+	const line = toLspPosition((item.children[0]?.position ?? item.position).start).line;
+	const m = /\[( |x|X)\]/.exec(lines[line] ?? "");
+	if (!m) return void 0;
+	const c = m.index + 1;
+	return {
+		range: {
+			start: {
+				line,
+				character: c
+			},
+			end: {
+				line,
+				character: c + 1
+			}
+		},
+		newText
+	};
+};
+/** Pick-one tick: sets the box on `line` and unticks its ticked siblings, in one edit set. Ticking an already-ticked box is an empty edit set. */
+const tickEdits = (content, line) => {
+	const lines = content.split("\n");
+	const groups = [];
+	taskGroups(parseMarkdown(content), groups);
+	const startLine = (i) => toLspPosition(i.position.start).line;
+	const group = groups.find((g) => g.some((i) => startLine(i) === line));
+	if (!group) return {
+		ok: false,
+		reason: "anchor-not-found"
+	};
+	const target = group.find((i) => startLine(i) === line);
+	if (target.checked === true) return {
+		ok: true,
+		edits: []
+	};
+	const edits = group.filter((i) => i === target || i.checked === true).map((i) => boxEdit(lines, i, i === target ? "x" : " "));
+	if (edits.some((e) => e === void 0)) return {
+		ok: false,
+		reason: "anchor-not-found"
+	};
+	return {
+		ok: true,
+		edits
+	};
+};
 /**
 * Free-form's `apply`: only a `paragraph` anchor resolves (the only kind
 * `view` ever reports), and it only ever APPENDS, at or past the document's
@@ -16500,6 +16552,11 @@ const freeFormApply = (content, anchor, opts) => {
 		ok: false,
 		reason: "anchor-not-found"
 	};
+	if (opts.checked === true) return tickEdits(content, anchor.line);
+	if (opts.checked === false) return {
+		ok: false,
+		reason: "pick-never-clears"
+	};
 	const text = opts.text ?? "";
 	const tree = parseMarkdown(content);
 	const lastLineIndex = content.split(/\r?\n/).length - 1;

package/dist/chunks/{testkit-D539mnDI.mjs → testkit-BUX-47TD.mjs}

@@ -1,6 +1,6 @@
 import { C as moveScript, D as revertScript, E as restoreScript, H as installContext, K as markedOptions, O as showScript, S as checkScript, T as removeScript, Y as protocolMismatch, i as configure, k as writeScript$1, n as configProblems, o as isFactoryWorkflow, p as numeric, s as answered, t as flows_exports, x as applyScript } from "./flows-dnIE_qbe.mjs";
 import { M as renderFormat, O as ACCESS_REFUSAL, a as renderScriptJson, d as renderLandPlain, f as DEMAND_BRIEFING, g as statusOf, h as renderBeatJson, i as judgeJson, k as PIN_PATH, l as noopText, m as beatDocument, n as resolveSession, o as scriptFields, p as renderBeatPlain, r as selectPath, s as landFields, t as globMatches, u as renderLandJson, v as beatKindOf, y as demandOf } from "./wire-CaPJ9Tme.mjs";
-import { F as headingSectionBodies, I as formatFinding, a as sections, c as openThreads, d as formatFromSpec, i as sectionBodies, l as steeringFormatFor, o as threads, r as openQuestions, s as BUILT_IN_MODE_NAMES, t as parseCodeThreads, u as unansweredQuestions } from "./steering-CQzL-lX1.mjs";
+import { F as headingSectionBodies, I as formatFinding, a as sections, c as openThreads, d as formatFromSpec, i as sectionBodies, l as steeringFormatFor, o as threads, r as openQuestions, s as BUILT_IN_MODE_NAMES, t as parseCodeThreads, u as unansweredQuestions } from "./steering-DEh_MS40.mjs";
 import { createRequire, isBuiltin } from "node:module";
 import * as Crypto from "node:crypto";
 import { createHash } from "node:crypto";
@@ -20448,14 +20448,20 @@ const stripCommitSeam = (tail) => {
 	const afterNul = tail.startsWith("\0") ? tail.slice(1) : tail;
 	return afterNul.startsWith("\n") ? afterNul.slice(1) : afterNul;
 };
+const ARGV_CHUNK = 500;
+const chunked = (items) => {
+	const out = [];
+	for (let i = 0; i < items.length; i += ARGV_CHUNK) out.push(items.slice(i, i + ARGV_CHUNK));
+	return out;
+};
 /**
 * `path → blob object id` at `ref`; a path absent from the map doesn't exist
 * there. An unresolvable `ref` (an empty repo) yields an empty map, so every
 * candidate reads as "not at `ref`".
 */
-const blobsAtRef = (exec, ref, paths) => exec("git", "ls-tree", "-r", "-z", ref, "--", ...paths).pipe(catch_(() => succeed$1("")), map((out) => {
+const blobsAtRef = (exec, ref, paths) => forEach$1(chunked(paths), (chunk) => exec("git", "ls-tree", "-r", "-z", ref, "--", ...chunk).pipe(catch_(() => succeed$1(""))), { concurrency: 1 }).pipe(map((outs) => {
 	const blobs = /* @__PURE__ */ new Map();
-	for (const entry of splitNul(out)) {
+	for (const entry of outs.flatMap(splitNul)) {
 		const tab = entry.indexOf("	");
 		if (tab === -1) continue;
 		const [, type, oid] = entry.slice(0, tab).split(" ");
@@ -20476,7 +20482,7 @@ const blobsAtRef = (exec, ref, paths) => exec("git", "ls-tree", "-r", "-z", ref,
 * A symlink is the residual inexactness: hash-object hashes the target's
 * content rather than the link text, and reads as `M`, never `D`.
 */
-const hashObjects = (exec, paths) => exec("git", "hash-object", "--", ...paths).pipe(map((out) => new Map(out.trim().split("\n").map((oid, i) => [paths[i] ?? "", oid.trim()]))), catch_(() => succeed$1(/* @__PURE__ */ new Map())));
+const hashObjects = (exec, paths) => forEach$1(chunked(paths), (chunk) => exec("git", "hash-object", "--", ...chunk).pipe(map((out) => out.trim().split("\n").map((oid, i) => [chunk[i] ?? "", oid.trim()]))), { concurrency: 1 }).pipe(map((entries) => new Map(entries.flat())), catch_(() => succeed$1(/* @__PURE__ */ new Map())));
 /**
 * Classify every untracked path against `ref`'s tree, by CONTENT: not at
 * `ref` → `A`; different bytes → `M`; identical bytes → no entry. The latter
@@ -20590,6 +20596,7 @@ const makeGitImpl = (spawner, root) => {
 			}
 			return all;
 		}),
+		untrackedPaths: () => exec("git", "ls-files", "--others", "--exclude-standard", "-z").pipe(map(splitNul)),
 		stagedPaths: () => exec("git", "diff", "--cached", "--name-status", "--no-renames", "-z", "HEAD").pipe(catch_(() => succeed$1("")), map((out) => parseNameStatus(splitNul(out)))),
 		resolveRef: (ref) => exec("git", "rev-parse", "--verify", "--end-of-options", ref).pipe(map((s) => s.trim()), flatMap((hash) => resolvedRefOrCorrupted(ref, hash))),
 		readRefOption: (ref) => exec("git", "rev-parse", "--verify", "--quiet", ref).pipe(map((s) => some(s.trim())), catch_(() => succeed$1(none()))),
@@ -26425,6 +26432,19 @@ const setupFor = (config, run, workspace, host, startOverrides = {}) => gen(func
 		}
 	};
 });
+const UNTRACKED_LIMIT = 1e3;
+const refuseHugeUntracked = gen(function* () {
+	const paths = yield* (yield* GitService).untrackedPaths();
+	if (paths.length <= UNTRACKED_LIMIT) return;
+	const dirs = /* @__PURE__ */ new Map();
+	for (const p of paths) {
+		const i = p.lastIndexOf("/");
+		const d = i === -1 ? "." : p.slice(0, i);
+		dirs.set(d, (dirs.get(d) ?? 0) + 1);
+	}
+	const top = [...dirs].sort((a, b) => b[1] - a[1]).slice(0, 3);
+	return yield* fail$4(/* @__PURE__ */ new Error(`gtd: ${paths.length} untracked files (limit ${UNTRACKED_LIMIT}); largest untracked directories: ${top.map(([d, n]) => `${d} (${n})`).join(", ")}. Add them to .gitignore or delete them.`));
+});
 const pendingChanges = (git, withIndex) => gen(function* () {
 	const worktree = yield* git.changedPaths();
 	if (!withIndex) return worktree;
@@ -27667,6 +27687,7 @@ const landingScript = (required) => combinedScript(required, "");
 const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
 /** Decides `gtd land`'s one transition without performing it. Refusals fail the Effect; a no-op returns `subject: null` and empty scripts. */
 const planLanding = (opts = {}, current) => gen(function* () {
+	yield* refuseHugeUntracked;
 	const rest = current ?? (yield* currentRest);
 	const snapshot = yield* snapshotFromRest(rest, opts.judge);
 	const outcome = planStep(snapshot, opts);
@@ -27848,6 +27869,7 @@ const startWorkflow = (workflow, varOverrides, json, out, commandLabel) => gen(f
 		const startable = config.workflowNames.length > 0 ? `startable: ${config.workflowNames.join(", ")}` : "this config exports no workflow besides its default, which an ordinary start runs";
 		return yield* fail$4(new GtdUsageError(`${commandLabel}: unknown workflow "${workflow}" — ${startable}`));
 	}
+	yield* refuseHugeUntracked;
 	const rest = yield* restAt(void 0, varOverrides);
 	const started = yield* startRefusal(rest, resolved, varOverrides);
 	const plan = yield* planStart({
@@ -28104,6 +28126,7 @@ const restBeatKind = (rest) => beatKindOf({
 * document's own `kind` field, never the exit code.
 */
 const runNextCommand = (json, out) => gen(function* () {
+	yield* refuseHugeUntracked;
 	const rest = yield* currentRest;
 	const rendered = yield* renderRest(rest);
 	const fields = yield* gatherBeatDocument(rest, rendered);
@@ -28271,6 +28294,7 @@ const runUiCliCommand = (command, out) => gen(function* () {
 			...command.host !== void 0 ? { host: command.host } : {},
 			...command.port !== void 0 ? { port: command.port } : {},
 			selfSigned: command.selfSigned,
+			...command.http === true ? { http: true } : {},
 			dev: command.dev
 		},
 		config: config.ui,
@@ -28502,7 +28526,7 @@ const FLAGS = [
 		},
 		scopeError: "gtd: --port is only valid for `gtd ui`",
 		valueHint: "<n>",
-		help: "The tailscale serve port (default: the first free of 8443, 10000, 443), or with --host the port to bind (default: any free one)"
+		help: "The tailscale serve port (default: the first free of 8443, 10000, 443), or with --host or --http the port to bind (default: any free one)"
 	},
 	{
 		name: "--host",
@@ -28524,6 +28548,16 @@ const FLAGS = [
 		valueHint: "",
 		help: "Bind directly with a throwaway self-signed certificate instead of the configured ui.cert/ui.key"
 	},
+	{
+		name: "--http",
+		arity: 0,
+		repeatable: false,
+		scope: (kind) => kind === "ui",
+		decode: () => succeed$5(true),
+		scopeError: "gtd: --http is only valid for `gtd ui`",
+		valueHint: "",
+		help: "Serve plain HTTP for a local TLS-terminating proxy; binds 127.0.0.1 unless a loopback --host is given"
+	},
 	{
 		name: "--dev",
 		arity: 0,
@@ -28834,7 +28868,7 @@ Prints a sorted JSON array ([] when clean) and a summary on stderr; --verbose ad
 		arity: "none",
 		group: "Inspect",
 		summary: "Serve the web and phone client",
-		details: `Serve gtd's web and phone client for this worktree. By default it publishes through \`tailscale serve\`, reachable from anywhere on the tailnet, on the first of ports 8443, 10000 and 443 that works; when none does it serves HTTPS locally instead of refusing.`
+		details: `Serve gtd's web and phone client for this worktree. By default it publishes through \`tailscale serve\`, reachable from anywhere on the tailnet, on the first of ports 8443, 10000 and 443 that works; when none does it serves HTTPS locally instead of refusing. Done saves the steering file and keeps serving; the server exits when the worktree moves on to another step, or on a signal.`
 	},
 	{
 		token: "guide",
@@ -29239,18 +29273,22 @@ const parseArgv = (argv) => {
 			verbose
 		};
 	}
-	if (kind === "ui") return {
-		kind: "command",
-		command: {
-			kind: "ui",
-			...bag["--host"] !== void 0 ? { host: bag["--host"] } : {},
-			...bag["--port"] !== void 0 ? { port: bag["--port"] } : {},
-			selfSigned: bag["--self-signed"] ?? false,
-			dev: bag["--dev"] ?? false
-		},
-		json,
-		verbose
-	};
+	if (kind === "ui") {
+		if (bag["--http"] === true && bag["--self-signed"] === true) return usagePlan("gtd: --http and --self-signed cannot be combined", jsonSeen);
+		return {
+			kind: "command",
+			command: {
+				kind: "ui",
+				...bag["--host"] !== void 0 ? { host: bag["--host"] } : {},
+				...bag["--port"] !== void 0 ? { port: bag["--port"] } : {},
+				selfSigned: bag["--self-signed"] ?? false,
+				...bag["--http"] === true ? { http: true } : {},
+				dev: bag["--dev"] ?? false
+			},
+			json,
+			verbose
+		};
+	}
 	if (kind === "check") return {
 		kind: "command",
 		command: {
@@ -29641,6 +29679,10 @@ var InMemRepo = class InMemRepo {
 	changedPathsWorktree(base) {
 		return diffTrees(this.treeAt(base), new Map(this.worktree));
 	}
+	/** Worktree paths the index does not carry. */
+	untrackedPaths() {
+		return [...this.worktree.keys()].filter((k) => !this.index.has(k));
+	}
 	/** The index vs HEAD — the port's `stagedPaths`. */
 	stagedPaths() {
 		return diffTrees(this.treeAt(void 0), this.index);
@@ -29971,6 +30013,7 @@ const makeGitReaderOps = (repo, root) => ({
 	commitHistory: (base, head) => succeed$1(repo.commitHistory(base, head)),
 	subjectHistory: (pageSize, skip, head) => succeed$1(repo.subjectHistory(pageSize, skip, head)),
 	changedPaths: (base) => succeed$1(repo.changedPathsWorktree(base)),
+	untrackedPaths: () => succeed$1(repo.untrackedPaths()),
 	stagedPaths: () => succeed$1(repo.stagedPaths()),
 	diffPaths: (base, tip) => tryCatch(() => repo.diffPaths(base, tip)),
 	authorIdent: () => succeed$1(some({