gsd-pi 2.38.0 → 2.39.0-dev.20aba06

package/README.md

@@ -24,21 +24,25 @@ One command. Walk away. Come back to a built project with clean git history.
 
 ---
 
-## What's New in v2.37
+## What's New in v2.38
 
-- **cmux integration** — sidebar status, progress bars, and notifications for [cmux](https://cmux.com) terminal multiplexer users
-- **Redesigned dashboard** — two-column layout with redesigned widget
-- **Search budget enforcement** — session-level search budget prevents unbounded native web search
+- **Reactive task execution (ADR-004)** — graph-derived parallel task dispatch within slices. When enabled, GSD derives a dependency graph from IO annotations in task plans and dispatches multiple non-conflicting tasks in parallel via subagents. Backward compatible — disabled by default. Enable with `reactive_execution: true` in preferences.
+- **Anthropic Vertex AI provider** — run Claude models (Opus 4.6, Sonnet 4.6, Haiku 4.5) through Google Vertex AI. Set `ANTHROPIC_VERTEX_PROJECT_ID` to activate.
+- **CI optimization** — GitHub Actions minutes reduced ~60-70% (~10k → ~3-4k/month)
+- **Reactive batch verification** — dependency-based carry-forward for verification results across parallel task batches
+- **Backtick file path enforcement** — task plan IO sections now require backtick-wrapped paths for reliable parsing
+
+See the full [Changelog](./CHANGELOG.md) for details.
+
+### Previous highlights (v2.34–v2.37)
+
+- **cmux integration** — sidebar status, progress bars, and notifications for cmux terminal multiplexer users
+- **Redesigned dashboard** — two-column layout with 4 widget modes (full → small → min → off)
 - **AGENTS.md support** — deprecated `agent-instructions.md` in favor of standard `AGENTS.md` / `CLAUDE.md`
 - **AI-powered triage** — automated issue and PR triage via Claude Haiku
-- **Auto-generated OpenRouter registry** — model registry built from OpenRouter API for always-current model support
-- **Extension manifest system** — user-managed enable/disable for bundled extensions
-- **Pipeline simplification (ADR-003)** — merged research into planning, mechanical completion
-- **Workflow templates** — right-sized workflows for every task type
-- **Health widget** — always-on environment health checks with progress scoring
+- **Auto-generated OpenRouter registry** — model registry built from OpenRouter API
 - **`/gsd changelog`** — LLM-summarized release notes for any version
-
-See the full [Changelog](./CHANGELOG.md) for details.
+- **Search budget enforcement** — session-level cap prevents unbounded web search
 
 ---
 

package/dist/app-paths.js

@@ -1,6 +1,6 @@
 import { homedir } from 'os';
 import { join } from 'path';
-export const appRoot = join(homedir(), '.gsd');
+export const appRoot = process.env.GSD_HOME || join(homedir(), '.gsd');
 export const agentDir = join(appRoot, 'agent');
 export const sessionsDir = join(appRoot, 'sessions');
 export const authFilePath = join(agentDir, 'auth.json');

package/dist/cli.js

@@ -505,6 +505,15 @@ if (enabledModelPatterns && enabledModelPatterns.length > 0) {
         session.setScopedModels(scopedModels);
     }
 }
+// Welcome screen — shown on every fresh interactive session before TUI takes over
+{
+    const { printWelcomeScreen } = await import('./welcome-screen.js');
+    printWelcomeScreen({
+        version: process.env.GSD_VERSION || '0.0.0',
+        modelName: settingsManager.getDefaultModel() || undefined,
+        provider: settingsManager.getDefaultProvider() || undefined,
+    });
+}
 const interactiveMode = new InteractiveMode(session);
 markStartup('InteractiveMode');
 printStartupTimings();

package/dist/extension-discovery.d.ts

@@ -1,9 +1,11 @@
 /**
  * Resolves the entry-point file(s) for a single extension directory.
  *
- * 1. If the directory contains a package.json with a `pi.extensions` array,
- *    each entry is resolved relative to the directory and returned (if it exists).
- * 2. Otherwise falls back to `index.ts` → `index.js`.
+ * 1. If the directory contains a package.json with a `pi` manifest object,
+ *    the manifest is authoritative:
+ *    - `pi.extensions` array → resolve each entry relative to the directory.
+ *    - `pi: {}` (no extensions) → return empty (library opt-out, e.g. cmux).
+ * 2. Only when no `pi` manifest exists does it fall back to `index.ts` → `index.js`.
  */
 export declare function resolveExtensionEntries(dir: string): string[];
 /**

package/dist/extension-discovery.js

@@ -6,24 +6,29 @@ function isExtensionFile(name) {
 /**
  * Resolves the entry-point file(s) for a single extension directory.
  *
- * 1. If the directory contains a package.json with a `pi.extensions` array,
- *    each entry is resolved relative to the directory and returned (if it exists).
- * 2. Otherwise falls back to `index.ts` → `index.js`.
+ * 1. If the directory contains a package.json with a `pi` manifest object,
+ *    the manifest is authoritative:
+ *    - `pi.extensions` array → resolve each entry relative to the directory.
+ *    - `pi: {}` (no extensions) → return empty (library opt-out, e.g. cmux).
+ * 2. Only when no `pi` manifest exists does it fall back to `index.ts` → `index.js`.
  */
 export function resolveExtensionEntries(dir) {
     const packageJsonPath = join(dir, 'package.json');
     if (existsSync(packageJsonPath)) {
         try {
             const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
-            const declared = pkg?.pi?.extensions;
-            if (Array.isArray(declared)) {
-                const resolved = declared
+            if (pkg?.pi && typeof pkg.pi === 'object') {
+                // When a pi manifest exists, it is authoritative — don't fall through
+                // to index.ts/index.js auto-detection. This allows library directories
+                // (like cmux) to opt out by declaring "pi": {} with no extensions.
+                const declared = pkg.pi.extensions;
+                if (!Array.isArray(declared) || declared.length === 0) {
+                    return [];
+                }
+                return declared
                     .filter((entry) => typeof entry === 'string')
                     .map((entry) => resolve(dir, entry))
                     .filter((entry) => existsSync(entry));
-                if (resolved.length > 0) {
-                    return resolved;
-                }
             }
         }
         catch {

package/dist/extension-registry.js

@@ -6,7 +6,7 @@
  * The only way an extension stops loading is an explicit `gsd extensions disable <id>`.
  */
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { appRoot } from "./app-paths.js";
 import { dirname, join } from "node:path";
 // ─── Validation ─────────────────────────────────────────────────────────────
 function isRegistry(data) {
@@ -26,7 +26,7 @@ function isManifest(data) {
 }
 // ─── Registry Path ──────────────────────────────────────────────────────────
 export function getRegistryPath() {
-    return join(homedir(), ".gsd", "extensions", "registry.json");
+    return join(appRoot, "extensions", "registry.json");
 }
 // ─── Registry I/O ───────────────────────────────────────────────────────────
 function defaultRegistry() {

package/dist/remote-questions-config.js

@@ -9,12 +9,12 @@
  */
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { homedir } from "node:os";
+import { appRoot } from "./app-paths.js";
 // Inlined from preferences.ts to avoid crossing the compiled/uncompiled
 // boundary — this file is compiled by tsc, but preferences.ts is loaded
 // via jiti at runtime. Importing it as .js fails because no .js exists
 // in dist/. See #592, #1110.
-const GLOBAL_PREFERENCES_PATH = join(homedir(), ".gsd", "preferences.md");
+const GLOBAL_PREFERENCES_PATH = join(appRoot, "preferences.md");
 export function saveRemoteQuestionsConfig(channel, channelId) {
     const prefsPath = GLOBAL_PREFERENCES_PATH;
     const block = [

package/dist/resource-loader.js

@@ -1,7 +1,7 @@
 import { DefaultResourceLoader } from '@gsd/pi-coding-agent';
 import { createHash } from 'node:crypto';
 import { homedir } from 'node:os';
-import { chmodSync, copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { chmodSync, copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, readdirSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from 'node:fs';
 import { dirname, join, relative, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { compareSemver } from './update-check.js';
@@ -48,10 +48,22 @@ function getBundledGsdVersion() {
     }
 }
 function writeManagedResourceManifest(agentDir) {
+    // Record root-level files currently in the bundled extensions source so that
+    // future upgrades can detect and prune any that get removed or moved.
+    let installedExtensionRootFiles = [];
+    try {
+        if (existsSync(bundledExtensionsDir)) {
+            installedExtensionRootFiles = readdirSync(bundledExtensionsDir, { withFileTypes: true })
+                .filter(e => e.isFile())
+                .map(e => e.name);
+        }
+    }
+    catch { /* non-fatal */ }
     const manifest = {
         gsdVersion: getBundledGsdVersion(),
         syncedAt: Date.now(),
         contentHash: computeResourceFingerprint(),
+        installedExtensionRootFiles,
     };
     writeFileSync(getManagedResourceManifestPath(agentDir), JSON.stringify(manifest));
 }
@@ -217,6 +229,82 @@ function copyDirRecursive(src, dest) {
         }
     }
 }
+/**
+ * Creates (or updates) a symlink at agentDir/node_modules pointing to GSD's
+ * own node_modules directory.
+ *
+ * Native ESM `import()` ignores NODE_PATH — it resolves packages by walking
+ * up the directory tree from the importing file. Extension files synced to
+ * ~/.gsd/agent/extensions/ have no ancestor node_modules, so imports of
+ * @gsd/* packages fail. The symlink makes Node's standard resolution find
+ * them without requiring every call site to use jiti.
+ */
+function ensureNodeModulesSymlink(agentDir) {
+    const agentNodeModules = join(agentDir, 'node_modules');
+    const gsdNodeModules = join(packageRoot, 'node_modules');
+    try {
+        const existing = readlinkSync(agentNodeModules);
+        if (existing === gsdNodeModules)
+            return; // already correct
+        unlinkSync(agentNodeModules);
+    }
+    catch {
+        // readlinkSync throws if path doesn't exist or isn't a symlink — both are fine
+    }
+    try {
+        symlinkSync(gsdNodeModules, agentNodeModules, 'junction');
+    }
+    catch {
+        // Non-fatal — worst case, extensions fall back to NODE_PATH via jiti
+    }
+}
+/**
+ * Prune root-level extension files that were installed by a previous GSD version
+ * but have since been removed or relocated to a subdirectory.
+ *
+ * Two strategies:
+ * 1. Manifest-based (preferred): the manifest records which root files were installed
+ *    last time; any that are no longer in the current bundle are deleted.
+ * 2. Known-stale fallback: for upgrades from versions before manifest tracking,
+ *    explicitly delete files known to have been moved (e.g. env-utils.js → gsd/).
+ */
+function pruneRemovedBundledExtensions(manifest, agentDir) {
+    const extensionsDir = join(agentDir, 'extensions');
+    if (!existsSync(extensionsDir))
+        return;
+    // Current bundled root-level files (what the new version provides)
+    const currentSourceFiles = new Set();
+    try {
+        if (existsSync(bundledExtensionsDir)) {
+            for (const e of readdirSync(bundledExtensionsDir, { withFileTypes: true })) {
+                if (e.isFile())
+                    currentSourceFiles.add(e.name);
+            }
+        }
+    }
+    catch { /* non-fatal */ }
+    const removeIfStale = (fileName) => {
+        if (currentSourceFiles.has(fileName))
+            return; // still in bundle, not stale
+        const stale = join(extensionsDir, fileName);
+        try {
+            if (existsSync(stale))
+                rmSync(stale, { force: true });
+        }
+        catch { /* non-fatal */ }
+    };
+    if (manifest?.installedExtensionRootFiles) {
+        // Manifest-based: remove previously-installed root files that are no longer bundled
+        for (const prevFile of manifest.installedExtensionRootFiles) {
+            removeIfStale(prevFile);
+        }
+    }
+    else {
+        // Fallback: explicitly remove known stale files from pre-manifest-tracking versions
+        // env-utils.js was moved from extensions/ root → gsd/ in v2.39.x (#1634)
+        removeIfStale('env-utils.js');
+    }
+}
 /**
  * Syncs all bundled resources to agentDir (~/.gsd/agent/) on every launch.
  *
@@ -234,11 +322,16 @@ function copyDirRecursive(src, dest) {
  */
 export function initResources(agentDir) {
     mkdirSync(agentDir, { recursive: true });
+    const currentVersion = getBundledGsdVersion();
+    const manifest = readManagedResourceManifest(agentDir);
+    // Always prune root-level extension files that were removed from the bundle.
+    // This is cheap (a few existence checks + at most one rmSync) and must run
+    // unconditionally so that stale files left by a previous version are cleaned
+    // up even when the version/hash match causes the full sync to be skipped.
+    pruneRemovedBundledExtensions(manifest, agentDir);
     // Skip the full copy when both version AND content fingerprint match.
     // Version-only checks miss same-version content changes (npm link dev workflow,
     // hotfixes within a release). The content hash catches those at ~1ms cost.
-    const currentVersion = getBundledGsdVersion();
-    const manifest = readManagedResourceManifest(agentDir);
     if (manifest && manifest.gsdVersion === currentVersion) {
         // Version matches — check content fingerprint for same-version staleness.
         const currentHash = computeResourceFingerprint();
@@ -262,6 +355,10 @@ export function initResources(agentDir) {
     // Ensure all newly copied files are owner-writable so the next run can
     // overwrite them (covers extensions, agents, and skills in one walk).
     makeTreeWritable(agentDir);
+    // Ensure ~/.gsd/agent/node_modules symlinks to GSD's node_modules so that
+    // native ESM import() calls from synced extension files can resolve @gsd/*
+    // packages via ancestor directory lookup. NODE_PATH only applies to CJS/jiti.
+    ensureNodeModulesSymlink(agentDir);
     writeManagedResourceManifest(agentDir);
     ensureRegistryEntries(join(agentDir, 'extensions'));
 }

package/dist/resources/extensions/async-jobs/index.js

@@ -64,6 +64,16 @@ export default function AsyncJobs(pi) {
             },
         });
     });
+    pi.on("session_before_switch", async () => {
+        if (manager) {
+            // Cancel all running background jobs — their results are no longer
+            // relevant to the new session and would produce wasteful follow-up
+            // notifications that trigger empty LLM turns (#1642).
+            for (const job of manager.getRunningJobs()) {
+                manager.cancel(job.id);
+            }
+        }
+    });
     pi.on("session_shutdown", async () => {
         if (manager) {
             manager.shutdown();

package/dist/resources/extensions/browser-tools/index.js

@@ -4,7 +4,7 @@ let registrationPromise = null;
 async function registerBrowserTools(pi) {
     if (!registrationPromise) {
         registrationPromise = (async () => {
-            const [lifecycle, capture, settle, refs, utils, navigation, screenshot, interaction, inspection, session, assertions, refTools, wait, pages, forms, intent, pdf, statePersistence, networkMock, device, extract, visualDiff, zoom, codegen, actionCache, injectionDetection,] = await Promise.all([
+            const [lifecycle, capture, settle, refs, utils, navigation, screenshot, interaction, inspection, session, assertions, refTools, wait, pages, forms, intent, pdf, statePersistence, networkMock, device, extract, visualDiff, zoom, codegen, actionCache, injectionDetection, verify,] = await Promise.all([
                 importExtensionModule(import.meta.url, "./lifecycle.js"),
                 importExtensionModule(import.meta.url, "./capture.js"),
                 importExtensionModule(import.meta.url, "./settle.js"),
@@ -31,6 +31,7 @@ async function registerBrowserTools(pi) {
                 importExtensionModule(import.meta.url, "./tools/codegen.js"),
                 importExtensionModule(import.meta.url, "./tools/action-cache.js"),
                 importExtensionModule(import.meta.url, "./tools/injection-detect.js"),
+                importExtensionModule(import.meta.url, "./tools/verify.js"),
             ]);
             const deps = {
                 ensureBrowser: lifecycle.ensureBrowser,
@@ -99,6 +100,7 @@ async function registerBrowserTools(pi) {
             codegen.registerCodegenTools(pi, deps);
             actionCache.registerActionCacheTools(pi, deps);
             injectionDetection.registerInjectionDetectionTools(pi, deps);
+            verify.registerVerifyTools(pi, deps);
         })().catch((error) => {
             registrationPromise = null;
             throw error;

package/dist/resources/extensions/browser-tools/package.json

@@ -7,7 +7,9 @@
     "test": "node --test tests/*.test.mjs"
   },
   "pi": {
-    "extensions": ["./index.ts"]
+    "extensions": [
+      "./index.js"
+    ]
   },
   "peerDependencies": {
     "playwright": ">=1.40.0",

package/dist/resources/extensions/browser-tools/tools/verify.js

@@ -0,0 +1,97 @@
+import { Type } from "@sinclair/typebox";
+export function registerVerifyTools(pi, deps) {
+    pi.registerTool({
+        name: "browser_verify",
+        label: "Browser Verify",
+        description: "Run a structured browser verification flow: navigate to a URL, run checks (element visibility, text content), capture screenshots as evidence, and return structured pass/fail results.",
+        promptGuidelines: [
+            "Use browser_verify for UAT verification flows that need structured evidence.",
+            "Each check produces a pass/fail result with captured evidence.",
+            "Prefer this over manual navigation + assertion sequences for verification tasks.",
+        ],
+        parameters: Type.Object({
+            url: Type.String({ description: "URL to navigate to" }),
+            checks: Type.Array(Type.Object({
+                description: Type.String({ description: "What this check verifies" }),
+                selector: Type.Optional(Type.String({ description: "CSS selector to check" })),
+                expectedText: Type.Optional(Type.String({ description: "Expected text content" })),
+                expectedVisible: Type.Optional(Type.Boolean({ description: "Whether element should be visible" })),
+                screenshot: Type.Optional(Type.Boolean({ description: "Capture screenshot as evidence" })),
+            }), { description: "Verification checks to run" }),
+            timeout: Type.Optional(Type.Number({ description: "Navigation timeout in ms", default: 10000 })),
+        }),
+        async execute(_toolCallId, params, _signal, _onUpdate, _ctx) {
+            const startTime = Date.now();
+            const { page } = await deps.ensureBrowser();
+            const timeout = params.timeout ?? 10000;
+            try {
+                await page.goto(params.url, { waitUntil: "domcontentloaded", timeout });
+            }
+            catch (navErr) {
+                const msg = navErr instanceof Error ? navErr.message : String(navErr);
+                return {
+                    content: [{ type: "text", text: `Navigation failed: ${msg}` }],
+                    details: {
+                        url: params.url,
+                        passed: false,
+                        checks: params.checks.map((c) => ({ description: c.description, passed: false, error: msg })),
+                        duration: Date.now() - startTime,
+                    },
+                };
+            }
+            const results = [];
+            for (const check of params.checks) {
+                try {
+                    let passed = true;
+                    let actual;
+                    let evidence;
+                    if (check.selector) {
+                        const element = await page.$(check.selector);
+                        if (check.expectedVisible !== undefined) {
+                            const isVisible = element ? await element.isVisible() : false;
+                            passed = isVisible === check.expectedVisible;
+                            actual = `visible=${isVisible}`;
+                        }
+                        if (check.expectedText !== undefined && element) {
+                            const text = await element.textContent();
+                            passed = passed && (text?.includes(check.expectedText) ?? false);
+                            actual = `text="${text?.slice(0, 200)}"`;
+                        }
+                        if (!element && (check.expectedVisible === true || check.expectedText)) {
+                            passed = false;
+                            actual = "element not found";
+                        }
+                    }
+                    if (check.screenshot) {
+                        try {
+                            const buf = await page.screenshot({ type: "png" });
+                            evidence = `screenshot captured (${buf.length} bytes)`;
+                        }
+                        catch {
+                            evidence = "screenshot failed";
+                        }
+                    }
+                    results.push({ description: check.description, passed, actual, evidence });
+                }
+                catch (checkErr) {
+                    results.push({
+                        description: check.description,
+                        passed: false,
+                        error: checkErr instanceof Error ? checkErr.message : String(checkErr),
+                    });
+                }
+            }
+            const allPassed = results.every((r) => r.passed);
+            const summary = results.map((r) => `${r.passed ? "PASS" : "FAIL"}: ${r.description}${r.actual ? ` (${r.actual})` : ""}${r.error ? ` — ${r.error}` : ""}`).join("\n");
+            return {
+                content: [{ type: "text", text: `Verification ${allPassed ? "PASSED" : "FAILED"} (${results.filter(r => r.passed).length}/${results.length})\n\n${summary}` }],
+                details: {
+                    url: params.url,
+                    passed: allPassed,
+                    checks: results,
+                    duration: Date.now() - startTime,
+                },
+            };
+        },
+    });
+}

package/dist/resources/extensions/cmux/index.js

@@ -237,11 +237,14 @@ export class CmuxClient {
         return extractSurfaceIds(parsed);
     }
     async createSplit(direction) {
+        return this.createSplitFrom(this.config.surfaceId, direction);
+    }
+    async createSplitFrom(sourceSurfaceId, direction) {
         if (!this.config.splits)
             return null;
         const before = new Set(await this.listSurfaceIds());
         const args = ["new-split", direction];
-        const scopedArgs = this.appendSurface(this.appendWorkspace(args), this.config.surfaceId);
+        const scopedArgs = this.appendSurface(this.appendWorkspace(args), sourceSurfaceId);
         await this.runAsync(scopedArgs);
         const after = await this.listSurfaceIds();
         for (const id of after) {
@@ -250,6 +253,57 @@ export class CmuxClient {
         }
         return null;
     }
+    /**
+     * Create a grid of surfaces for parallel agent execution.
+     *
+     * Layout strategy (gsd stays in the original surface):
+     *   1 agent:  [gsd | A]
+     *   2 agents: [gsd | A]
+     *             [    | B]
+     *   3 agents: [gsd | A]
+     *             [ C  | B]
+     *   4 agents: [gsd | A]
+     *             [ C  | B]  (D splits from B downward)
+     *             [    | D]
+     *
+     * Returns surface IDs in order, or empty array on failure.
+     */
+    async createGridLayout(count) {
+        if (!this.config.splits || count <= 0)
+            return [];
+        const surfaces = [];
+        // First split: create right column from the gsd surface
+        const rightCol = await this.createSplitFrom(this.config.surfaceId, "right");
+        if (!rightCol)
+            return [];
+        surfaces.push(rightCol);
+        if (count === 1)
+            return surfaces;
+        // Second split: split right column down → bottom-right
+        const bottomRight = await this.createSplitFrom(rightCol, "down");
+        if (!bottomRight)
+            return surfaces;
+        surfaces.push(bottomRight);
+        if (count === 2)
+            return surfaces;
+        // Third split: split gsd surface down → bottom-left
+        const bottomLeft = await this.createSplitFrom(this.config.surfaceId, "down");
+        if (!bottomLeft)
+            return surfaces;
+        surfaces.push(bottomLeft);
+        if (count === 3)
+            return surfaces;
+        // Fourth+: split subsequent surfaces down from the last created
+        let lastSurface = bottomRight;
+        for (let i = 3; i < count; i++) {
+            const next = await this.createSplitFrom(lastSurface, "down");
+            if (!next)
+                break;
+            surfaces.push(next);
+            lastSurface = next;
+        }
+        return surfaces;
+    }
     async sendSurface(surfaceId, text) {
         const payload = text.endsWith("\n") ? text : `${text}\n`;
         const stdout = await this.runAsync(["send-surface", "--surface", surfaceId, payload]);

package/dist/resources/extensions/context7/package.json

@@ -5,7 +5,7 @@
   "type": "module",
   "pi": {
     "extensions": [
-      "./index.ts"
+      "./index.js"
     ]
   }
 }

package/dist/resources/extensions/get-secrets-from-user.js

@@ -46,30 +46,11 @@ async function writeEnvKey(filePath, key, value) {
     await writeFile(filePath, content, "utf8");
 }
 // ─── Exported utilities ───────────────────────────────────────────────────────
-/**
- * Check which keys already exist in the .env file or process.env.
- * Returns the subset of `keys` that are already set.
- * Handles ENOENT gracefully (still checks process.env).
- * Empty-string values count as existing.
- */
-export async function checkExistingEnvKeys(keys, envFilePath) {
-    let fileContent = "";
-    try {
-        fileContent = await readFile(envFilePath, "utf8");
-    }
-    catch {
-        // ENOENT or other read error — proceed with empty content
-    }
-    const existing = [];
-    for (const key of keys) {
-        const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-        const regex = new RegExp(`^${escaped}\\s*=`, "m");
-        if (regex.test(fileContent) || key in process.env) {
-            existing.push(key);
-        }
-    }
-    return existing;
-}
+// Re-export from env-utils.ts so existing consumers still work.
+// The implementation lives in env-utils.ts to avoid pulling @gsd/pi-tui
+// into modules that only need env-checking (e.g. files.ts during reports).
+import { checkExistingEnvKeys } from "./gsd/env-utils.js";
+export { checkExistingEnvKeys };
 /**
  * Detect the write destination based on project files in basePath.
  * Priority: vercel.json → convex/ dir → fallback "dotenv".