gipity 1.1.5 → 1.1.7

package/dist/knowledge.js

@@ -106,7 +106,7 @@ mkdir -p ~/GipityProjects/<slug> && cd ~/GipityProjects/<slug> && gipity init <s
 
 ## CLI quick reference
 
-Key commands: \`gipity add <template|kit>\`, \`gipity deploy dev\`, \`gipity sandbox run\`, \`gipity page inspect <url>\`, \`gipity page screenshot <url>\`, \`gipity db query "SQL"\`, \`gipity fn call <name>\`, \`gipity logs fn <name>\`, \`gipity secrets set <NAME> <value> [--account]\` (store an API key/token encrypted; read in functions via \`secrets.get('NAME')\` — never hardcode keys), \`gipity email send --to <addr> --subject <s> --body <b>\` (sends as \`gipity@gipity.ai\`; omit \`--to\` to self-send), \`gipity skill read <name>\`.
+Key commands: \`gipity add <template|kit>\`, \`gipity brand set --emoji <e>|--color <hex>\` (regenerate the app's icons + social share card), \`gipity deploy dev\`, \`gipity sandbox run\`, \`gipity page inspect <url>\`, \`gipity page screenshot <url>\`, \`gipity db query "SQL"\`, \`gipity fn call <name>\`, \`gipity logs fn <name>\`, \`gipity secrets set <NAME> <value> [--account]\` (store an API key/token encrypted; read in functions via \`secrets.get('NAME')\` — never hardcode keys), \`gipity email send --to <addr> --subject <s> --body <b>\` (sends as \`gipity@gipity.ai\`; omit \`--to\` to self-send), \`gipity skill read <name>\`.
 Rename for findability: \`gipity project rename <name>\` renames the current project's display name (the slug and deployed URLs never change); \`gipity chat rename <title>\` renames the current chat's tab title. Both are the display label users scan to switch between tabs — retitle a chat when the conversation clearly shifts to a new topic (sparingly, not every turn), and keep every project/chat title SHORT: 2-4 words, ≤40 characters, no trailing punctuation (e.g. "Stripe checkout", "Tetris game").
 Pull an existing remote project local (given its URL/slug): \`mkdir -p ~/GipityProjects/<slug> && cd ~/GipityProjects/<slug> && gipity init <slug>\` (adopts the matching project and syncs files down - this is the "clone").
 Move whole apps in/out: \`gipity save\` (export this project as a portable \`.gip\` bundle), \`gipity load <file.gip | github:owner/repo>\` (import as a NEW project; \`--inspect\` to preview), \`gipity github connect\` (1-2 click GitHub access for imports). Porting a Vercel/Replit/Lovable app? Load the \`app-import\` skill first.
@@ -116,7 +116,7 @@ Run \`gipity --help\` for the full list. Use \`--help\` on any command for detai
 
 Function return shape: \`gipity fn call\`, the in-test \`ctx.fn.call\`/\`callAs\`, and the client \`Gipity.fn\` all return your function's value **unwrapped** - read/assert \`result.field\`. Only raw HTTP/\`curl\` wraps it as \`{ data: ... }\`; never write \`result.data.field\` in a test.
 
-Tests are isolated, not run against your live DB: \`gipity test\` points \`ctx.fn.call\`/\`callAs\` at a throwaway copy of your database (your \`migrations/\` + \`seeds/\`), reset (truncate + reseed) before every run - so test rows never reach the deployed app and you don't write teardown. Functions see \`ctx.isTest === true\` during a run (use it to skip your own rate limiting); the platform also suppresses \`notify()\` push so a suite can't spam subscribers. Reference data tests need goes in seed files; a runtime-written settings table that isn't seeded goes under \`test.preserve\` in \`gipity.yaml\`. Build per-file fixtures in \`setup(fn)\` → \`ctx.fixtures\`, and namespace unique values with \`ctx.testId\`.
+Tests are isolated, not run against your live DB: \`gipity test\` points \`ctx.fn.call\`/\`callAs\` at a throwaway copy of your database (your \`migrations/\` + \`seeds/\`), one per test FILE, reset (truncate + reseed) before the file runs - so files can't interfere, test rows never reach the deployed app, and you don't write teardown. Functions see \`ctx.isTest === true\` during a run (use it to skip your own rate limiting); the platform also suppresses \`notify()\` push so a suite can't spam subscribers. Reference data tests need goes in seed files; a runtime-written settings table that isn't seeded goes under \`test.preserve\` in \`gipity.yaml\`. Build per-file fixtures in \`setup(fn)\` → \`ctx.fixtures\`.
 
 ## Hit friction on the platform? Report it in real time
 
@@ -187,7 +187,7 @@ App development skills:
 - \`app-development\` - functions, database, and API
 - \`app-import\` - import apps from GitHub/.gip bundles (incl. Vercel/Replit/Lovable porting) and export any project as a portable .gip - app_import tool, gipity save/load
 - \`app-records\` - Gipity Records: declared tables → validated CRUD, provenance, workflows, auto UI
-- \`app-testing\` - testing deployed app functions (ctx.fn.call/callAs, the isolated test DB)
+- \`app-testing\` - testing deployed app functions (ctx.fn.call/callAs, the per-file test DB)
 - \`deploy\` - the deploy pipeline & gipity.yaml manifest
 - \`jobs\` - long-running CPU + GPU compute jobs (Python / Node / bash)
 - \`realtime-scheduled-app\` - recipe: realtime presence/messages + DB function + scheduled poster, end-to-end

package/dist/project-setup.js

@@ -36,6 +36,8 @@ export async function finalizeLocalProject(opts) {
         const sub = await substituteDir(opts.dir, {
             projectGuid: opts.projectGuid,
             projectName: opts.projectName,
+            accountSlug: opts.accountSlug,
+            projectSlug: opts.projectSlug,
         });
         if (sub.changed.length) {
             console.log(muted(`Resolved template vars in ${sub.changed.length} file${sub.changed.length > 1 ? 's' : ''}.`));

package/dist/relay/diagnostics.js

@@ -137,8 +137,8 @@ export async function collectDiagnostics() {
     } })();
     // Run the subprocess probes concurrently (each already bounded + best-effort)
     // so the whole snapshot costs one timeout, not the sum of four.
-    const [claude, codex, grok, cursor, gpu] = await Promise.all([
-        probeVersion('claude'), probeVersion('codex'), probeVersion('grok'), probeVersion('cursor'), detectGpu(),
+    const [claude, codex, grok, agy, cursor, gpu] = await Promise.all([
+        probeVersion('claude'), probeVersion('codex'), probeVersion('grok'), probeVersion('agy'), probeVersion('cursor'), detectGpu(),
     ]);
     const agents = {};
     if (claude)
@@ -147,6 +147,8 @@ export async function collectDiagnostics() {
         agents.codex = codex;
     if (grok)
         agents.grok = grok;
+    if (agy)
+        agents.agy = agy;
     if (cursor)
         agents.cursor = cursor;
     return {

package/dist/relay/onboarding.js

@@ -82,7 +82,7 @@ export async function runRelaySetup(opts) {
     const promptText = opts.mode === 'run-now'
         ? '  Set up remote control on this computer'
         : '  Enable remote control';
-    const enable = await confirm(promptText, { default: 'yes' });
+    const enable = await confirm(promptText, { default: 'yes', headless: 'no' });
     if (!enable) {
         state.setRelayEnabled(false);
         console.log(`  ${muted('Skipped. Turn on later with')} ${brand('gipity connect')}${muted('.')}`);
@@ -119,7 +119,7 @@ export async function runRelaySetup(opts) {
     startDaemon();
     console.log('');
     // Offer OS-level autostart (launchd / systemd --user / Task Scheduler).
-    const autostartOs = await confirm('  Also start at OS login', { default: 'yes' });
+    const autostartOs = await confirm('  Also start at OS login', { default: 'yes', headless: 'no' });
     if (autostartOs) {
         try {
             const res = installAutostart();
@@ -153,7 +153,7 @@ export async function runRelaySetup(opts) {
     // on|off` flips it later.)
     if (state.getDiagnosticsConsent() === undefined) {
         console.log('');
-        const diag = await confirm('  Share anonymous diagnostics info', { default: 'yes' });
+        const diag = await confirm('  Share anonymous diagnostics info', { default: 'yes', headless: 'no' });
         state.setDiagnosticsConsent(diag);
     }
     console.log('');

package/dist/setup.js

@@ -32,6 +32,7 @@ export const PRIMER_FILES = {
     claude: 'CLAUDE.md',
     codex: 'AGENTS.md',
     grok: 'AGENTS.md', // Grok Build reads the AGENTS.md family (and CLAUDE.md) natively
+    agy: 'AGENTS.md', // Antigravity reads the same AGENTS.md/GEMINI.md rules family natively
     aider: 'AGENTS.md', // shares the Codex primer; aider is pointed at it via .aider.conf.yml
     gemini: 'GEMINI.md',
     copilot: '.github/copilot-instructions.md',
@@ -58,7 +59,7 @@ export const AIDER_CONF_FILE = '.aider.conf.yml';
  *  `ignore` package in config.ts. */
 export const SCRATCH_IGNORE = ['tmp/', '.tmp/', '*_tmp/', '.gipityscratch/'];
 export const DEFAULT_SYNC_IGNORE = [
-    'node_modules', '.git', '.gipity.json', '.gipity/', '.claude/', '.codex/', '.gitignore', AIDER_CONF_FILE,
+    'node_modules', '.git', '.gipity.json', '.gipity/', '.claude/', '.codex/', '.agents/', '.gitignore', AIDER_CONF_FILE,
     // Home-directory junk: a project created inside a real home dir (or one that
     // shells out) sweeps in a cache dir + shell dotfiles that are never app
     // files. `.cache/` alone can be gigabytes (it was 2.4 GB on one project),
@@ -398,9 +399,16 @@ export const AGENT_HOOKS_DIR = join(homedir(), '.gipity', 'agent-hooks');
  *  version and the exact skill names copied, so upgrades replace and uninstall
  *  removes precisely those. */
 export const AGENT_SKILLS_MANIFEST = join(homedir(), '.gipity', 'agent-skills.json');
-export function agentSkillsState() {
+// Antigravity (agy) reads skills from its own global customization root,
+// ~/.gemini/config/skills/ (confirmed against agy's own customization-system
+// docs) - NOT the cross-agent ~/.agents/skills Codex/OpenClaw-family tools
+// share. Same manifest pattern, separate directory + file so upgrades and
+// uninstall touch exactly the skills each tool actually reads.
+export const AGY_SKILLS_DIR = join(homedir(), '.gemini', 'config', 'skills');
+export const AGY_SKILLS_MANIFEST = join(homedir(), '.gipity', 'agy-skills.json');
+function skillsManifestState(manifestPath) {
     try {
-        const m = JSON.parse(readFileSync(AGENT_SKILLS_MANIFEST, 'utf-8'));
+        const m = JSON.parse(readFileSync(manifestPath, 'utf-8'));
         return {
             current: typeof m?.version === 'string' && versionGte(m.version, GIPITY_PLUGIN_VERSION),
             skills: Array.isArray(m?.skills) ? m.skills : [],
@@ -410,15 +418,21 @@ export function agentSkillsState() {
         return { current: false, skills: [] };
     }
 }
-/** Materialize the Gipity skills into ~/.agents/skills (the cross-agent skills
- *  dir Codex reads) and the plugin's hook scripts into ~/.gipity/agent-hooks.
- *  Source of truth is the same GipityAI/skills repo the Claude/Grok plugin
- *  installs clone - fetched with a shallow git clone into a temp dir.
- *  Best-effort: no git, no network, or a failed clone all leave things as they
- *  were; the next init retries. */
-export function ensureAgentSkillsInstalled() {
-    if (agentSkillsState().current)
-        return;
+export function agentSkillsState() {
+    return skillsManifestState(AGENT_SKILLS_MANIFEST);
+}
+export function agySkillsState() {
+    return skillsManifestState(AGY_SKILLS_MANIFEST);
+}
+/** Shared core: clone GipityAI/skills, copy every skill dir with a SKILL.md
+ *  into `skillsDir`, stage the plugin's hook scripts into ~/.gipity/agent-hooks
+ *  (shared infra - launch.sh/capture.cjs/sync-push.cjs are agent-agnostic, so
+ *  every caller re-stages them harmlessly), and record what was installed in
+ *  `manifestPath`. Source of truth is the same GipityAI/skills repo the
+ *  Claude/Grok plugin installs clone - fetched with a shallow git clone into a
+ *  temp dir. Best-effort: no git, no network, or a failed clone all leave
+ *  things as they were; the next init retries. */
+function installSkillsAndHooks(skillsDir, manifestPath, harnessLabel) {
     if (!binaryOnPath('git'))
         return;
     const tmp = mkdtempSync(join(tmpdir(), 'gipity-skills-'));
@@ -441,8 +455,8 @@ export function ensureAgentSkillsInstalled() {
                 continue;
             if (!existsSync(join(skillsSrc, entry.name, 'SKILL.md')))
                 continue;
-            mkdirSync(AGENTS_SKILLS_DIR, { recursive: true });
-            cpSync(join(skillsSrc, entry.name), join(AGENTS_SKILLS_DIR, entry.name), {
+            mkdirSync(skillsDir, { recursive: true });
+            cpSync(join(skillsSrc, entry.name), join(skillsDir, entry.name), {
                 recursive: true,
                 force: true,
             });
@@ -452,14 +466,27 @@ export function ensureAgentSkillsInstalled() {
         for (const script of readdirSync(join(repo, 'hooks', 'scripts'))) {
             cpSync(join(repo, 'hooks', 'scripts', script), join(AGENT_HOOKS_DIR, script), { force: true });
         }
-        writeFileSync(AGENT_SKILLS_MANIFEST, JSON.stringify({ version, skills: names }, null, 2) + '\n');
-        console.log(`Installed ${names.length} Gipity skills for Codex (~/.agents/skills).`);
+        writeFileSync(manifestPath, JSON.stringify({ version, skills: names }, null, 2) + '\n');
+        console.log(`Installed ${names.length} Gipity skills for ${harnessLabel} (${skillsDir}).`);
     }
     catch { /* best-effort - never break setup */ }
     finally {
         rmSync(tmp, { recursive: true, force: true });
     }
 }
+export function ensureAgentSkillsInstalled() {
+    if (agentSkillsState().current)
+        return;
+    installSkillsAndHooks(AGENTS_SKILLS_DIR, AGENT_SKILLS_MANIFEST, 'Codex');
+}
+/** Materialize the Gipity skills into Antigravity's global skill root. Mirrors
+ *  ensureAgentSkillsInstalled() but targets agy's own directory - see the
+ *  AGY_SKILLS_DIR comment above for why it differs from Codex's. */
+export function ensureAgySkillsInstalled() {
+    if (agySkillsState().current)
+        return;
+    installSkillsAndHooks(AGY_SKILLS_DIR, AGY_SKILLS_MANIFEST, 'Antigravity');
+}
 /** Pure core of the .codex/hooks.json merge: given the file's current content
  *  (`null` when absent), return the new content, or `null` when no change is
  *  needed. Adds the Gipity sync hook groups (push on file edits, pull before
@@ -535,6 +562,160 @@ export function setupCodexIntegration() {
     ensureAgentSkillsInstalled();
     setupCodexHooks();
 }
+// --- Google Antigravity (agy) --------------------------------------------
+// agy's hook system is a real departure from the Claude-format hooks Codex
+// and Grok reuse: project hooks live in `.agents/hooks.json` as a NAMED-block
+// object (not a flat `hooks` key), tool-scoped events (PreToolUse/PostToolUse)
+// require a `matcher` regex, and every hook command must print a JSON object
+// on stdout.
+//
+// Deliberately NOT wired: PreToolUse. Gipity only needs to OBSERVE tool calls
+// (capture) and react after a write lands (sync-push) - it has no reason to
+// gate them. A PreToolUse hook that answers `{"decision":"allow"}` genuinely
+// overrides agy's own approval prompt (confirmed against agy's own hooks
+// contract: `"allow"` means "automatically allow the tool execution"), so
+// registering one would auto-approve every tool agy runs - including shell
+// commands - in every Gipity-linked project, in BOTH headless and interactive
+// sessions. Confirmed live that headless `-p` writes succeed with no
+// PreToolUse hook at all, with or without `--dangerously-skip-permissions` -
+// so there is no capture/sync reason to have one, and Claude/Codex don't
+// silently touch agent approval either. PostToolUse/Stop route through a
+// small wrapper script (AGY_HOOKS_SCRIPT below) that does the real work
+// (sync-push + session capture) and then unconditionally prints `{}` - not
+// decision-gated, so degrading silently on a node-resolution failure is the
+// same acceptable risk every other harness's hooks already carry.
+/** Written verbatim into ~/.gipity/agent-hooks/agy-hooks.cjs by setupAgyHooks().
+ *  Unlike Codex's hook scripts (cloned from the GipityAI/skills repo), this
+ *  file is authored by the CLI itself - agy is not part of that repo's plugin
+ *  ecosystem, just a consumer of the same shared sync-push.cjs/capture.cjs.
+ *
+ *  post-tool-use: reads agy's PostToolUse payload (which - confirmed live -
+ *  carries `toolCall` directly, unlike agy's own docs suggest) and, for a
+ *  file-write tool, synthesizes a Claude-Code-shaped `{tool_input:{file_path}}`
+ *  payload for the UNMODIFIED sync-push.cjs (which only knows Claude/Grok's
+ *  field names) - then always forwards the raw payload to capture.cjs for
+ *  session mirroring (its normalizeHookInput already reads agy's camelCase
+ *  conversationId/transcriptPath fields).
+ *  stop: forwards the raw payload to capture.cjs for a final flush.
+ *  Either way, stdout is always `{}` - agy isn't gating on this response. */
+const AGY_HOOKS_SCRIPT = `#!/usr/bin/env node
+'use strict';
+const { spawnSync } = require('child_process');
+const { join } = require('path');
+
+const WRITE_TOOLS = new Set(['write_to_file', 'replace_file_content']);
+
+function readStdin() {
+  return new Promise((res) => {
+    let data = '';
+    process.stdin.setEncoding('utf-8');
+    process.stdin.on('data', (c) => { data += c; });
+    process.stdin.on('end', () => res(data));
+    process.stdin.on('error', () => res(data));
+  });
+}
+
+async function main() {
+  const event = process.argv[2];
+  const raw = await readStdin();
+  let payload = {};
+  try { payload = JSON.parse(raw); } catch { /* keep {} */ }
+
+  try {
+    if (event === 'post-tool-use') {
+      const toolCall = payload.toolCall;
+      const filePath = toolCall && toolCall.args && toolCall.args.TargetFile;
+      if (toolCall && WRITE_TOOLS.has(toolCall.name) && typeof filePath === 'string' && filePath) {
+        spawnSync(process.execPath, [join(__dirname, 'sync-push.cjs')], {
+          input: JSON.stringify({ tool_input: { file_path: filePath } }),
+          stdio: ['pipe', 'ignore', 'ignore'],
+          windowsHide: true,
+        });
+      }
+      spawnSync(process.execPath, [join(__dirname, 'capture.cjs'), 'agy', 'post-tool-use'], {
+        input: raw,
+        stdio: ['pipe', 'ignore', 'ignore'],
+        windowsHide: true,
+      });
+    } else if (event === 'stop') {
+      spawnSync(process.execPath, [join(__dirname, 'capture.cjs'), 'agy', 'stop'], {
+        input: raw,
+        stdio: ['pipe', 'ignore', 'ignore'],
+        windowsHide: true,
+      });
+    }
+  } catch { /* never let a side effect break the response below */ }
+
+  process.stdout.write('{}');
+}
+
+main();
+`;
+/** Pure core of the .agents/hooks.json merge for Antigravity (agy). Given the
+ *  file's current content (`null` when absent), return the new content, or
+ *  `null` when no change is needed. Our whole contribution lives under one
+ *  named key ('gipity'), so a re-run replaces it wholesale (simpler than
+ *  Codex's per-entry merge, and fine here since nothing else writes into this
+ *  key) while any other named hook block - the user's own, or another tool's -
+ *  is preserved untouched. Exported for unit testing. */
+export function applyAgyHooks(existing) {
+    const wrapper = join(AGENT_HOOKS_DIR, 'agy-hooks.cjs');
+    const launcher = join(AGENT_HOOKS_DIR, 'launch.sh');
+    const wrapCmd = (event) => `sh "${launcher}" "${wrapper}" ${event}`;
+    const block = {
+        PostToolUse: [
+            { matcher: '.*', hooks: [{ type: 'command', command: wrapCmd('post-tool-use'), timeout: 30 }] },
+        ],
+        Stop: [
+            { hooks: [{ type: 'command', command: wrapCmd('stop'), timeout: 60 }] },
+        ],
+    };
+    let settings = {};
+    if (existing !== null) {
+        try {
+            settings = JSON.parse(existing);
+        }
+        catch {
+            return null; // user file we can't parse - leave it alone
+        }
+    }
+    if (JSON.stringify(settings.gipity ?? null) === JSON.stringify(block))
+        return null; // already current
+    settings.gipity = block;
+    return JSON.stringify(settings, null, 2) + '\n';
+}
+/** Write the project-level Antigravity hooks (.agents/hooks.json) and stage
+ *  the wrapper script it invokes. POSIX only, same constraint as Codex's
+ *  hooks (the commands run through a POSIX sh launcher). */
+export function setupAgyHooks() {
+    if (process.platform === 'win32')
+        return;
+    const cwd = resolve(process.cwd());
+    if (cwd === resolve(homedir()))
+        return; // never treat $HOME as a project
+    mkdirSync(AGENT_HOOKS_DIR, { recursive: true });
+    writeFileSync(join(AGENT_HOOKS_DIR, 'agy-hooks.cjs'), AGY_HOOKS_SCRIPT);
+    const path = join(cwd, '.agents', 'hooks.json');
+    const existing = existsSync(path) ? readFileSync(path, 'utf-8') : null;
+    const next = applyAgyHooks(existing);
+    if (next === null)
+        return;
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, next);
+    console.log(existing === null
+        ? 'Wrote Antigravity sync + session-capture hooks (.agents/hooks.json).'
+        : 'Updated Antigravity hooks (.agents/hooks.json).');
+}
+/** Full Antigravity integration: skills at its own global root + project sync
+ *  hooks. Gated on the agy binary so machines without it get only the
+ *  AGENTS.md primer. Unlike Codex, agy needs no one-time hook-approval nudge -
+ *  confirmed live that project hooks fire without any manual trust step. */
+export function setupAgyIntegration() {
+    if (!binaryOnPath('agy'))
+        return;
+    ensureAgySkillsInstalled();
+    setupAgyHooks();
+}
 export function setupClaudeHooks() {
     // All hooks ship in the plugin - enable it at user scope (and clean up any
     // legacy hook blocks in the user-global settings while we're there).
@@ -746,6 +927,7 @@ export const SUPPORTED_TOOLS = [
     { key: 'claude', label: 'Claude Code (CLAUDE.md + Gipity plugin)', setup: setupClaudeMd, integrate: setupClaudeHooks },
     { key: 'codex', label: 'OpenAI Codex (AGENTS.md + skills + sync hooks)', setup: setupAgentsMd, integrate: setupCodexIntegration },
     { key: 'grok', label: 'Grok Build (AGENTS.md + Gipity plugin)', setup: setupAgentsMd, integrate: ensureGrokPluginInstalled },
+    { key: 'agy', label: 'Antigravity (AGENTS.md + skills + sync hooks)', setup: setupAgentsMd, integrate: setupAgyIntegration },
     { key: 'aider', label: 'Aider (AGENTS.md + .aider.conf.yml)', setup: setupAiderMd, optIn: true },
     { key: 'gemini', label: 'Gemini CLI (GEMINI.md)', setup: setupGeminiMd },
     { key: 'copilot', label: 'GitHub Copilot (.github/copilot-instructions.md)', setup: setupCopilotMd },

package/dist/template-vars.js

@@ -33,6 +33,7 @@ export const KNOWN_PLACEHOLDERS = [
     '{{JS_TITLE}}',
     '{{PROJECT_GUID}}',
     '{{DATABASE}}',
+    '{{HEAD_BLOCK}}',
     '{{DESCRIPTION_META}}',
     '{{OG_DESCRIPTION}}',
     '{{JSON_LD_BLOCK}}',
@@ -49,6 +50,76 @@ function escapeHtml(s) {
 function jsEscape(s) {
     return s.replace(/\\/g, '\\\\').replace(/'/g, "\\'");
 }
+/** Accent palette + hash, mirrored from the server's `services/app-brand.ts`
+ *  so the {{HEAD_BLOCK}} theme-color this path emits matches what a server
+ *  install of the same project would emit. Append-only; keep in sync. */
+const ACCENT_PALETTE = [
+    '#f59e0b', '#f97316', '#ef4444', '#ec4899', '#a855f7', '#6366f1',
+    '#3b82f6', '#0ea5e9', '#14b8a6', '#22c55e', '#84cc16', '#eab308',
+];
+function hashString(s) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return h >>> 0;
+}
+/** Blend the accent into near-black — theme-color tint (mirrors app-brand.ts). */
+function darkTint(hex) {
+    const n = parseInt(hex.slice(1), 16);
+    const base = 0x101014;
+    const ch = (shift) => {
+        const a = (n >> shift) & 0xff;
+        const b = (base >> shift) & 0xff;
+        return Math.round(b + (a - b) * 0.14).toString(16).padStart(2, '0');
+    };
+    return `#${ch(16)}${ch(8)}${ch(0)}`;
+}
+/** The shared head every template's index.html carries as {{HEAD_BLOCK}}.
+ *  Mirrors `buildHeadBlock` in platform `services/app-brand.ts` — same tags,
+ *  same order, same indent; keep the two in sync. */
+function buildHeadBlock(v) {
+    const t = escapeHtml(v.projectName);
+    const d = v.description ? escapeHtml(v.description) : '';
+    const url = v.accountSlug && v.projectSlug
+        ? `https://app.gipity.ai/${v.accountSlug}/${v.projectSlug}/`
+        : undefined;
+    const themeColor = darkTint(ACCENT_PALETTE[hashString(v.projectGuid || v.projectName) % ACCENT_PALETTE.length]);
+    const jsonLd = JSON.stringify({
+        '@context': 'https://schema.org',
+        '@type': 'WebApplication',
+        name: v.projectName,
+        ...(v.description ? { description: v.description } : {}),
+        ...(url ? { url } : {}),
+    }, null, 2).replace(/<\//g, '<\\/');
+    const lines = [
+        `<title>${t}</title>`,
+        ...(d ? [`<meta name="description" content="${d}">`] : []),
+        ...(url ? [`<link rel="canonical" href="${url}">`] : []),
+        `<meta property="og:title" content="${t}">`,
+        `<meta property="og:type" content="website">`,
+        ...(d ? [`<meta property="og:description" content="${d}">`] : []),
+        ...(url ? [
+            `<meta property="og:url" content="${url}">`,
+            `<meta property="og:image" content="${url}images/og-image.png">`,
+            `<meta property="og:image:width" content="1200">`,
+            `<meta property="og:image:height" content="630">`,
+        ] : []),
+        `<meta name="twitter:card" content="summary_large_image">`,
+        `<meta name="twitter:title" content="${t}">`,
+        ...(d ? [`<meta name="twitter:description" content="${d}">`] : []),
+        ...(url ? [`<meta name="twitter:image" content="${url}images/og-image.png">`] : []),
+        `<meta name="theme-color" content="${themeColor}">`,
+        `<link rel="icon" type="image/png" sizes="192x192" href="./images/favicon-192.png">`,
+        `<link rel="icon" type="image/png" sizes="512x512" href="./images/favicon-512.png">`,
+        `<link rel="icon" type="image/x-icon" href="./images/favicon.ico">`,
+        `<link rel="apple-touch-icon" href="./images/apple-touch-icon.png">`,
+        `<link rel="manifest" href="./manifest.webmanifest">`,
+        `<script type="application/ld+json">\n${jsonLd}\n  </script>`,
+    ];
+    return lines.map(l => `\n  ${l}`).join('');
+}
 /** Build the substitution map. Pure — easy to unit-test. */
 export function buildTemplateVars(v) {
     const safeTitle = escapeHtml(v.projectName);
@@ -65,6 +136,9 @@ export function buildTemplateVars(v) {
         '{{JS_TITLE}}': jsEscape(v.projectName),
         '{{PROJECT_GUID}}': v.projectGuid,
         '{{DATABASE}}': slug,
+        '{{HEAD_BLOCK}}': buildHeadBlock(v),
+        // Legacy per-tag placeholders — current templates carry only {{HEAD_BLOCK}},
+        // but older local template copies may still reference these.
         '{{DESCRIPTION_META}}': v.description ? `\n  <meta name="description" content="${safeDesc}">` : '',
         '{{OG_DESCRIPTION}}': v.description ? `\n  <meta property="og:description" content="${safeDesc}">` : '',
         '{{JSON_LD_BLOCK}}': `<script type="application/ld+json">\n${jsonLd}\n  </script>`,

package/dist/utils.js

@@ -119,17 +119,28 @@ function rerunWithYes() {
  *  - `opts.skip` (or the global `--yes` flag) auto-returns `true`.
  *  - Renders a `[Y/n]:` or `[y/N]:` hint automatically - callers should NOT
  *    append their own y/N suffix (or a trailing `?`/`:`) to `question`.
- *  - In non-TTY environments without `--yes`, returns `false` and prints a hint. */
+ *  - In non-TTY environments without `--yes`, this EXITS the process with code 1
+ *    (it never returns) - see the comment in the body for why. Pass
+ *    `{ headless: 'no' }` for prompts that merely OFFER something optional,
+ *    where declining is a normal successful outcome. */
 export async function confirm(question, opts = {}) {
     const defaultYes = opts.default === 'yes';
     if (opts.skip ?? _autoConfirm)
         return true;
     if (!process.stdin.isTTY) {
-        // Headless/agent context: no one can answer the prompt. Don't just say
-        // "use --yes" - echo the exact command to re-run so the fix is copy-paste,
-        // not a second guessing trip.
+        // Headless/agent context: no one can answer the prompt. For an optional
+        // offer, declining and carrying on is the right answer (`headless: 'no'`).
+        // For everything else the command did NOT do what it was asked to do, so
+        // exit non-zero: an agent that pipes or suppresses output
+        // (`gipity records delete games 1 --purge >/dev/null 2>&1`) otherwise sees
+        // a clean exit 0 and believes the delete happened, then burns turns
+        // discovering it silently cancelled. The exit status is the only signal
+        // that survives redirection. The message echoes the exact command to
+        // re-run so the fix is copy-paste, not a second guessing trip.
+        if (opts.headless === 'no')
+            return false;
         console.error(`Confirmation required (non-interactive). Re-run with --yes:\n  ${rerunWithYes()}`);
-        return false;
+        process.exit(1);
     }
     const hint = defaultYes ? dim('[Y/n]') : dim('[y/N]');
     process.stdout.write(`${question} ${hint}: `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gipity",
-  "version": "1.1.5",
+  "version": "1.1.7",
   "description": "The full-stack platform tuned for AI agents. Database, storage, auth, functions, deploy, and drop-in kits - all agent-tuned. Pair with Claude Code or use standalone.",
   "bin": {
     "gipity": "dist/updater/shim.js",
@@ -14,7 +14,7 @@
     "prepack": "npm run build",
     "dev": "tsc --watch",
     "test": "npm run test:smoke",
-    "test:smoke": "npm run build && node --test dist/__tests__/utils.test.js dist/__tests__/platform.test.js dist/__tests__/colors.test.js dist/__tests__/config.test.js dist/__tests__/sync.test.js dist/__tests__/sync-apply.test.js dist/__tests__/sync-unretrievable.test.js dist/__tests__/sync-clean-check.test.js dist/__tests__/sync-lock.test.js dist/__tests__/auth-lock.test.js dist/__tests__/api-401-retry.test.js dist/__tests__/push-cas.test.js dist/__tests__/upload.test.js dist/__tests__/progress.test.js dist/__tests__/updater.test.js dist/__tests__/cli-smoke.test.js dist/__tests__/claude-noninteractive.test.js dist/__tests__/claude-trust.test.js dist/__tests__/build-picker.test.js dist/__tests__/relay-state.test.js dist/__tests__/relay-daemon.test.js dist/__tests__/session-pool.test.js dist/__tests__/relay-diagnostics.test.js dist/__tests__/relay-installers.test.js dist/__tests__/relay-bridge-abort.test.js dist/__tests__/relay-redact.test.js dist/__tests__/relay-machine-id.test.js dist/__tests__/stream-json.test.js dist/__tests__/ingest-queue.test.js dist/__tests__/media-upload.test.js dist/__tests__/stream-delta.test.js dist/__tests__/phase-tracker.test.js dist/__tests__/relay-ingest-contract.test.js dist/__tests__/prompts.test.js dist/__tests__/capture-transcript.test.js dist/__tests__/capture-parsers.test.js dist/__tests__/agents.test.js dist/__tests__/capture-lock.test.js dist/__tests__/capture-resolve.test.js dist/__tests__/flag-aliases.test.js dist/__tests__/client-context.test.js dist/__tests__/adopt-cwd.test.js dist/__tests__/cli-cmd-agent.test.js dist/__tests__/cli-cmd-approval.test.js dist/__tests__/cli-cmd-audit.test.js dist/__tests__/cli-cmd-bug.test.js dist/__tests__/cli-cmd-bug-queue.test.js dist/__tests__/cli-cmd-chat.test.js dist/__tests__/cli-cmd-credits.test.js dist/__tests__/cli-cmd-db.test.js dist/__tests__/cli-cmd-deploy.test.js dist/__tests__/cli-cmd-domain.test.js dist/__tests__/cli-cmd-email.test.js dist/__tests__/cli-cmd-file.test.js dist/__tests__/cli-cmd-storage.test.js dist/__tests__/cli-cmd-fn.test.js dist/__tests__/cli-cmd-service.test.js dist/__tests__/cli-cmd-job.test.js dist/__tests__/cli-cmd-generate.test.js dist/__tests__/cli-cmd-gmail.test.js dist/__tests__/cli-cmd-info.test.js dist/__tests__/cli-cmd-init.test.js dist/__tests__/cli-cmd-location.test.js dist/__tests__/cli-cmd-text.test.js dist/__tests__/cli-cmd-login.test.js dist/__tests__/cli-cmd-status.test.js dist/__tests__/cli-cmd-logout.test.js dist/__tests__/cli-cmd-token.test.js dist/__tests__/cli-cmd-logs.test.js dist/__tests__/cli-cmd-memory.test.js dist/__tests__/cli-cmd-page.test.js dist/__tests__/cli-cmd-plan.test.js dist/__tests__/cli-cmd-project.test.js dist/__tests__/cli-cmd-rbac.test.js dist/__tests__/cli-cmd-realtime.test.js dist/__tests__/cli-cmd-records.test.js dist/__tests__/cli-cmd-relay.test.js dist/__tests__/cli-cmd-setup.test.js dist/__tests__/cli-cmd-doctor.test.js dist/__tests__/claude-setup.test.js dist/__tests__/cli-cmd-sandbox.test.js dist/__tests__/cli-cmd-add.test.js dist/__tests__/cli-cmd-remove.test.js dist/__tests__/cli-cmd-skill.test.js dist/__tests__/cli-cmd-test.test.js dist/__tests__/cli-cmd-workflow.test.js dist/__tests__/setup-skills-block.test.js dist/__tests__/setup-hooks.test.js dist/__tests__/setup-codex-hooks.test.js dist/__tests__/trace.test.js",
+    "test:smoke": "npm run build && node --test dist/__tests__/utils.test.js dist/__tests__/template-vars.test.js dist/__tests__/platform.test.js dist/__tests__/colors.test.js dist/__tests__/config.test.js dist/__tests__/sync.test.js dist/__tests__/sync-apply.test.js dist/__tests__/sync-unretrievable.test.js dist/__tests__/sync-clean-check.test.js dist/__tests__/sync-lock.test.js dist/__tests__/auth-lock.test.js dist/__tests__/api-401-retry.test.js dist/__tests__/push-cas.test.js dist/__tests__/upload.test.js dist/__tests__/progress.test.js dist/__tests__/updater.test.js dist/__tests__/cli-smoke.test.js dist/__tests__/claude-noninteractive.test.js dist/__tests__/claude-trust.test.js dist/__tests__/build-picker.test.js dist/__tests__/relay-state.test.js dist/__tests__/relay-daemon.test.js dist/__tests__/session-pool.test.js dist/__tests__/relay-diagnostics.test.js dist/__tests__/relay-installers.test.js dist/__tests__/relay-bridge-abort.test.js dist/__tests__/relay-redact.test.js dist/__tests__/relay-machine-id.test.js dist/__tests__/stream-json.test.js dist/__tests__/ingest-queue.test.js dist/__tests__/media-upload.test.js dist/__tests__/stream-delta.test.js dist/__tests__/phase-tracker.test.js dist/__tests__/relay-ingest-contract.test.js dist/__tests__/prompts.test.js dist/__tests__/capture-transcript.test.js dist/__tests__/capture-parsers.test.js dist/__tests__/agents.test.js dist/__tests__/capture-lock.test.js dist/__tests__/capture-resolve.test.js dist/__tests__/flag-aliases.test.js dist/__tests__/client-context.test.js dist/__tests__/adopt-cwd.test.js dist/__tests__/cli-cmd-agent.test.js dist/__tests__/cli-cmd-approval.test.js dist/__tests__/cli-cmd-audit.test.js dist/__tests__/cli-cmd-brand.test.js dist/__tests__/cli-cmd-bug.test.js dist/__tests__/cli-cmd-bug-queue.test.js dist/__tests__/cli-cmd-chat.test.js dist/__tests__/cli-cmd-credits.test.js dist/__tests__/cli-cmd-db.test.js dist/__tests__/cli-cmd-db-checkpoint.test.js dist/__tests__/cli-cmd-deploy.test.js dist/__tests__/cli-cmd-domain.test.js dist/__tests__/cli-cmd-email.test.js dist/__tests__/cli-cmd-file.test.js dist/__tests__/cli-cmd-storage.test.js dist/__tests__/cli-cmd-fn.test.js dist/__tests__/cli-cmd-service.test.js dist/__tests__/cli-cmd-job.test.js dist/__tests__/cli-cmd-generate.test.js dist/__tests__/cli-cmd-gmail.test.js dist/__tests__/cli-cmd-info.test.js dist/__tests__/cli-cmd-init.test.js dist/__tests__/cli-cmd-location.test.js dist/__tests__/cli-cmd-text.test.js dist/__tests__/cli-cmd-login.test.js dist/__tests__/cli-cmd-status.test.js dist/__tests__/cli-cmd-logout.test.js dist/__tests__/cli-cmd-token.test.js dist/__tests__/cli-cmd-key.test.js dist/__tests__/cli-cmd-logs.test.js dist/__tests__/cli-cmd-memory.test.js dist/__tests__/cli-cmd-page.test.js dist/__tests__/cli-cmd-plan.test.js dist/__tests__/cli-cmd-project.test.js dist/__tests__/cli-cmd-rbac.test.js dist/__tests__/cli-cmd-realtime.test.js dist/__tests__/cli-cmd-records.test.js dist/__tests__/cli-cmd-relay.test.js dist/__tests__/cli-cmd-setup.test.js dist/__tests__/cli-cmd-doctor.test.js dist/__tests__/claude-setup.test.js dist/__tests__/cli-cmd-sandbox.test.js dist/__tests__/cli-cmd-add.test.js dist/__tests__/cli-cmd-remove.test.js dist/__tests__/cli-cmd-skill.test.js dist/__tests__/cli-cmd-test.test.js dist/__tests__/cli-cmd-workflow.test.js dist/__tests__/setup-skills-block.test.js dist/__tests__/setup-hooks.test.js dist/__tests__/setup-codex-hooks.test.js dist/__tests__/trace.test.js",
     "test:smoke:quick": "node scripts/smoke-quick.mjs",
     "test:e2e": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-live.test.js dist/__tests__/cli-e2e-sync-live.test.js dist/__tests__/cli-e2e-sync-stress-live.test.js dist/__tests__/cli-e2e-rollback-live.test.js dist/__tests__/cli-e2e-services-media-live.test.js dist/__tests__/cli-e2e-workflow-live.test.js dist/__tests__/cli-e2e-sandbox-live.test.js dist/__tests__/cli-e2e-page-fetch-live.test.js dist/__tests__/cli-e2e-page-test-live.test.js",
     "test:e2e:sync": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-sync-live.test.js",