gsd-pi 2.51.0 → 2.52.0-dev.655ad8a

package/dist/resources/extensions/gsd/tools/reassess-roadmap.js

@@ -1,14 +1,13 @@
+import { join } from "node:path";
 import { clearParseCache } from "../files.js";
+import { isClosedStatus } from "../status-guards.js";
+import { isNonEmptyString } from "../validation.js";
 import { transaction, getMilestone, getMilestoneSlices, getSlice, insertSlice, updateSliceFields, insertAssessment, deleteSlice, } from "../gsd-db.js";
 import { invalidateStateCache } from "../state.js";
 import { renderRoadmapFromDb, renderAssessmentFromDb } from "../markdown-renderer.js";
 import { renderAllProjections } from "../workflow-projections.js";
 import { writeManifest } from "../workflow-manifest.js";
 import { appendEvent } from "../workflow-events.js";
-import { join } from "node:path";
-function isNonEmptyString(value) {
-    return typeof value === "string" && value.trim().length > 0;
-}
 function validateParams(params) {
     if (!isNonEmptyString(params?.milestoneId))
         throw new Error("milestoneId is required");
@@ -61,48 +60,55 @@ export async function handleReassessRoadmap(rawParams, basePath) {
     catch (err) {
         return { error: `validation failed: ${err.message}` };
     }
-    // ── Verify milestone exists and is active ────────────────────────
-    const milestone = getMilestone(params.milestoneId);
-    if (!milestone) {
-        return { error: `milestone not found: ${params.milestoneId}` };
-    }
-    if (milestone.status === "complete" || milestone.status === "done") {
-        return { error: `cannot reassess a closed milestone: ${params.milestoneId} (status: ${milestone.status})` };
-    }
-    // ── Verify completedSliceId is actually complete ──────────────────
-    const completedSlice = getSlice(params.milestoneId, params.completedSliceId);
-    if (!completedSlice) {
-        return { error: `completedSliceId not found: ${params.milestoneId}/${params.completedSliceId}` };
-    }
-    if (completedSlice.status !== "complete" && completedSlice.status !== "done") {
-        return { error: `completedSliceId ${params.completedSliceId} is not complete (status: ${completedSlice.status}) — reassess can only be called after a slice finishes` };
-    }
-    // ── Structural enforcement ────────────────────────────────────────
-    const existingSlices = getMilestoneSlices(params.milestoneId);
-    const completedSliceIds = new Set();
-    for (const slice of existingSlices) {
-        if (slice.status === "complete" || slice.status === "done") {
-            completedSliceIds.add(slice.id);
-        }
-    }
-    // Reject modifications to completed slices
-    for (const modifiedSlice of params.sliceChanges.modified) {
-        if (completedSliceIds.has(modifiedSlice.sliceId)) {
-            return { error: `cannot modify completed slice ${modifiedSlice.sliceId}` };
-        }
-    }
-    // Reject removal of completed slices
-    for (const removedId of params.sliceChanges.removed) {
-        if (completedSliceIds.has(removedId)) {
-            return { error: `cannot remove completed slice ${removedId}` };
-        }
-    }
     // ── Compute assessment artifact path ──────────────────────────────
     // Assessment lives in the completed slice's directory
     const assessmentRelPath = join(".gsd", "milestones", params.milestoneId, "slices", params.completedSliceId, `${params.completedSliceId}-ASSESSMENT.md`);
-    // ── Transaction: DB mutations ─────────────────────────────────────
+    // ── Guards + DB writes inside a single transaction (prevents TOCTOU) ───
+    // Guards must be inside the transaction so the state they check cannot
+    // change between the read and the write (#2723).
+    let guardError = null;
     try {
         transaction(() => {
+            // Verify milestone exists and is active
+            const milestone = getMilestone(params.milestoneId);
+            if (!milestone) {
+                guardError = `milestone not found: ${params.milestoneId}`;
+                return;
+            }
+            if (isClosedStatus(milestone.status)) {
+                guardError = `cannot reassess a closed milestone: ${params.milestoneId} (status: ${milestone.status})`;
+                return;
+            }
+            // Verify completedSliceId is actually complete
+            const completedSlice = getSlice(params.milestoneId, params.completedSliceId);
+            if (!completedSlice) {
+                guardError = `completedSliceId not found: ${params.milestoneId}/${params.completedSliceId}`;
+                return;
+            }
+            if (!isClosedStatus(completedSlice.status)) {
+                guardError = `completedSliceId ${params.completedSliceId} is not complete (status: ${completedSlice.status}) — reassess can only be called after a slice finishes`;
+                return;
+            }
+            // Structural enforcement — reject modifications/removal of completed slices
+            const existingSlices = getMilestoneSlices(params.milestoneId);
+            const completedSliceIds = new Set();
+            for (const slice of existingSlices) {
+                if (isClosedStatus(slice.status)) {
+                    completedSliceIds.add(slice.id);
+                }
+            }
+            for (const modifiedSlice of params.sliceChanges.modified) {
+                if (completedSliceIds.has(modifiedSlice.sliceId)) {
+                    guardError = `cannot modify completed slice ${modifiedSlice.sliceId}`;
+                    return;
+                }
+            }
+            for (const removedId of params.sliceChanges.removed) {
+                if (completedSliceIds.has(removedId)) {
+                    guardError = `cannot remove completed slice ${removedId}`;
+                    return;
+                }
+            }
             // Record assessment
             insertAssessment({
                 path: assessmentRelPath,
@@ -142,6 +148,9 @@ export async function handleReassessRoadmap(rawParams, basePath) {
     catch (err) {
         return { error: `db write failed: ${err.message}` };
     }
+    if (guardError) {
+        return { error: guardError };
+    }
     // ── Render artifacts ──────────────────────────────────────────────
     try {
         const roadmapResult = await renderRoadmapFromDb(basePath, params.milestoneId);

package/dist/resources/extensions/gsd/tools/reopen-slice.js

@@ -11,6 +11,7 @@
 // Copyright (c) 2026 Jeremy McSpadden <jeremy@fluxlabs.net>
 import { getMilestone, getSlice, getSliceTasks, updateSliceStatus, updateTaskStatus, transaction, } from "../gsd-db.js";
 import { invalidateStateCache } from "../state.js";
+import { isClosedStatus } from "../status-guards.js";
 import { renderAllProjections } from "../workflow-projections.js";
 import { writeManifest } from "../workflow-manifest.js";
 import { appendEvent } from "../workflow-events.js";
@@ -31,8 +32,8 @@ export async function handleReopenSlice(params, basePath) {
             guardError = `milestone not found: ${params.milestoneId}`;
             return;
         }
-        if (milestone.status === "complete" || milestone.status === "done") {
-            guardError = `cannot reopen slice inside a closed milestone: ${params.milestoneId} (status: ${milestone.status})`;
+        if (isClosedStatus(milestone.status)) {
+            guardError = `cannot reopen slice in a closed milestone: ${params.milestoneId} (status: ${milestone.status})`;
             return;
         }
         const slice = getSlice(params.milestoneId, params.sliceId);
@@ -40,7 +41,7 @@ export async function handleReopenSlice(params, basePath) {
             guardError = `slice not found: ${params.milestoneId}/${params.sliceId}`;
             return;
         }
-        if (slice.status !== "complete" && slice.status !== "done") {
+        if (!isClosedStatus(slice.status)) {
             guardError = `slice ${params.sliceId} is not complete (status: ${slice.status}) — nothing to reopen`;
             return;
         }

package/dist/resources/extensions/gsd/tools/reopen-task.js

@@ -10,6 +10,7 @@
 // Copyright (c) 2026 Jeremy McSpadden <jeremy@fluxlabs.net>
 import { getMilestone, getSlice, getTask, updateTaskStatus, transaction, } from "../gsd-db.js";
 import { invalidateStateCache } from "../state.js";
+import { isClosedStatus } from "../status-guards.js";
 import { renderAllProjections } from "../workflow-projections.js";
 import { writeManifest } from "../workflow-manifest.js";
 import { appendEvent } from "../workflow-events.js";
@@ -32,7 +33,7 @@ export async function handleReopenTask(params, basePath) {
             guardError = `milestone not found: ${params.milestoneId}`;
             return;
         }
-        if (milestone.status === "complete" || milestone.status === "done") {
+        if (isClosedStatus(milestone.status)) {
             guardError = `cannot reopen task in a closed milestone: ${params.milestoneId} (status: ${milestone.status})`;
             return;
         }
@@ -41,8 +42,8 @@ export async function handleReopenTask(params, basePath) {
             guardError = `slice not found: ${params.milestoneId}/${params.sliceId}`;
             return;
         }
-        if (slice.status === "complete" || slice.status === "done") {
-            guardError = `cannot reopen task inside a closed slice: ${params.sliceId} (status: ${slice.status}) — use gsd_slice_reopen first`;
+        if (isClosedStatus(slice.status)) {
+            guardError = `cannot reopen task in a closed slice: ${params.sliceId} (status: ${slice.status}) — use gsd_slice_reopen first`;
             return;
         }
         const task = getTask(params.milestoneId, params.sliceId, params.taskId);
@@ -50,7 +51,7 @@ export async function handleReopenTask(params, basePath) {
             guardError = `task not found: ${params.milestoneId}/${params.sliceId}/${params.taskId}`;
             return;
         }
-        if (task.status !== "complete" && task.status !== "done") {
+        if (!isClosedStatus(task.status)) {
             guardError = `task ${params.taskId} is not complete (status: ${task.status}) — nothing to reopen`;
             return;
         }

package/dist/resources/extensions/gsd/tools/replan-slice.js

@@ -1,13 +1,12 @@
 import { clearParseCache } from "../files.js";
 import { transaction, getSlice, getSliceTasks, getTask, insertTask, upsertTaskPlanning, insertReplanHistory, deleteTask, } from "../gsd-db.js";
 import { invalidateStateCache } from "../state.js";
+import { isClosedStatus } from "../status-guards.js";
+import { isNonEmptyString } from "../validation.js";
 import { renderPlanFromDb, renderReplanFromDb } from "../markdown-renderer.js";
 import { renderAllProjections } from "../workflow-projections.js";
 import { writeManifest } from "../workflow-manifest.js";
 import { appendEvent } from "../workflow-events.js";
-function isNonEmptyString(value) {
-    return typeof value === "string" && value.trim().length > 0;
-}
 function validateParams(params) {
     if (!isNonEmptyString(params?.milestoneId))
         throw new Error("milestoneId is required");
@@ -46,46 +45,54 @@ export async function handleReplanSlice(rawParams, basePath) {
     catch (err) {
         return { error: `validation failed: ${err.message}` };
     }
-    // ── Verify parent slice exists and is not closed ─────────────────
-    const parentSlice = getSlice(params.milestoneId, params.sliceId);
-    if (!parentSlice) {
-        return { error: `missing parent slice: ${params.milestoneId}/${params.sliceId}` };
-    }
-    if (parentSlice.status === "complete" || parentSlice.status === "done") {
-        return { error: `cannot replan a closed slice: ${params.sliceId} (status: ${parentSlice.status})` };
-    }
-    // ── Verify blocker task exists and is complete ────────────────────
-    const blockerTask = getTask(params.milestoneId, params.sliceId, params.blockerTaskId);
-    if (!blockerTask) {
-        return { error: `blockerTaskId not found: ${params.milestoneId}/${params.sliceId}/${params.blockerTaskId}` };
-    }
-    if (blockerTask.status !== "complete" && blockerTask.status !== "done") {
-        return { error: `blockerTaskId ${params.blockerTaskId} is not complete (status: ${blockerTask.status}) — the blocker task must be finished before a replan is triggered` };
-    }
-    // ── Structural enforcement ────────────────────────────────────────
-    const existingTasks = getSliceTasks(params.milestoneId, params.sliceId);
-    const completedTaskIds = new Set();
-    for (const task of existingTasks) {
-        if (task.status === "complete" || task.status === "done") {
-            completedTaskIds.add(task.id);
-        }
-    }
-    // Reject updates to completed tasks
-    for (const updatedTask of params.updatedTasks) {
-        if (completedTaskIds.has(updatedTask.taskId)) {
-            return { error: `cannot modify completed task ${updatedTask.taskId}` };
-        }
-    }
-    // Reject removal of completed tasks
-    for (const removedId of params.removedTaskIds) {
-        if (completedTaskIds.has(removedId)) {
-            return { error: `cannot remove completed task ${removedId}` };
-        }
-    }
-    // ── Transaction: DB mutations ─────────────────────────────────────
-    const existingTaskIds = new Set(existingTasks.map((t) => t.id));
+    // ── Guards + DB writes inside a single transaction (prevents TOCTOU) ───
+    // Guards must be inside the transaction so the state they check cannot
+    // change between the read and the write (#2723).
+    let guardError = null;
+    let existingTaskIds = new Set();
     try {
         transaction(() => {
+            // Verify parent slice exists and is not closed
+            const parentSlice = getSlice(params.milestoneId, params.sliceId);
+            if (!parentSlice) {
+                guardError = `missing parent slice: ${params.milestoneId}/${params.sliceId}`;
+                return;
+            }
+            if (isClosedStatus(parentSlice.status)) {
+                guardError = `cannot replan a closed slice: ${params.sliceId} (status: ${parentSlice.status})`;
+                return;
+            }
+            // Verify blocker task exists and is complete
+            const blockerTask = getTask(params.milestoneId, params.sliceId, params.blockerTaskId);
+            if (!blockerTask) {
+                guardError = `blockerTaskId not found: ${params.milestoneId}/${params.sliceId}/${params.blockerTaskId}`;
+                return;
+            }
+            if (!isClosedStatus(blockerTask.status)) {
+                guardError = `blockerTaskId ${params.blockerTaskId} is not complete (status: ${blockerTask.status}) — the blocker task must be finished before a replan is triggered`;
+                return;
+            }
+            // Structural enforcement — reject modifications/removal of completed tasks
+            const existingTasks = getSliceTasks(params.milestoneId, params.sliceId);
+            const completedTaskIds = new Set();
+            for (const task of existingTasks) {
+                if (isClosedStatus(task.status)) {
+                    completedTaskIds.add(task.id);
+                }
+            }
+            for (const updatedTask of params.updatedTasks) {
+                if (completedTaskIds.has(updatedTask.taskId)) {
+                    guardError = `cannot modify completed task ${updatedTask.taskId}`;
+                    return;
+                }
+            }
+            for (const removedId of params.removedTaskIds) {
+                if (completedTaskIds.has(removedId)) {
+                    guardError = `cannot remove completed task ${removedId}`;
+                    return;
+                }
+            }
+            existingTaskIds = new Set(existingTasks.map((t) => t.id));
             // Record replan history
             insertReplanHistory({
                 milestoneId: params.milestoneId,
@@ -138,6 +145,9 @@ export async function handleReplanSlice(rawParams, basePath) {
     catch (err) {
         return { error: `db write failed: ${err.message}` };
     }
+    if (guardError) {
+        return { error: guardError };
+    }
     // ── Render artifacts ──────────────────────────────────────────────
     try {
         const renderResult = await renderPlanFromDb(basePath, params.milestoneId, params.sliceId);

package/dist/resources/extensions/gsd/tools/validate-milestone.js

@@ -5,7 +5,7 @@
  * renders VALIDATION.md to disk, and invalidates caches.
  */
 import { join } from "node:path";
-import { transaction, _getAdapter, } from "../gsd-db.js";
+import { transaction, insertAssessment, deleteAssessmentByScope, } from "../gsd-db.js";
 import { resolveMilestonePath, clearPathCache } from "../paths.js";
 import { saveFile, clearParseCache } from "../files.js";
 import { invalidateStateCache } from "../state.js";
@@ -45,7 +45,7 @@ export async function handleValidateMilestone(params, basePath) {
     if (!isValidMilestoneVerdict(params.verdict)) {
         return { error: `verdict must be one of: ${VALIDATION_VERDICTS.join(", ")}` };
     }
-    // ── Filesystem render ──────────────────────────────────────────────────
+    // ── Resolve paths and render markdown ────────────────────────────────
     const validationMd = renderValidationMarkdown(params);
     let validationPath;
     const milestoneDir = resolveMilestonePath(basePath, params.milestoneId);
@@ -57,26 +57,33 @@ export async function handleValidateMilestone(params, basePath) {
         const manualDir = join(gsdDir, "milestones", params.milestoneId);
         validationPath = join(manualDir, `${params.milestoneId}-VALIDATION.md`);
     }
+    // ── DB write first — matches complete-task/complete-slice pattern ───
+    // Write DB before disk so a crash between the two leaves a recoverable
+    // state: the DB row exists but the file is missing, which projection
+    // rendering can regenerate. The inverse (file exists, no DB row) is
+    // harder to detect and recover from (#2725).
+    const validatedAt = new Date().toISOString();
+    transaction(() => {
+        insertAssessment({
+            path: validationPath,
+            milestoneId: params.milestoneId,
+            sliceId: null,
+            taskId: null,
+            status: params.verdict,
+            scope: 'milestone-validation',
+            fullContent: validationMd,
+        });
+    });
+    // ── Filesystem render (outside transaction) ────────────────────────────
+    // If disk render fails, roll back the DB row so state stays consistent.
     try {
         await saveFile(validationPath, validationMd);
     }
     catch (renderErr) {
-        process.stderr.write(`gsd-db: validate_milestone — disk render failed: ${renderErr.message}\n`);
+        process.stderr.write(`gsd-db: validate_milestone — disk render failed, rolling back DB row: ${renderErr.message}\n`);
+        deleteAssessmentByScope(params.milestoneId, 'milestone-validation');
         return { error: `disk render failed: ${renderErr.message}` };
     }
-    // ── DB write — store in assessments table ──────────────────────────────
-    const validatedAt = new Date().toISOString();
-    transaction(() => {
-        const adapter = _getAdapter();
-        adapter.prepare(`INSERT OR REPLACE INTO assessments (path, milestone_id, slice_id, task_id, status, scope, full_content, created_at)
-       VALUES (:path, :mid, NULL, NULL, :verdict, 'milestone-validation', :content, :created_at)`).run({
-            ":path": validationPath,
-            ":mid": params.milestoneId,
-            ":verdict": params.verdict,
-            ":content": validationMd,
-            ":created_at": validatedAt,
-        });
-    });
     invalidateStateCache();
     clearPathCache();
     clearParseCache();

package/dist/resources/extensions/gsd/validation.js

@@ -0,0 +1,21 @@
+/**
+ * Shared input-validation primitives for GSD tool handlers.
+ */
+/** Type guard: value is a string with at least one non-whitespace character. */
+export function isNonEmptyString(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+/**
+ * Validate that `value` is an array of non-empty strings.
+ * Throws with a message referencing `field` on failure.
+ * Returns the validated array (narrowed to string[]).
+ */
+export function validateStringArray(value, field) {
+    if (!Array.isArray(value)) {
+        throw new Error(`${field} must be an array`);
+    }
+    if (value.some((item) => !isNonEmptyString(item))) {
+        throw new Error(`${field} must contain only non-empty strings`);
+    }
+    return value;
+}

package/dist/resources/extensions/gsd/workflow-logger.js

@@ -158,7 +158,6 @@ export function readAuditLog(basePath) {
  */
 export function _resetLogs() {
     _buffer = [];
-    _auditBasePath = null;
 }
 // ─── Internal ───────────────────────────────────────────────────────────
 function _push(severity, component, message, context) {

package/dist/resources/extensions/remote-questions/config.js

@@ -43,7 +43,7 @@ function hydrateRemoteTokensFromAuth() {
         for (const [providerId, envVar] of needed) {
             try {
                 const creds = auth.getCredentialsForProvider(providerId);
-                const apiKeyCred = creds.find((c) => c.type === "api_key");
+                const apiKeyCred = creds.find((c) => c.type === "api_key" && !!c.key);
                 if (apiKeyCred?.key) {
                     process.env[envVar] = apiKeyCred.key;
                 }

package/dist/resources/extensions/remote-questions/remote-command.js

@@ -301,7 +301,7 @@ function saveProviderToken(provider, token) {
 }
 function removeProviderToken(provider) {
     const auth = getAuthStorage();
-    auth.set(provider, { type: "api_key", key: "" });
+    auth.remove(provider);
 }
 export function saveRemoteQuestionsConfig(channel, channelId) {
     const prefsPath = getGlobalGSDPreferencesPath();

package/dist/resources/extensions/search-the-web/native-search.js

@@ -22,7 +22,7 @@ const THINKING_TYPES = new Set(["thinking", "redacted_thinking"]);
 export const MAX_NATIVE_SEARCHES_PER_SESSION = 15;
 /** When true, skip native web search injection and keep Brave/custom tools active on Anthropic. */
 export function preferBraveSearch() {
-    // preferences.md takes priority over env var
+    // PREFERENCES.md takes priority over env var
     const prefsPref = resolveSearchProviderFromPreferences();
     if (prefsPref === "brave" || prefsPref === "tavily" || prefsPref === "ollama")
         return true;

package/dist/resources/extensions/search-the-web/provider.js

@@ -91,7 +91,7 @@ export function resolveSearchProvider(overridePreference) {
         pref = overridePreference;
     }
     else {
-        // preferences.md takes priority over auth.json
+        // PREFERENCES.md takes priority over auth.json
         const mdPref = resolveSearchProviderFromPreferences();
         if (mdPref && mdPref !== 'auto' && mdPref !== 'native') {
             pref = mdPref;

package/dist/resources/extensions/shared/rtk.js

@@ -4,6 +4,7 @@ import { homedir } from "node:os";
 import { delimiter, join } from "node:path";
 const GSD_RTK_PATH_ENV = "GSD_RTK_PATH";
 const GSD_RTK_DISABLED_ENV = "GSD_RTK_DISABLED";
+const GSD_RTK_REWRITE_TIMEOUT_MS_ENV = "GSD_RTK_REWRITE_TIMEOUT_MS";
 const RTK_TELEMETRY_DISABLED_ENV = "RTK_TELEMETRY_DISABLED";
 const RTK_REWRITE_TIMEOUT_MS = 5_000;
 function isTruthy(value) {
@@ -12,6 +13,13 @@ function isTruthy(value) {
     const normalized = value.trim().toLowerCase();
     return normalized === "1" || normalized === "true" || normalized === "yes";
 }
+function getRewriteTimeoutMs(env = process.env) {
+    const configured = Number.parseInt(env[GSD_RTK_REWRITE_TIMEOUT_MS_ENV] ?? "", 10);
+    if (Number.isFinite(configured) && configured > 0) {
+        return configured;
+    }
+    return RTK_REWRITE_TIMEOUT_MS;
+}
 export function isRtkEnabled(env = process.env) {
     return !isTruthy(env[GSD_RTK_DISABLED_ENV]);
 }
@@ -75,19 +83,21 @@ export function resolveRtkBinaryPath(options = {}) {
     }
     return resolveSystemRtkPath(options.pathValue ?? getPathValue(env), platform);
 }
-export function rewriteCommandWithRtk(command, env = process.env) {
+export function rewriteCommandWithRtk(command, options = {}) {
+    const env = options.env ?? process.env;
     if (!command.trim())
         return command;
     if (!isRtkEnabled(env))
         return command;
-    const binaryPath = resolveRtkBinaryPath({ env });
+    const binaryPath = options.binaryPath ?? resolveRtkBinaryPath({ env });
     if (!binaryPath)
         return command;
-    const result = spawnSync(binaryPath, ["rewrite", command], {
+    const run = options.spawnSyncImpl ?? spawnSync;
+    const result = run(binaryPath, ["rewrite", command], {
         encoding: "utf-8",
         env: buildRtkEnv(env),
         stdio: ["ignore", "pipe", "ignore"],
-        timeout: RTK_REWRITE_TIMEOUT_MS,
+        timeout: getRewriteTimeoutMs(env),
         // .cmd/.bat wrappers (used by fake-rtk in tests) require shell:true on Windows
         shell: /\.(cmd|bat)$/i.test(binaryPath),
     });

package/dist/rtk.js

@@ -175,7 +175,9 @@ function resolveSystemRtkPath(pathValue, platform = process.platform) {
 export function resolveRtkBinaryPath(options = {}) {
     const env = options.env ?? process.env;
     const platform = options.platform ?? process.platform;
-    const explicitPath = options.binaryPath ?? env[GSD_RTK_PATH_ENV];
+    if (options.binaryPath)
+        return options.binaryPath;
+    const explicitPath = env[GSD_RTK_PATH_ENV];
     if (explicitPath && existsSync(explicitPath)) {
         return explicitPath;
     }

package/dist/web/standalone/.next/BUILD_ID

@@ -1 +1 @@
-vkr67v-utm1dgZnbrBWQh
+zpvUPKoW5jRAMB_fWHlPi

package/dist/web/standalone/.next/app-path-routes-manifest.json

@@ -7,40 +7,40 @@
   "/api/bridge-terminal/stream/route": "/api/bridge-terminal/stream",
   "/api/cleanup/route": "/api/cleanup",
   "/api/dev-mode/route": "/api/dev-mode",
-  "/api/browse-directories/route": "/api/browse-directories",
   "/api/doctor/route": "/api/doctor",
-  "/api/forensics/route": "/api/forensics",
+  "/api/browse-directories/route": "/api/browse-directories",
+  "/api/captures/route": "/api/captures",
   "/api/export-data/route": "/api/export-data",
+  "/api/forensics/route": "/api/forensics",
   "/api/git/route": "/api/git",
   "/api/history/route": "/api/history",
   "/api/hooks/route": "/api/hooks",
-  "/api/captures/route": "/api/captures",
-  "/api/experimental/route": "/api/experimental",
+  "/api/knowledge/route": "/api/knowledge",
   "/api/inspect/route": "/api/inspect",
+  "/api/experimental/route": "/api/experimental",
   "/api/live-state/route": "/api/live-state",
-  "/api/knowledge/route": "/api/knowledge",
+  "/api/recovery/route": "/api/recovery",
   "/api/preferences/route": "/api/preferences",
   "/api/onboarding/route": "/api/onboarding",
-  "/api/recovery/route": "/api/recovery",
+  "/api/projects/route": "/api/projects",
   "/api/session/browser/route": "/api/session/browser",
   "/api/session/command/route": "/api/session/command",
-  "/api/projects/route": "/api/projects",
   "/api/session/events/route": "/api/session/events",
   "/api/settings-data/route": "/api/settings-data",
-  "/api/shutdown/route": "/api/shutdown",
   "/api/session/manage/route": "/api/session/manage",
+  "/api/shutdown/route": "/api/shutdown",
   "/api/skill-health/route": "/api/skill-health",
-  "/api/files/route": "/api/files",
   "/api/steer/route": "/api/steer",
   "/api/terminal/input/route": "/api/terminal/input",
   "/api/switch-root/route": "/api/switch-root",
+  "/api/files/route": "/api/files",
   "/api/terminal/sessions/route": "/api/terminal/sessions",
   "/api/terminal/resize/route": "/api/terminal/resize",
   "/api/terminal/stream/route": "/api/terminal/stream",
+  "/api/update/route": "/api/update",
   "/api/terminal/upload/route": "/api/terminal/upload",
   "/api/undo/route": "/api/undo",
-  "/api/visualizer/route": "/api/visualizer",
-  "/api/update/route": "/api/update",
   "/api/remote-questions/route": "/api/remote-questions",
+  "/api/visualizer/route": "/api/visualizer",
   "/page": "/"
 }

package/dist/web/standalone/.next/build-manifest.json

@@ -4,14 +4,14 @@
   ],
   "devFiles": [],
   "lowPriorityFiles": [
-    "static/vkr67v-utm1dgZnbrBWQh/_buildManifest.js",
-    "static/vkr67v-utm1dgZnbrBWQh/_ssgManifest.js"
+    "static/zpvUPKoW5jRAMB_fWHlPi/_buildManifest.js",
+    "static/zpvUPKoW5jRAMB_fWHlPi/_ssgManifest.js"
   ],
   "rootMainFiles": [
-    "static/chunks/webpack-cfc9a116e6450a6b.js",
+    "static/chunks/webpack-bca0e732db0dcec3.js",
     "static/chunks/4bd1b696-e5d7c65570c947b7.js",
     "static/chunks/3794-337d1ca25ad99a89.js",
-    "static/chunks/main-app-d3d4c336195465f9.js"
+    "static/chunks/main-app-fdab67f7802d7832.js"
   ],
   "rootMainFilesTree": {},
   "pages": {

package/dist/web/standalone/.next/prerender-manifest.json

@@ -78,8 +78,8 @@
   "dynamicRoutes": {},
   "notFoundRoutes": [],
   "preview": {
-    "previewModeId": "b61298246d79b42b7749981c03dc0542",
-    "previewModeSigningKey": "648629eaf5938315854d72091092d32f3d5093b54b90815a0c44c443455e784f",
-    "previewModeEncryptionKey": "3f28f25911f08381cfbf98a3ef7f4d14046c5641559a335142c43dea2bc03fde"
+    "previewModeId": "567cc67a2ad86cde21a94dfc040dc7eb",
+    "previewModeSigningKey": "a0bce4a185bd8d7efe69f5863d47e2100c6feefb312d0a9aaa4e0b0c30d594fe",
+    "previewModeEncryptionKey": "1d2b3722994b5f5e35c394d3845587cacae1b7c89c2bc2875ff4d2dd21d8880d"
   }
 }

package/dist/web/standalone/.next/react-loadable-manifest.json

@@ -6,7 +6,7 @@
       "static/chunks/363642f4.f9053a63f1b97508.js",
       "static/chunks/4986-c2fc8845ce785303.js",
       "static/chunks/2008.817d0885545aaea9.js",
-      "static/chunks/4024.9ad5def014d90ce4.js"
+      "static/chunks/4024.87fd909ae0110f50.js"
     ]
   },
   "components/gsd/chat-mode.tsx -> react-markdown": {

package/dist/web/standalone/.next/required-server-files.json

@@ -100,7 +100,7 @@
         "transform": "lodash/{{member}}"
       }
     },
-    "outputFileTracingRoot": "/home/runner/_work/gsd-2/gsd-2",
+    "outputFileTracingRoot": "/__w/gsd-2/gsd-2",
     "cacheComponents": false,
     "cacheLife": {
       "default": {
@@ -297,11 +297,11 @@
       "node-pty"
     ],
     "turbopack": {
-      "root": "/home/runner/_work/gsd-2/gsd-2"
+      "root": "/__w/gsd-2/gsd-2"
     },
     "distDirRoot": ".next"
   },
-  "appDir": "/home/runner/_work/gsd-2/gsd-2/web",
+  "appDir": "/__w/gsd-2/gsd-2/web",
   "relativeAppDir": "web",
   "files": [
     ".next/routes-manifest.json",