gipity 1.0.428 → 1.0.429

package/dist/page-fixtures.js

@@ -8,12 +8,63 @@
 // Uses the same presigned init -> PUT -> complete flow the app file-upload
 // service exposes, with `public: true`. Cleanup goes through the matching
 // DELETE /api/:appGuid/uploads/:guid, which removes the public object too.
-import { readFileSync, statSync } from 'node:fs';
-import { basename } from 'node:path';
+import { readFileSync, statSync, existsSync, readdirSync } from 'node:fs';
+import { basename, resolve, relative, join } from 'node:path';
 import { post, del } from './api.js';
+import { getProjectRoot } from './config.js';
 import { guessMime } from './upload.js';
+/** Dirs a hand-made asset is never in, and that are expensive to walk. */
+const FIND_SKIP = new Set(['node_modules', '.git', '.gipity', 'dist', 'build', '.next', 'coverage']);
+/** Find files named `name` anywhere under `root` (breadth-first, bounded). */
+function findByBasename(root, name, limit = 3) {
+    const hits = [];
+    const queue = [root];
+    let visited = 0;
+    while (queue.length && hits.length < limit && visited < 500) {
+        const dir = queue.shift();
+        visited++;
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            if (e.isDirectory()) {
+                if (!FIND_SKIP.has(e.name))
+                    queue.push(join(dir, e.name));
+            }
+            else if (e.name === name && hits.length < limit) {
+                hits.push(join(dir, e.name));
+            }
+        }
+    }
+    return hits;
+}
+/** Every `page` flag that takes a local file resolves it against the CURRENT
+ *  DIRECTORY, and a bare ENOENT from deep inside the upload path ("stat
+ *  './tmp/fist.jpg'") tells the caller nothing about where we looked or where
+ *  the file actually is. That costs an ls/find round-trip every time a file was
+ *  written somewhere other than where the caller assumed - which is exactly what
+ *  happens after a `cd` that failed, or a `gipity generate` run from a different
+ *  directory. So: name the absolute path we tried, the directory it was resolved
+ *  against, and - when a file with that basename exists elsewhere in the project
+ *  - the path that would have worked. Recovery becomes copy-paste, not a search. */
+export function assertLocalAsset(flag, localPath) {
+    const abs = resolve(localPath);
+    if (existsSync(abs))
+        return;
+    const root = getProjectRoot() ?? process.cwd();
+    const elsewhere = findByBasename(root, basename(localPath)).filter(p => p !== abs);
+    const found = elsewhere.length
+        ? `\nThat file DOES exist here — pass this path instead:\n${elsewhere.map(p => `  ${flag} ${relative(process.cwd(), p) || p}`).join('\n')}`
+        : `\nNothing named "${basename(localPath)}" under ${root} either. Generate a frame with \`gipity generate image "<description>" -o ${localPath}\`, or check the path.`;
+    throw new Error(`${flag} ${localPath}: no such file — looked for ${abs} (relative paths resolve against the current directory, ${process.cwd()}).${found}`);
+}
 /** Upload a local file to the app's public file store and return its URL. */
-export async function uploadPublicFixture(projectGuid, localPath) {
+export async function uploadPublicFixture(projectGuid, localPath, flag = '--fixture') {
+    assertLocalAsset(flag, localPath);
     const name = basename(localPath);
     const size = statSync(localPath).size;
     const contentType = guessMime(localPath);
@@ -38,4 +89,42 @@ export async function uploadPublicFixture(projectGuid, localPath) {
 export async function deleteFixture(projectGuid, guid) {
     await del(`/api/${projectGuid}/uploads/${guid}`);
 }
+// ── camera feed ─────────────────────────────────────────────────────────────
+// A headless browser has no webcam, so a vision app (MediaPipe, YOLOX, any
+// getUserMedia consumer) can't be exercised at all: getUserMedia rejects, the
+// app shows its no-camera state, and the code path the user actually cares
+// about never runs. `--fake-media` alone only fixes the rejection — Chrome's
+// built-in synthetic device is a rolling test pattern, so a gesture/pose/object
+// model still sees nothing recognizable and every agent ends up stubbing the
+// model's own output to test around it.
+//
+// --camera closes that: host a real image/video and let the browser play it as
+// the webcam's frames, so the app's REAL pipeline (frames → model → app logic)
+// runs headlessly on input you control. Hosting reuses the fixture path above;
+// the browser side (fetch the file, feed it to Chrome's fake capture device)
+// is the server's job — the CLI just names the file and hands over its URL.
+/** Container formats Chrome's fake video-capture device can be fed from, plus
+ *  the still-image types the server transcodes into a looping single-frame
+ *  feed. Anything else is rejected here (fast, local) rather than after an
+ *  upload + a browser launch. */
+const CAMERA_EXTS = ['.png', '.jpg', '.jpeg', '.webp', '.mp4', '.webm', '.y4m', '.mjpeg'];
+/** Validate a --camera path before uploading it. Throws with the accepted list
+ *  and the in-platform way to produce a frame, so a wrong file type costs one
+ *  local error instead of an upload plus an opaque browser failure. */
+export function assertCameraFile(localPath) {
+    assertLocalAsset('--camera', localPath);
+    const ext = localPath.slice(localPath.lastIndexOf('.')).toLowerCase();
+    if (CAMERA_EXTS.includes(ext))
+        return;
+    throw new Error(`--camera ${basename(localPath)}: unsupported file type "${ext || '(none)'}" — the camera feed must be an image or video (${CAMERA_EXTS.join(', ')}).\n` +
+        `A still image is played as a looping single-frame feed, which is what a gesture/pose/object model needs.\n` +
+        `No frame to hand? Generate one: gipity generate image "a hand making a closed fist, palm to camera, plain background"`);
+}
+/** Host a local image/video as the browser's webcam feed. Same public-upload
+ *  path as a fixture (so it is fetchable from the browser container and is
+ *  deleted the same way), validated first. */
+export async function uploadCameraFeed(projectGuid, localPath) {
+    assertCameraFile(localPath);
+    return uploadPublicFixture(projectGuid, localPath, '--camera');
+}
 //# sourceMappingURL=page-fixtures.js.map

package/dist/provider-docs.js

@@ -42,17 +42,17 @@ export const GEMINI_TTS_VOICES_DOC = `Zephyr, Puck, Charon, Kore, Fenrir, Leda,
 export const GEMINI_TTS_VOICES_SHORT = `Kore, Puck, Zephyr, Charon, Fenrir, Leda, Orus, Aoede, and 22 more`;
 export const IMAGE_GEMINI_ASPECT_RATIOS = `1:1, 16:9, 9:16, 4:3, 3:4, 3:2, 2:3, 4:5, 5:4, 21:9`;
 export const IMAGE_GEMINI_SIZES = `512, 1K, 2K, 4K`;
-export const IMAGE_MODELS_DOC = `openai: gpt-image-2, gpt-image-1.5. bfl: flux-2-pro, flux-2-flex, flux-2-max, flux-dev. gemini: gemini-2.5-flash-image, gemini-3.1-flash-image, gemini-3-pro-image`;
-export const IMAGE_PROVIDERS_BULLET = `- **OpenAI**: \`gpt-image-2, gpt-image-1.5\`
-- **BFL/Flux**: \`flux-2-pro, flux-2-flex, flux-2-max, flux-dev\`
-- **Gemini/Nano Banana**: \`gemini-2.5-flash-image, gemini-3.1-flash-image, gemini-3-pro-image\``;
+export const IMAGE_MODELS_DOC = `openai: gpt-image-2. bfl: flux-2-pro, flux-2-flex, flux-2-max, flux-2-klein-9b, flux-2-klein-4b. gemini: gemini-3.1-flash-lite-image, gemini-2.5-flash-image, gemini-3.1-flash-image, gemini-3-pro-image`;
+export const IMAGE_PROVIDERS_BULLET = `- **OpenAI**: \`gpt-image-2\`
+- **BFL/Flux**: \`flux-2-pro, flux-2-flex, flux-2-max, flux-2-klein-9b, flux-2-klein-4b\`
+- **Gemini/Nano Banana**: \`gemini-3.1-flash-lite-image, gemini-2.5-flash-image, gemini-3.1-flash-image, gemini-3-pro-image\``;
 export const IMAGE_PROVIDERS_LIST = `openai, bfl, gemini`;
 export const IMAGE_PROVIDER_DESCRIPTIONS = {
-    'openai': `OpenAI (gpt-image-2, gpt-image-1.5)`,
-    'bfl': `BFL/Flux (flux-2-pro, flux-2-flex, flux-2-max, flux-dev)`,
-    'gemini': `Gemini/Nano Banana (gemini-2.5-flash-image, gemini-3.1-flash-image, gemini-3-pro-image)`,
+    'openai': `OpenAI (gpt-image-2)`,
+    'bfl': `BFL/Flux (flux-2-pro, flux-2-flex, flux-2-max, flux-2-klein-9b, flux-2-klein-4b)`,
+    'gemini': `Gemini/Nano Banana (gemini-3.1-flash-lite-image, gemini-2.5-flash-image, gemini-3.1-flash-image, gemini-3-pro-image)`,
 };
-export const LLM_DEFAULT_MODELS_DOC = `OpenAI: gpt-4.1-nano (cheapest), gpt-5.4-mini (cheap reasoning). Anthropic: claude-haiku-4-5 (cheapest). Gemini: gemini-2.5-flash-lite (cheapest, 1M context)`;
+export const LLM_DEFAULT_MODELS_DOC = `OpenAI: gpt-5.4-nano (cheapest), gpt-5.4-mini (cheap reasoning). Anthropic: claude-haiku-4-5 (cheapest). Gemini: gemini-2.5-flash-lite (cheapest, 1M context)`;
 export const LLM_PROVIDERS_LIST = `anthropic, openai, gemini`;
 export const OPENAI_TTS_VOICES_DOC = `alloy, ash, ballad, coral, echo, fable, nova, onyx, sage, shimmer, verse`;
 export const TRANSCRIBE_PROVIDERS_DOC = `elevenlabs (default, Scribe v2), openai (GPT-4o Transcribe), gemini (Gemini 2.5 Flash - cheapest, multilingual)`;
@@ -63,7 +63,7 @@ export const TTS_PROVIDER_DESCRIPTIONS = {
     'gemini': `Gemini (30 voices: Kore, Puck, Zephyr, Charon, Fenrir, Leda, Orus, Aoede, and 22 more). Multi-speaker (up to 2) and 60+ languages`,
 };
 export const VIDEO_ASPECT_RATIOS = `16:9 (landscape), 9:16 (portrait), 1:1 (square)`;
-export const VIDEO_MODELS_DOC = `veo-3.1-generate-preview (best quality, ~$0.40/sec), veo-3.1-fast-generate-preview (faster, ~$0.15/sec), veo-3.1-lite-generate-preview (budget, ~$0.07/sec)`;
-export const VIDEO_MODELS_LIST = `veo-3.1-generate-preview, veo-3.1-fast-generate-preview, veo-3.1-lite-generate-preview`;
+export const VIDEO_MODELS_DOC = `veo-3.1-generate-preview (best quality, up to 4K, ~$0.40/sec), veo-3.1-fast-generate-preview (faster, ~$0.10/sec), veo-3.1-lite-generate-preview (budget, ~$0.05/sec), gemini-omni-flash-preview (3-10s @ 720p, conversational editing, ~$0.10/sec)`;
+export const VIDEO_MODELS_LIST = `veo-3.1-generate-preview, veo-3.1-fast-generate-preview, veo-3.1-lite-generate-preview, gemini-omni-flash-preview`;
 export const VIDEO_RESOLUTIONS = `720p, 1080p, 4k`;
 //# sourceMappingURL=provider-docs.js.map

package/dist/relay/daemon.js

@@ -12,6 +12,7 @@ import { post } from '../api.js';
 import * as state from './state.js';
 import { createLineSplitter, parseEvent, mapEventToEntries, } from './stream-json.js';
 import { IngestQueue } from './ingest-queue.js';
+import { ImageBlockRewriter } from './media-upload.js';
 import { DeltaAccumulator, DeltaBatcher } from './stream-delta.js';
 import { randomUUID } from 'crypto';
 import { deviceFetch, bridgeAbort as bridgeAbortImpl } from './device-http.js';
@@ -875,7 +876,13 @@ async function handleDispatch(claimed) {
     // retry instead of the old fire-and-forget loss on network errors.
     // Daemon-authored entries get a random source_uuid so retried batches
     // dedup server-side.
-    const queue = new IngestQueue((entries) => postIngest(d.conversation_guid, entries), { onWarn: (msg, meta) => log('warn', msg, { id: d.short_guid, ...meta }) });
+    // The rewriter uploads any base64 image blocks (Read-of-screenshot
+    // results) to VFS and swaps in image_ref blocks before the batch posts —
+    // transcripts carry URLs, never image bytes. Retries re-enter it, which
+    // is safe: rewritten entries have nothing left to upload, and the server
+    // stores by content hash so a replayed upload dedups.
+    const rewriter = new ImageBlockRewriter(d.conversation_guid, (msg, meta) => log('warn', msg, { id: d.short_guid, ...meta }));
+    const queue = new IngestQueue(async (entries) => postIngest(d.conversation_guid, await rewriter.rewrite(entries)), { onWarn: (msg, meta) => log('warn', msg, { id: d.short_guid, ...meta }) });
     const pushSystem = (content) => {
         queue.push({ kind: 'system', content, ts: new Date().toISOString(), source_uuid: randomUUID() });
     };
@@ -886,6 +893,9 @@ async function handleDispatch(claimed) {
     let bootstrapped;
     try {
         ({ cwd, bootstrapped } = await resolveCwdForProject(d));
+        // Lets the rewriter map an absolute Read path (…/screenshots/x.png)
+        // to its project-relative VFS path for content-hash dedup.
+        rewriter.setCwd(cwd);
         log('debug', 'resolved project cwd', { id: d.short_guid, project: d.project_slug, cwd, bootstrapped });
     }
     catch (err) {
@@ -1583,7 +1593,11 @@ export async function spawnGipityClaude(args, cwd, d, queue, meta) {
         // no longer drops stream content permanently (source_uuid dedup makes
         // the retries safe). Falls back to a local queue when the caller
         // didn't pass one (tests, direct invocation).
-        const q = queue ?? new IngestQueue((entries) => postIngest(d.conversation_guid, entries), { onWarn: (msg, meta) => log('warn', msg, { id: d.short_guid, ...meta }) });
+        const q = queue ?? (() => {
+            const rw = new ImageBlockRewriter(d.conversation_guid, (msg, meta) => log('warn', msg, { id: d.short_guid, ...meta }));
+            rw.setCwd(cwd);
+            return new IngestQueue(async (entries) => postIngest(d.conversation_guid, await rw.rewrite(entries)), { onWarn: (msg, meta) => log('warn', msg, { id: d.short_guid, ...meta }) });
+        })();
         const ownQueue = !queue;
         // Progress heartbeat state. Measured at the daemon boundary - this is
         // what we actually observe, not anything the child self-reports. These

package/dist/relay/device-http.js

@@ -31,6 +31,28 @@ export function bridgeAbort(outer, inner) {
     outer.addEventListener('abort', onAbort, { once: true });
     return () => outer.removeEventListener('abort', onAbort);
 }
+/** Device-auth binary POST — raw bytes body (no JSON/base64 wrapping).
+ *  Used by the transcript-media upload, where the whole point is that the
+ *  image travels as bytes instead of base64. */
+export async function deviceFetchBinary(method, path, body, contentType, timeoutMs) {
+    const controller = timeoutMs ? new AbortController() : null;
+    const timer = controller ? setTimeout(() => controller.abort('timeout'), timeoutMs) : null;
+    try {
+        return await fetch(`${apiBase()}${path}`, {
+            method,
+            headers: {
+                'Authorization': `Bearer ${deviceToken()}`,
+                'Content-Type': contentType,
+            },
+            body: new Uint8Array(body),
+            signal: controller?.signal,
+        });
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
 /** Device-auth HTTP helper. Sends `Authorization: Bearer <device-token>`
  *  + `Content-Type: application/json` to the configured API base. */
 export async function deviceFetch(method, path, body, timeoutMs, signal) {

package/dist/relay/media-upload.js

@@ -0,0 +1,184 @@
+/**
+ * Transcript image rewrite — the relay's "no inline base64" chokepoint.
+ *
+ * Claude Code's `Read` of an image file (screenshots, generated art, …)
+ * returns the bytes as a `{type:'image', source:{type:'base64', data}}`
+ * block inside the tool_result. Shipping that through ingest bloats the
+ * transcript DB and, worse, blows the server's 200 KB per-entry cap so
+ * real screenshots silently never reach the web client at all.
+ *
+ * `ImageBlockRewriter` sits in front of the ingest POST: it uploads each
+ * base64 image block's bytes to `POST /remote-sessions/:convGuid/media`
+ * (raw binary body) and swaps the block for a small `image_ref` pointing
+ * at the stored VFS file. The server dedups by content hash — a `Read` of
+ * an already-synced screenshot references the existing node.
+ *
+ * Failure handling: an upload that fails leaves small images inline
+ * (status-quo rendering still works) but replaces oversize ones with a
+ * text stub so one bad image can't poison the whole ingest batch. The
+ * IngestQueue retries a failed batch through this rewriter again, and the
+ * server's content-addressed storage makes replayed uploads idempotent.
+ */
+import path from 'path';
+import { deviceFetchBinary } from './device-http.js';
+/** Below this the upload round-trip outweighs the base64: tiny images
+ *  (icons, favicons) stay inline. */
+const MIN_UPLOAD_BYTES = 4 * 1024;
+/** Server-side cap (TRANSCRIPT_MEDIA_MAX_BYTES). Larger images can't be
+ *  stored; they get stubbed rather than shipped. */
+const MAX_UPLOAD_BYTES = 10 * 1024 * 1024;
+/** Base64 payloads above this would break the server's 200 KB tool_result
+ *  cap if left inline — when the upload fails, stub instead of poisoning
+ *  the batch. Leaves headroom for the rest of the tool_result JSON. */
+const INLINE_SAFE_B64_CHARS = 120_000;
+/** How many tool_use → file_path pairs to remember for captioning/dedup. */
+const PATH_MAP_CAP = 500;
+/** Default uploader: raw-binary POST to the transcript-media endpoint. */
+export const uploadViaDevice = async (convGuid, buf, opts) => {
+    const qs = new URLSearchParams({ filename: opts.filename, media_type: opts.mediaType });
+    if (opts.suggestedPath)
+        qs.set('suggested_path', opts.suggestedPath);
+    const res = await deviceFetchBinary('POST', `/remote-sessions/${encodeURIComponent(convGuid)}/media?${qs.toString()}`, buf, opts.mediaType, 30_000);
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(`HTTP ${res.status} ${body.slice(0, 120)}`);
+    }
+    const json = await res.json();
+    return json.data;
+};
+function extForMime(mime) {
+    switch (mime) {
+        case 'image/jpeg': return '.jpg';
+        case 'image/gif': return '.gif';
+        case 'image/webp': return '.webp';
+        case 'image/svg+xml': return '.svg';
+        default: return '.png';
+    }
+}
+function isBase64ImageBlock(b) {
+    return b?.type === 'image'
+        && b.source?.type === 'base64'
+        && typeof b.source.data === 'string'
+        && b.source.data.length > 0;
+}
+export class ImageBlockRewriter {
+    convGuid;
+    onWarn;
+    upload;
+    /** tool_use_id → the file_path the tool was asked to read (for naming +
+     *  server-side dedup against the synced node at that path). */
+    pathsByToolUseId = new Map();
+    /** Project root on this machine, once the dispatch resolves it — lets an
+     *  absolute Read path map to its project-relative VFS path. */
+    cwd = null;
+    constructor(convGuid, onWarn, upload = uploadViaDevice) {
+        this.convGuid = convGuid;
+        this.onWarn = onWarn;
+        this.upload = upload;
+    }
+    setCwd(cwd) {
+        this.cwd = cwd;
+    }
+    /** Rewrite every base64 image block in the batch to an image_ref. Never
+     *  throws — per-image failures degrade per the policy above. */
+    async rewrite(entries) {
+        const out = [];
+        for (const entry of entries) {
+            if (entry.kind === 'tool_use') {
+                this.recordToolPath(entry);
+                out.push(entry);
+                continue;
+            }
+            if (entry.kind !== 'tool_result' || !Array.isArray(entry.content) || typeof entry.tool_use_id !== 'string') {
+                out.push(entry);
+                continue;
+            }
+            const blocks = [];
+            for (const block of entry.content) {
+                blocks.push(isBase64ImageBlock(block)
+                    ? await this.rewriteBlock(block, entry.tool_use_id)
+                    : block);
+            }
+            out.push({ ...entry, content: blocks });
+        }
+        return out;
+    }
+    recordToolPath(entry) {
+        if (typeof entry.tool_use_id !== 'string')
+            return;
+        const input = entry.tool_input;
+        const p = input && typeof input === 'object'
+            ? (input.file_path ?? input.path ?? input.notebook_path)
+            : undefined;
+        if (typeof p !== 'string' || !p)
+            return;
+        if (this.pathsByToolUseId.size >= PATH_MAP_CAP) {
+            const oldest = this.pathsByToolUseId.keys().next().value;
+            if (oldest !== undefined)
+                this.pathsByToolUseId.delete(oldest);
+        }
+        this.pathsByToolUseId.set(entry.tool_use_id, p);
+    }
+    async rewriteBlock(block, toolUseId) {
+        const b64 = block.source.data;
+        let buf;
+        try {
+            buf = Buffer.from(b64, 'base64');
+        }
+        catch {
+            return block; // not decodable — leave as-is
+        }
+        if (buf.length < MIN_UPLOAD_BYTES)
+            return block;
+        const mediaType = block.source.media_type || 'image/png';
+        const sourcePath = this.pathsByToolUseId.get(toolUseId);
+        const filename = sourcePath ? path.basename(sourcePath) : `image${extForMime(mediaType)}`;
+        const suggested = this.projectRelative(sourcePath);
+        if (buf.length > MAX_UPLOAD_BYTES) {
+            this.onWarn?.('transcript image exceeds upload cap - stubbed', { bytes: buf.length, filename });
+            return this.stub(filename, buf.length, 'too large to store');
+        }
+        try {
+            const ref = await this.upload(this.convGuid, buf, {
+                filename, mediaType, ...(suggested ? { suggestedPath: suggested } : {}),
+            });
+            return {
+                type: 'image_ref',
+                url: ref.url,
+                ...(ref.thumb_url ? { thumb_url: ref.thumb_url } : {}),
+                media_type: mediaType,
+                path: ref.path,
+                ...(ref.width != null ? { width: ref.width } : {}),
+                ...(ref.height != null ? { height: ref.height } : {}),
+                bytes: ref.bytes,
+            };
+        }
+        catch (err) {
+            this.onWarn?.('transcript image upload failed', { filename, err: err?.message });
+            // Small enough to survive the ingest cap inline → keep the original
+            // (renders exactly as before this feature). Oversize → stub, because
+            // shipping it would 400 the entire batch and lose sibling entries.
+            if (b64.length <= INLINE_SAFE_B64_CHARS)
+                return block;
+            return this.stub(filename, buf.length, `upload failed: ${err?.message || 'unknown error'}`);
+        }
+    }
+    stub(filename, bytes, reason) {
+        return {
+            type: 'text',
+            text: `[image ${filename} (${Math.round(bytes / 1024)} KB) omitted: ${reason}]`,
+        };
+    }
+    /** Map an absolute local path to its project-relative VFS path, when it
+     *  falls inside the dispatch's project root. */
+    projectRelative(p) {
+        if (!p || !this.cwd)
+            return undefined;
+        const abs = path.resolve(p);
+        const root = path.resolve(this.cwd);
+        if (!abs.startsWith(root + path.sep))
+            return undefined;
+        return abs.slice(root.length + 1).split(path.sep).join('/');
+    }
+}
+//# sourceMappingURL=media-upload.js.map

package/dist/setup.js

@@ -50,7 +50,10 @@ export const AIDER_CONF_FILE = '.aider.conf.yml';
  *  scratch (the `_vsd_tmp/`/`_convert_tmp/` dirs that bloated past deploys)
  *  can't leak in either. Reference material to KEEP (diagrams, decks, ADRs) goes
  *  in `docs/` instead - synced and versioned, but outside `src/` so it's never
- *  deployed. Gitignore-glob form, matched by the `ignore` package in config.ts. */
+ *  deployed. Build screenshots follow the same keep-but-don't-deploy pattern in
+ *  `screenshots/` (page-screenshot.ts writes there; the server excludes both
+ *  dirs from root deploys in s3-deploy.ts). Gitignore-glob form, matched by the
+ *  `ignore` package in config.ts. */
 export const SCRATCH_IGNORE = ['tmp/', '.tmp/', '*_tmp/', '.gipityscratch/'];
 export const DEFAULT_SYNC_IGNORE = [
     'node_modules', '.git', '.gipity.json', '.gipity/', '.claude/', '.gitignore', AIDER_CONF_FILE,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gipity",
-  "version": "1.0.428",
+  "version": "1.0.429",
   "description": "The full-stack platform tuned for AI agents. Database, storage, auth, functions, deploy, and drop-in kits - all agent-tuned. Pair with Claude Code or use standalone.",
   "bin": {
     "gipity": "dist/updater/shim.js",
@@ -14,7 +14,7 @@
     "prepack": "npm run build",
     "dev": "tsc --watch",
     "test": "npm run test:smoke",
-    "test:smoke": "tsc && node --test dist/__tests__/utils.test.js dist/__tests__/platform.test.js dist/__tests__/colors.test.js dist/__tests__/config.test.js dist/__tests__/sync.test.js dist/__tests__/sync-apply.test.js dist/__tests__/sync-unretrievable.test.js dist/__tests__/sync-clean-check.test.js dist/__tests__/sync-lock.test.js dist/__tests__/auth-lock.test.js dist/__tests__/api-401-retry.test.js dist/__tests__/push-cas.test.js dist/__tests__/upload.test.js dist/__tests__/progress.test.js dist/__tests__/updater.test.js dist/__tests__/cli-smoke.test.js dist/__tests__/claude-noninteractive.test.js dist/__tests__/claude-trust.test.js dist/__tests__/relay-state.test.js dist/__tests__/relay-daemon.test.js dist/__tests__/session-pool.test.js dist/__tests__/relay-diagnostics.test.js dist/__tests__/relay-installers.test.js dist/__tests__/relay-bridge-abort.test.js dist/__tests__/relay-redact.test.js dist/__tests__/relay-machine-id.test.js dist/__tests__/stream-json.test.js dist/__tests__/ingest-queue.test.js dist/__tests__/stream-delta.test.js dist/__tests__/phase-tracker.test.js dist/__tests__/relay-ingest-contract.test.js dist/__tests__/prompts.test.js dist/__tests__/capture-transcript.test.js dist/__tests__/capture-lock.test.js dist/__tests__/capture-resolve.test.js dist/__tests__/flag-aliases.test.js dist/__tests__/client-context.test.js dist/__tests__/adopt-cwd.test.js dist/__tests__/cli-cmd-agent.test.js dist/__tests__/cli-cmd-approval.test.js dist/__tests__/cli-cmd-audit.test.js dist/__tests__/cli-cmd-bug.test.js dist/__tests__/cli-cmd-bug-queue.test.js dist/__tests__/cli-cmd-chat.test.js dist/__tests__/cli-cmd-credits.test.js dist/__tests__/cli-cmd-db.test.js dist/__tests__/cli-cmd-deploy.test.js dist/__tests__/cli-cmd-domain.test.js dist/__tests__/cli-cmd-email.test.js dist/__tests__/cli-cmd-file.test.js dist/__tests__/cli-cmd-storage.test.js dist/__tests__/cli-cmd-fn.test.js dist/__tests__/cli-cmd-service.test.js dist/__tests__/cli-cmd-job.test.js dist/__tests__/cli-cmd-generate.test.js dist/__tests__/cli-cmd-gmail.test.js dist/__tests__/cli-cmd-info.test.js dist/__tests__/cli-cmd-init.test.js dist/__tests__/cli-cmd-location.test.js dist/__tests__/cli-cmd-text.test.js dist/__tests__/cli-cmd-login.test.js dist/__tests__/cli-cmd-logout.test.js dist/__tests__/cli-cmd-token.test.js dist/__tests__/cli-cmd-logs.test.js dist/__tests__/cli-cmd-memory.test.js dist/__tests__/cli-cmd-page.test.js dist/__tests__/cli-cmd-plan.test.js dist/__tests__/cli-cmd-project.test.js dist/__tests__/cli-cmd-rbac.test.js dist/__tests__/cli-cmd-realtime.test.js dist/__tests__/cli-cmd-records.test.js dist/__tests__/cli-cmd-relay.test.js dist/__tests__/cli-cmd-setup.test.js dist/__tests__/cli-cmd-doctor.test.js dist/__tests__/claude-setup.test.js dist/__tests__/cli-cmd-sandbox.test.js dist/__tests__/cli-cmd-add.test.js dist/__tests__/cli-cmd-remove.test.js dist/__tests__/cli-cmd-skill.test.js dist/__tests__/cli-cmd-test.test.js dist/__tests__/cli-cmd-workflow.test.js dist/__tests__/setup-skills-block.test.js dist/__tests__/setup-hooks.test.js dist/__tests__/trace.test.js",
+    "test:smoke": "npm run build && node --test dist/__tests__/utils.test.js dist/__tests__/platform.test.js dist/__tests__/colors.test.js dist/__tests__/config.test.js dist/__tests__/sync.test.js dist/__tests__/sync-apply.test.js dist/__tests__/sync-unretrievable.test.js dist/__tests__/sync-clean-check.test.js dist/__tests__/sync-lock.test.js dist/__tests__/auth-lock.test.js dist/__tests__/api-401-retry.test.js dist/__tests__/push-cas.test.js dist/__tests__/upload.test.js dist/__tests__/progress.test.js dist/__tests__/updater.test.js dist/__tests__/cli-smoke.test.js dist/__tests__/claude-noninteractive.test.js dist/__tests__/claude-trust.test.js dist/__tests__/relay-state.test.js dist/__tests__/relay-daemon.test.js dist/__tests__/session-pool.test.js dist/__tests__/relay-diagnostics.test.js dist/__tests__/relay-installers.test.js dist/__tests__/relay-bridge-abort.test.js dist/__tests__/relay-redact.test.js dist/__tests__/relay-machine-id.test.js dist/__tests__/stream-json.test.js dist/__tests__/ingest-queue.test.js dist/__tests__/media-upload.test.js dist/__tests__/stream-delta.test.js dist/__tests__/phase-tracker.test.js dist/__tests__/relay-ingest-contract.test.js dist/__tests__/prompts.test.js dist/__tests__/capture-transcript.test.js dist/__tests__/capture-lock.test.js dist/__tests__/capture-resolve.test.js dist/__tests__/flag-aliases.test.js dist/__tests__/client-context.test.js dist/__tests__/adopt-cwd.test.js dist/__tests__/cli-cmd-agent.test.js dist/__tests__/cli-cmd-approval.test.js dist/__tests__/cli-cmd-audit.test.js dist/__tests__/cli-cmd-bug.test.js dist/__tests__/cli-cmd-bug-queue.test.js dist/__tests__/cli-cmd-chat.test.js dist/__tests__/cli-cmd-credits.test.js dist/__tests__/cli-cmd-db.test.js dist/__tests__/cli-cmd-deploy.test.js dist/__tests__/cli-cmd-domain.test.js dist/__tests__/cli-cmd-email.test.js dist/__tests__/cli-cmd-file.test.js dist/__tests__/cli-cmd-storage.test.js dist/__tests__/cli-cmd-fn.test.js dist/__tests__/cli-cmd-service.test.js dist/__tests__/cli-cmd-job.test.js dist/__tests__/cli-cmd-generate.test.js dist/__tests__/cli-cmd-gmail.test.js dist/__tests__/cli-cmd-info.test.js dist/__tests__/cli-cmd-init.test.js dist/__tests__/cli-cmd-location.test.js dist/__tests__/cli-cmd-text.test.js dist/__tests__/cli-cmd-login.test.js dist/__tests__/cli-cmd-logout.test.js dist/__tests__/cli-cmd-token.test.js dist/__tests__/cli-cmd-logs.test.js dist/__tests__/cli-cmd-memory.test.js dist/__tests__/cli-cmd-page.test.js dist/__tests__/cli-cmd-plan.test.js dist/__tests__/cli-cmd-project.test.js dist/__tests__/cli-cmd-rbac.test.js dist/__tests__/cli-cmd-realtime.test.js dist/__tests__/cli-cmd-records.test.js dist/__tests__/cli-cmd-relay.test.js dist/__tests__/cli-cmd-setup.test.js dist/__tests__/cli-cmd-doctor.test.js dist/__tests__/claude-setup.test.js dist/__tests__/cli-cmd-sandbox.test.js dist/__tests__/cli-cmd-add.test.js dist/__tests__/cli-cmd-remove.test.js dist/__tests__/cli-cmd-skill.test.js dist/__tests__/cli-cmd-test.test.js dist/__tests__/cli-cmd-workflow.test.js dist/__tests__/setup-skills-block.test.js dist/__tests__/setup-hooks.test.js dist/__tests__/trace.test.js",
     "test:smoke:quick": "node scripts/smoke-quick.mjs",
     "test:e2e": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-live.test.js dist/__tests__/cli-e2e-sync-live.test.js dist/__tests__/cli-e2e-sync-stress-live.test.js dist/__tests__/cli-e2e-rollback-live.test.js dist/__tests__/cli-e2e-services-media-live.test.js dist/__tests__/cli-e2e-workflow-live.test.js dist/__tests__/cli-e2e-sandbox-live.test.js dist/__tests__/cli-e2e-page-fetch-live.test.js dist/__tests__/cli-e2e-page-test-live.test.js",
     "test:e2e:sync": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-sync-live.test.js",