gsd-pi 2.28.0 → 2.29.0-dev.2ccf3fb

package/src/resources/extensions/remote-questions/notify.ts

@@ -0,0 +1,90 @@
+/**
+ * Remote Notifications — one-way alert delivery to configured channels.
+ *
+ * Sends informational messages to Slack/Discord/Telegram without expecting
+ * a reply. Used for auto-mode events like secrets-required pauses where
+ * the user needs to be notified but should NOT send sensitive data back
+ * through the channel.
+ */
+
+import { resolveRemoteConfig } from "./config.js";
+import type { ResolvedConfig } from "./config.js";
+import { PER_REQUEST_TIMEOUT_MS } from "./types.js";
+
+/**
+ * Send a one-way notification to the configured remote channel.
+ * Non-blocking, non-fatal — failures are silently ignored.
+ *
+ * SECURITY: This is intentionally one-way. Never use remote channels
+ * to collect secrets or sensitive values.
+ */
+export async function sendRemoteNotification(title: string, message: string): Promise<void> {
+  let config: ResolvedConfig | null;
+  try {
+    config = resolveRemoteConfig();
+  } catch {
+    return; // Remote not configured — skip silently
+  }
+  if (!config) return;
+
+  try {
+    switch (config.channel) {
+      case "slack":
+        await sendSlackNotification(config, title, message);
+        break;
+      case "discord":
+        await sendDiscordNotification(config, title, message);
+        break;
+      case "telegram":
+        await sendTelegramNotification(config, title, message);
+        break;
+    }
+  } catch {
+    // Non-fatal — remote notifications are best-effort
+  }
+}
+
+async function sendSlackNotification(config: ResolvedConfig, title: string, message: string): Promise<void> {
+  const response = await fetch(`https://slack.com/api/chat.postMessage`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${config.token}`,
+      "Content-Type": "application/json; charset=utf-8",
+    },
+    body: JSON.stringify({
+      channel: config.channelId,
+      text: `⚠️ *${title}*\n${message}`,
+    }),
+    signal: AbortSignal.timeout(PER_REQUEST_TIMEOUT_MS),
+  });
+  if (!response.ok) throw new Error(`Slack HTTP ${response.status}`);
+}
+
+async function sendDiscordNotification(config: ResolvedConfig, title: string, message: string): Promise<void> {
+  const response = await fetch(`https://discord.com/api/v10/channels/${config.channelId}/messages`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bot ${config.token}`,
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify({
+      content: `⚠️ **${title}**\n${message}`,
+    }),
+    signal: AbortSignal.timeout(PER_REQUEST_TIMEOUT_MS),
+  });
+  if (!response.ok) throw new Error(`Discord HTTP ${response.status}`);
+}
+
+async function sendTelegramNotification(config: ResolvedConfig, title: string, message: string): Promise<void> {
+  const response = await fetch(`https://api.telegram.org/bot${config.token}/sendMessage`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      chat_id: config.channelId,
+      text: `⚠️ *${title}*\n${message}`,
+      parse_mode: "Markdown",
+    }),
+    signal: AbortSignal.timeout(PER_REQUEST_TIMEOUT_MS),
+  });
+  if (!response.ok) throw new Error(`Telegram HTTP ${response.status}`);
+}

package/src/resources/extensions/remote-questions/remote-command.ts

@@ -9,7 +9,7 @@ import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { getGlobalGSDPreferencesPath, loadEffectiveGSDPreferences } from "../gsd/preferences.js";
 import { getRemoteConfigStatus, isValidChannelId, resolveRemoteConfig } from "./config.js";
-import { sanitizeError } from "./manager.js";
+import { sanitizeError } from "../shared/sanitize.js";
 import { getLatestPromptSummary } from "./status.js";
 
 export async function handleRemote(

package/src/resources/extensions/remote-questions/slack-adapter.ts

@@ -2,11 +2,11 @@
  * Remote Questions — Slack adapter
  */
 
-import type { ChannelAdapter, RemotePrompt, RemoteDispatchResult, RemoteAnswer, RemotePromptRef } from "./types.js";
+import { type ChannelAdapter, type RemotePrompt, type RemoteDispatchResult, type RemoteAnswer, type RemotePromptRef } from "./types.js";
 import { formatForSlack, parseSlackReply, parseSlackReactionResponse, SLACK_NUMBER_REACTION_NAMES } from "./format.js";
+import { apiRequest } from "./http-client.js";
 
 const SLACK_API = "https://slack.com/api";
-const PER_REQUEST_TIMEOUT_MS = 15_000;
 const SLACK_ACK_REACTION = "white_check_mark";
 
 export class SlackAdapter implements ChannelAdapter {
@@ -123,26 +123,19 @@ export class SlackAdapter implements ChannelAdapter {
   }
 
   private async slackApi(method: string, params: Record<string, unknown>): Promise<Record<string, unknown>> {
-    const url = `${SLACK_API}/${method}`;
     const isGet = method === "conversations.replies" || method === "auth.test" || method === "reactions.get";
+    const opts = { authScheme: "Bearer" as const, authToken: this.token, errorLabel: "Slack API" };
 
-    let response: Response;
     if (isGet) {
-      const qs = new URLSearchParams(Object.fromEntries(Object.entries(params).map(([k, v]) => [k, String(v)]))).toString();
-      response = await fetch(`${url}?${qs}`, { method: "GET", headers: { Authorization: `Bearer ${this.token}` }, signal: AbortSignal.timeout(PER_REQUEST_TIMEOUT_MS) });
-    } else {
-      response = await fetch(url, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${this.token}`,
-          "Content-Type": "application/json; charset=utf-8",
-        },
-        body: JSON.stringify(params),
-        signal: AbortSignal.timeout(PER_REQUEST_TIMEOUT_MS),
-      });
+      const qs = new URLSearchParams(
+        Object.fromEntries(Object.entries(params).map(([k, v]) => [k, String(v)])),
+      ).toString();
+      return apiRequest(`${SLACK_API}/${method}?${qs}`, "GET", undefined, opts);
     }
 
-    if (!response.ok) throw new Error(`Slack API HTTP ${response.status}: ${response.statusText}`);
-    return (await response.json()) as Record<string, unknown>;
+    return apiRequest(`${SLACK_API}/${method}`, "POST", params, {
+      ...opts,
+      contentType: "application/json; charset=utf-8",
+    });
   }
 }

package/src/resources/extensions/remote-questions/store.ts

@@ -51,11 +51,15 @@ export function updatePromptRecord(
 ): RemotePromptRecord | null {
   const current = readPromptRecord(id);
   if (!current) return null;
-  const next: RemotePromptRecord = {
+  const merged = {
     ...current,
     ...updates,
     updatedAt: Date.now(),
   };
+  // After spreading, the merged object satisfies one of the union members
+  // but TypeScript can't prove it statically. The invariant is maintained
+  // by callers: once `ref` is set via markPromptDispatched it is never removed.
+  const next = merged as RemotePromptRecord;
   writePromptRecord(next);
   return next;
 }

package/src/resources/extensions/remote-questions/telegram-adapter.ts

@@ -2,11 +2,11 @@
  * Remote Questions — Telegram adapter
  */
 
-import type { ChannelAdapter, RemotePrompt, RemoteDispatchResult, RemoteAnswer, RemotePromptRef } from "./types.js";
+import { type ChannelAdapter, type RemotePrompt, type RemoteDispatchResult, type RemoteAnswer, type RemotePromptRef } from "./types.js";
 import { formatForTelegram, parseTelegramResponse } from "./format.js";
+import { apiRequest } from "./http-client.js";
 
 const TELEGRAM_API = "https://api.telegram.org";
-const PER_REQUEST_TIMEOUT_MS = 15_000;
 
 export class TelegramAdapter implements ChannelAdapter {
   readonly name = "telegram" as const;
@@ -139,23 +139,11 @@ export class TelegramAdapter implements ChannelAdapter {
   }
 
   private async telegramApi(method: string, params?: Record<string, unknown>): Promise<any> {
-    const url = `${TELEGRAM_API}/bot${this.token}/${method}`;
-    const init: RequestInit = {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      signal: AbortSignal.timeout(PER_REQUEST_TIMEOUT_MS),
-    };
-
-    if (params) {
-      init.body = JSON.stringify(params);
-    }
-
-    const response = await fetch(url, init);
-    if (!response.ok) {
-      const text = await response.text().catch(() => "");
-      const safeText = text.length > 200 ? text.slice(0, 200) + "…" : text;
-      throw new Error(`Telegram API HTTP ${response.status}: ${safeText}`);
-    }
-    return response.json();
+    return apiRequest(
+      `${TELEGRAM_API}/bot${this.token}/${method}`,
+      "POST",
+      params,
+      { errorLabel: "Telegram API" },
+    );
   }
 }

package/src/resources/extensions/remote-questions/types.ts

@@ -2,6 +2,9 @@
  * Remote Questions — shared types
  */
 
+/** Timeout applied to every outbound HTTP request across all channel adapters. */
+export const PER_REQUEST_TIMEOUT_MS = 15_000;
+
 export type RemoteChannel = "slack" | "discord" | "telegram";
 
 export interface RemoteQuestionOption {
@@ -44,17 +47,16 @@ export interface RemoteAnswer {
 
 export type RemotePromptStatus = "pending" | "answered" | "timed_out" | "failed" | "cancelled";
 
-export interface RemotePromptRecord {
+/** Shared fields present on every prompt record regardless of dispatch state. */
+interface RemotePromptRecordBase {
   version: 1;
   id: string;
   createdAt: number;
   updatedAt: number;
-  status: RemotePromptStatus;
   channel: RemoteChannel;
   timeoutAt: number;
   pollIntervalMs: number;
   questions: RemoteQuestion[];
-  ref?: RemotePromptRef;
   response?: RemoteAnswer;
   lastPollAt?: number;
   lastError?: string;
@@ -63,6 +65,30 @@ export interface RemotePromptRecord {
   };
 }
 
+/** Record before the prompt has been dispatched to a channel. */
+export interface PendingPromptRecord extends RemotePromptRecordBase {
+  status: "pending";
+  ref?: undefined;
+}
+
+/** Record after the prompt has been dispatched (ref is always present). */
+export interface DispatchedPromptRecord extends RemotePromptRecordBase {
+  status: RemotePromptStatus;
+  ref: RemotePromptRef;
+}
+
+/**
+ * A prompt record is either pre-dispatch (no ref) or post-dispatch (ref required).
+ *
+ * Narrow via `record.ref`:
+ * ```ts
+ * if (record.ref) {
+ *   // DispatchedPromptRecord — ref is RemotePromptRef
+ * }
+ * ```
+ */
+export type RemotePromptRecord = PendingPromptRecord | DispatchedPromptRecord;
+
 export interface RemoteDispatchResult {
   ref: RemotePromptRef;
 }

package/src/resources/extensions/search-the-web/native-search.ts

@@ -5,6 +5,8 @@
  * the heavy tool-registration modules.
  */
 
+import { resolveSearchProviderFromPreferences } from "../gsd/preferences.js";
+
 /** Tool names for the Brave-backed custom search tools */
 export const BRAVE_TOOL_NAMES = ["search-the-web", "search_and_read"];
 
@@ -16,6 +18,11 @@ const THINKING_TYPES = new Set(["thinking", "redacted_thinking"]);
 
 /** When true, skip native web search injection and keep Brave/custom tools active on Anthropic. */
 export function preferBraveSearch(): boolean {
+  // preferences.md takes priority over env var
+  const prefsPref = resolveSearchProviderFromPreferences();
+  if (prefsPref === "brave" || prefsPref === "tavily" || prefsPref === "ollama") return true;
+  if (prefsPref === "native") return false;
+  // Fall back to env var
   return process.env.PREFER_BRAVE_SEARCH === "1" || process.env.PREFER_BRAVE_SEARCH === "true";
 }
 

package/src/resources/extensions/search-the-web/provider.ts

@@ -12,6 +12,7 @@
 import { AuthStorage } from '@gsd/pi-coding-agent'
 import { homedir } from 'os'
 import { join } from 'path'
+import { resolveSearchProviderFromPreferences } from '../gsd/preferences.js'
 
 // Compute authFilePath locally instead of importing from app-paths.ts,
 // because extensions are copied to ~/.gsd/agent/extensions/ at runtime
@@ -34,6 +35,15 @@ export function getBraveApiKey(): string {
   return process.env.BRAVE_API_KEY || ''
 }
 
+/** Standard headers for Brave Search API requests. */
+export function braveHeaders(): Record<string, string> {
+  return {
+    "Accept": "application/json",
+    "Accept-Encoding": "gzip",
+    "X-Subscription-Token": getBraveApiKey(),
+  }
+}
+
 /** Returns the Ollama API key from the environment, or empty string if not set. */
 export function getOllamaApiKey(): string {
   return process.env.OLLAMA_API_KEY || ''
@@ -94,9 +104,11 @@ export function resolveSearchProvider(overridePreference?: string): SearchProvid
   if (overridePreference && VALID_PREFERENCES.has(overridePreference)) {
     pref = overridePreference as SearchProviderPreference
   } else {
-    // Invalid override or no override — read stored preference
-    // If overridePreference is provided but invalid, treat as 'auto'
-    if (overridePreference !== undefined && !VALID_PREFERENCES.has(overridePreference)) {
+    // preferences.md takes priority over auth.json
+    const mdPref = resolveSearchProviderFromPreferences()
+    if (mdPref && mdPref !== 'auto' && mdPref !== 'native') {
+      pref = mdPref as SearchProviderPreference
+    } else if (overridePreference !== undefined && !VALID_PREFERENCES.has(overridePreference)) {
       pref = 'auto'
     } else {
       pref = getSearchProviderPreference()

package/src/resources/extensions/search-the-web/tool-llm-context.ts

@@ -27,7 +27,7 @@ import { normalizeQuery, extractDomain } from "./url-utils.js";
 import { formatLLMContext, type LLMContextSnippet, type LLMContextSource } from "./format.js";
 import type { TavilyResult, TavilySearchResponse } from "./tavily.js";
 import { publishedDateToAge } from "./tavily.js";
-import { getTavilyApiKey, getOllamaApiKey, resolveSearchProvider } from "./provider.js";
+import { getTavilyApiKey, getOllamaApiKey, getBraveApiKey, braveHeaders, resolveSearchProvider } from "./provider.js";
 
 // =============================================================================
 // Types
@@ -94,18 +94,6 @@ contextCache.startPurgeInterval(60_000);
 // Helpers
 // =============================================================================
 
-function getBraveApiKey(): string {
-  return process.env.BRAVE_API_KEY || "";
-}
-
-function braveHeaders(): Record<string, string> {
-  return {
-    "Accept": "application/json",
-    "Accept-Encoding": "gzip",
-    "X-Subscription-Token": getBraveApiKey(),
-  };
-}
-
 /** Rough token estimate: ~4 chars per token for English text. */
 function estimateTokens(text: string): number {
   return Math.ceil(text.length / 4);

package/src/resources/extensions/search-the-web/tool-search.ts

@@ -20,7 +20,7 @@ import { LRUTTLCache } from "./cache.js";
 import { fetchWithRetryTimed, fetchWithRetry, classifyError, type RateLimitInfo } from "./http.js";
 import { normalizeQuery, toDedupeKey, detectFreshness } from "./url-utils.js";
 import { formatSearchResults, type SearchResultFormatted, type FormatSearchOptions } from "./format.js";
-import { getTavilyApiKey, getOllamaApiKey, resolveSearchProvider } from "./provider.js";
+import { getTavilyApiKey, getOllamaApiKey, getBraveApiKey, braveHeaders, resolveSearchProvider } from "./provider.js";
 import { normalizeTavilyResult, mapFreshnessToTavily, type TavilySearchResponse } from "./tavily.js";
 
 // =============================================================================
@@ -117,18 +117,6 @@ const summarizerCache = new LRUTTLCache<string>({ max: 50, ttlMs: 900_000 });
 // Brave API helpers
 // =============================================================================
 
-function getBraveApiKey(): string {
-  return process.env.BRAVE_API_KEY || "";
-}
-
-function braveHeaders(): Record<string, string> {
-  return {
-    "Accept": "application/json",
-    "Accept-Encoding": "gzip",
-    "X-Subscription-Token": getBraveApiKey(),
-  };
-}
-
 /**
  * Normalize a Brave result into our formatted result type.
  */

package/src/resources/extensions/shared/format-utils.ts

@@ -11,6 +11,7 @@ import { truncateToWidth, visibleWidth } from "@gsd/pi-tui";
 
 /** Format a millisecond duration as a compact human-readable string. */
 export function formatDuration(ms: number): string {
+  if (ms < 1000) return `${ms}ms`;
   const s = Math.floor(ms / 1000);
   if (s < 60) return `${s}s`;
   const m = Math.floor(s / 60);
@@ -21,6 +22,15 @@ export function formatDuration(ms: number): string {
   return `${h}h ${rm}m`;
 }
 
+// ─── Token Count Formatting ──────────────────────────────────────────────────
+
+/** Format a token count as a compact human-readable string (e.g. 1.5k, 1.50M). */
+export function formatTokenCount(count: number): string {
+  if (count < 1000) return `${count}`;
+  if (count < 1_000_000) return `${(count / 1000).toFixed(1)}k`;
+  return `${(count / 1_000_000).toFixed(2)}M`;
+}
+
 // ─── Layout Helpers ───────────────────────────────────────────────────────────
 
 /** Pad a string with trailing spaces to fill `width` (ANSI-aware). */
@@ -60,6 +70,14 @@ export function fitColumns(parts: string[], width: number, separator = "  "): st
   return truncateToWidth(result, width);
 }
 
+// ─── Text Truncation ─────────────────────────────────────────────────────────
+
+/** Truncate a string to `maxLength` characters, replacing the last character with an ellipsis if needed. */
+export function truncateWithEllipsis(text: string, maxLength: number): string {
+  if (text.length <= maxLength) return text
+  return text.slice(0, maxLength - 1) + "…"
+}
+
 // ─── Data Visualization ───────────────────────────────────────────────────────
 
 /**
@@ -77,9 +95,44 @@ export function sparkline(values: number[]): string {
   return values.map(v => chars[Math.min(7, Math.floor((v / max) * 7))]).join("");
 }
 
+// ─── Date Formatting ─────────────────────────────────────────────────────────
+
+/** Format an ISO date string as a compact locale string (e.g. "Mar 17, 2025, 02:30 PM"). */
+export function formatDateShort(iso: string): string {
+  try {
+    const d = new Date(iso);
+    return d.toLocaleString('en-US', { month: 'short', day: 'numeric', year: 'numeric', hour: '2-digit', minute: '2-digit' });
+  } catch { return iso; }
+}
+
+// ─── Hyperlinks ──────────────────────────────────────────────────────────────
+
+/** Wrap text in an OSC 8 hyperlink for terminals that support clickable links. */
+export function fileLink(filePath: string, displayText?: string): string {
+  const uri = `file://${filePath}`;
+  const label = displayText ?? filePath;
+  return `\x1b]8;;${uri}\x07${label}\x1b]8;;\x07`;
+}
+
 // ─── ANSI Stripping ───────────────────────────────────────────────────────────
 
 /** Strip ANSI escape sequences from a string. */
 export function stripAnsi(s: string): string {
   return s.replace(/\x1b\[[0-9;]*m/g, "");
 }
+
+// ─── String Array Normalization ─────────────────────────────────────────────
+
+/**
+ * Normalize an unknown value to a string array.
+ * Filters to string items, trims whitespace, removes empty strings.
+ * Optionally deduplicates.
+ */
+export function normalizeStringArray(value: unknown, options?: { dedupe?: boolean }): string[] {
+  if (!Array.isArray(value)) return [];
+  const items = value
+    .filter((item): item is string => typeof item === "string")
+    .map(item => item.trim())
+    .filter(Boolean);
+  return options?.dedupe ? [...new Set(items)] : items;
+}

package/src/resources/extensions/shared/frontmatter.ts

@@ -0,0 +1,117 @@
+// Shared frontmatter parsing utilities
+// Canonical implementation for splitting and parsing YAML-like frontmatter.
+
+/** Strip matching single or double quotes from a string value (standard YAML scalar behavior). */
+function stripQuotes(s: string): string {
+  if (s.length >= 2 && ((s[0] === '"' && s[s.length - 1] === '"') || (s[0] === "'" && s[s.length - 1] === "'"))) {
+    return s.slice(1, -1);
+  }
+  return s;
+}
+
+/**
+ * Split markdown content into frontmatter (YAML-like) and body.
+ * Returns [frontmatterLines, body] where frontmatterLines is null if no frontmatter.
+ */
+export function splitFrontmatter(content: string): [string[] | null, string] {
+  const trimmed = content.trimStart();
+  if (!trimmed.startsWith('---')) return [null, content];
+
+  const afterFirst = trimmed.indexOf('\n');
+  if (afterFirst === -1) return [null, content];
+
+  const rest = trimmed.slice(afterFirst + 1);
+  const endIdx = rest.indexOf('\n---');
+  if (endIdx === -1) return [null, content];
+
+  const fmLines = rest.slice(0, endIdx).split('\n');
+  const body = rest.slice(endIdx + 4).replace(/^\n+/, '');
+  return [fmLines, body];
+}
+
+/**
+ * Parse YAML-like frontmatter lines into a flat key-value map.
+ * Handles simple scalars and arrays (lines starting with "  - ").
+ * Handles nested objects like requires (lines with "    key: value").
+ * Supports hyphenated keys (e.g. `tech-stack:`).
+ */
+export function parseFrontmatterMap(lines: string[]): Record<string, unknown> {
+  const result: Record<string, unknown> = {};
+  let currentKey: string | null = null;
+  let currentArray: unknown[] | null = null;
+  let currentObj: Record<string, string> | null = null;
+
+  for (const line of lines) {
+    // Nested object property (4-space indent with key: value)
+    const nestedMatch = line.match(/^    ([\w][\w_-]*)\s*:\s*(.*)$/);
+    if (nestedMatch && currentArray && currentObj) {
+      currentObj[nestedMatch[1]] = nestedMatch[2].trim();
+      continue;
+    }
+
+    // Array item (2-space indent)
+    const arrayMatch = line.match(/^  - (.*)$/);
+    if (arrayMatch && currentKey) {
+      // If there's a pending nested object, push it
+      if (currentObj && Object.keys(currentObj).length > 0) {
+        currentArray!.push(currentObj);
+      }
+      currentObj = null;
+
+      const val = arrayMatch[1].trim();
+      if (!currentArray) currentArray = [];
+
+      // Check if this array item starts a nested object (e.g. "- slice: S00")
+      const nestedStart = val.match(/^([\w][\w_-]*)\s*:\s*(.*)$/);
+      if (nestedStart) {
+        currentObj = { [nestedStart[1]]: nestedStart[2].trim() };
+      } else {
+        currentArray.push(stripQuotes(val));
+      }
+      continue;
+    }
+
+    // Flush previous key
+    if (currentKey) {
+      if (currentObj && Object.keys(currentObj).length > 0 && currentArray) {
+        currentArray.push(currentObj);
+        currentObj = null;
+      }
+      if (currentArray) {
+        result[currentKey] = currentArray;
+      }
+      currentArray = null;
+    }
+
+    // Top-level key: value (supports hyphens in key names)
+    const kvMatch = line.match(/^([\w][\w_-]*)\s*:\s*(.*)$/);
+    if (kvMatch) {
+      currentKey = kvMatch[1];
+      const val = kvMatch[2].trim();
+
+      if (val === '' || val === '[]') {
+        currentArray = [];
+      } else if (val.startsWith('[') && val.endsWith(']')) {
+        const inner = val.slice(1, -1).trim();
+        result[currentKey] = inner ? inner.split(',').map(s => s.trim()) : [];
+        currentKey = null;
+      } else {
+        result[currentKey] = stripQuotes(val);
+        currentKey = null;
+      }
+    }
+  }
+
+  // Flush final key
+  if (currentKey) {
+    if (currentObj && Object.keys(currentObj).length > 0 && currentArray) {
+      currentArray.push(currentObj);
+      currentObj = null;
+    }
+    if (currentArray) {
+      result[currentKey] = currentArray;
+    }
+  }
+
+  return result;
+}

package/src/resources/extensions/shared/mod.ts

@@ -0,0 +1,33 @@
+// Barrel file — re-exports consumed by external modules
+
+export {
+	makeUI,
+	GLYPH,
+	INDENT,
+	STATUS_GLYPH,
+	STATUS_COLOR,
+} from "./ui.js";
+export type { ProgressStatus } from "./ui.js";
+
+export {
+	stripAnsi,
+	formatTokenCount,
+	formatDuration,
+	padRight,
+	joinColumns,
+	centerLine,
+	fitColumns,
+	sparkline,
+	normalizeStringArray,
+	fileLink,
+} from "./format-utils.js";
+
+export { shortcutDesc } from "./terminal.js";
+export { toPosixPath } from "./path-display.js";
+export { showInterviewRound } from "./interview-ui.js";
+export type { Question, QuestionOption, RoundResult } from "./interview-ui.js";
+export { showNextAction } from "./next-action-ui.js";
+export { showConfirm } from "./confirm-ui.js";
+export { sanitizeError } from "./sanitize.js";
+export { formatDateShort, truncateWithEllipsis } from "./format-utils.js";
+export { splitFrontmatter, parseFrontmatterMap } from "./frontmatter.js";

package/src/resources/extensions/shared/sanitize.ts

@@ -0,0 +1,19 @@
+/**
+ * Sanitize error messages by redacting token-like strings before surfacing.
+ */
+
+const TOKEN_PATTERNS = [
+  /xoxb-[A-Za-z0-9\-]+/g,    // Slack bot tokens
+  /xoxp-[A-Za-z0-9\-]+/g,    // Slack user tokens
+  /xoxa-[A-Za-z0-9\-]+/g,    // Slack app tokens
+  /\d{8,10}:[A-Za-z0-9_-]{35}/g, // Telegram bot tokens
+  /[A-Za-z0-9_\-.]{20,}/g,   // Long opaque secrets (Discord tokens, etc.)
+];
+
+export function sanitizeError(msg: string): string {
+  let sanitized = msg;
+  for (const pattern of TOKEN_PATTERNS) {
+    sanitized = sanitized.replace(pattern, "[REDACTED]");
+  }
+  return sanitized;
+}

package/src/resources/extensions/slash-commands/create-extension.ts

@@ -1,5 +1,5 @@
 import type { ExtensionAPI } from "@gsd/pi-coding-agent";
-import { showInterviewRound, type Question, type RoundResult } from "../shared/interview-ui.js";
+import { showInterviewRound, type Question, type RoundResult } from "../shared/mod.js";
 
 export default function createExtension(pi: ExtensionAPI) {
 	pi.registerCommand("create-extension", {

package/src/resources/extensions/slash-commands/create-slash-command.ts

@@ -1,5 +1,5 @@
 import type { ExtensionAPI } from "@gsd/pi-coding-agent";
-import { showInterviewRound, type Question, type RoundResult } from "../shared/interview-ui.js";
+import { showInterviewRound, type Question, type RoundResult } from "../shared/mod.js";
 
 export default function createSlashCommand(pi: ExtensionAPI) {
 	pi.registerCommand("create-slash-command", {