gestalt-mobile 0.42.0 → 0.43.0

package/dist/server/server/platform/plans/org-plan-discovery.js

@@ -0,0 +1,53 @@
+/*
+ * Copyright (C) 2026 Dyne.org foundation
+ * Designed by Denis Roio <jaromil@dyne.org>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execute = promisify(execFile);
+async function run(command, args, cwd) {
+    try {
+        const result = await execute(command, [...args], {
+            cwd,
+            encoding: 'utf8',
+            maxBuffer: 64 * 1024 * 1024,
+            timeout: 30_000,
+        });
+        return result.stdout;
+    }
+    catch (error) {
+        const failure = error;
+        // Permission errors in one branch must not hide readable plans elsewhere.
+        if (failure.code === 1 && !failure.killed && typeof failure.stdout === 'string')
+            return failure.stdout;
+        throw error;
+    }
+}
+/** Native, NUL-delimited discovery; never invokes a shell or follows symlinks. */
+export class OrgPlanDiscovery {
+    execute;
+    command = 'bfs';
+    constructor(execute = run) {
+        this.execute = execute;
+    }
+    async list(workspace) {
+        const args = ['.', '-type', 'f', '-name', '*.org', '-path', '*/.gestalt/*', '-print0'];
+        let output;
+        try {
+            output = await this.execute(this.command, args, workspace);
+        }
+        catch (error) {
+            if (this.command !== 'bfs' || error.code !== 'ENOENT')
+                throw error;
+            this.command = 'find';
+            output = await this.execute('find', args, workspace);
+        }
+        return [
+            ...new Set(output
+                .split('\0')
+                .filter(Boolean)
+                .map((path) => path.replace(/^\.\//, ''))),
+        ];
+    }
+}

package/dist/server/shared/contracts/session-defaults.js

@@ -0,0 +1,20 @@
+/*
+ * Copyright (C) 2026 Dyne.org foundation
+ * Designed by Denis Roio <jaromil@dyne.org>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+import { z } from 'zod';
+import { thinkingLevels } from './session-model-settings.js';
+export const sessionDefaultsSchema = z
+    .object({
+    workspaceId: z.string().max(4096),
+    skillProfile: z.string().max(256),
+    provider: z.enum(['codex', 'kimi']),
+    model: z.string().min(1).max(256),
+    reasoningEffort: z.enum(thinkingLevels).default('medium'),
+    executorModel: z.string().trim().min(1).max(256).default('gpt-5.6-terra'),
+    executorReasoningEffort: z.enum(thinkingLevels).default('high'),
+    sandbox: z.enum(['workspace-git', 'workspace-write', 'read-only', 'danger-full-access']),
+    approvalPolicy: z.enum(['untrusted', 'on-request', 'never']),
+})
+    .strict();

package/dist/server/shared/contracts/session-model-settings.js

@@ -0,0 +1,6 @@
+/*
+ * Copyright (C) 2026 Dyne.org foundation
+ * Designed by Denis Roio <jaromil@dyne.org>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+export const thinkingLevels = ['low', 'medium', 'high', 'xhigh', 'max', 'ultra'];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gestalt-mobile",
-  "version": "0.42.0",
+  "version": "0.43.0",
   "description": "Mobile-first web relay for durable Codex development sessions",
   "keywords": [
     "codex",
@@ -72,7 +72,9 @@
     "@fontsource/syne": "5.2.7",
     "@simplewebauthn/browser": "13.3.0",
     "@simplewebauthn/server": "13.3.2",
+    "dompurify": "^3.4.16",
     "fastify": "^5.12.3",
+    "marked": "^18.0.14",
     "qrcode": "^1.5.4",
     "ws": "^8.21.0",
     "yaml": "^2.9.0",