gsd-pi 2.69.0-dev.232905b → 2.69.0-dev.87298d1

package/src/resources/extensions/gsd/workflow-mcp.ts

@@ -1,7 +1,7 @@
 import { execSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { dirname, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import { fileURLToPath } from "node:url";
 
 export interface WorkflowMcpLaunchConfig {
   name: string;
@@ -21,35 +21,22 @@ export interface WorkflowCapabilityOptions {
 }
 
 const MCP_WORKFLOW_TOOL_SURFACE = new Set([
-  "ask_user_questions",
-  "gsd_decision_save",
   "gsd_complete_milestone",
   "gsd_complete_task",
   "gsd_complete_slice",
-  "gsd_generate_milestone_id",
-  "gsd_journal_query",
   "gsd_milestone_complete",
-  "gsd_milestone_generate_id",
   "gsd_milestone_status",
   "gsd_milestone_validate",
-  "gsd_plan_task",
   "gsd_plan_milestone",
   "gsd_plan_slice",
   "gsd_replan_slice",
   "gsd_reassess_roadmap",
-  "gsd_requirement_save",
-  "gsd_requirement_update",
   "gsd_roadmap_reassess",
-  "gsd_save_decision",
   "gsd_save_gate_result",
-  "gsd_save_requirement",
-  "gsd_skip_slice",
   "gsd_slice_replan",
   "gsd_slice_complete",
   "gsd_summary_save",
-  "gsd_task_plan",
   "gsd_task_complete",
-  "gsd_update_requirement",
   "gsd_validate_milestone",
 ]);
 
@@ -108,8 +95,6 @@ function getBundledWorkflowMcpCliPath(env: NodeJS.ProcessEnv): string | null {
   }
 
   const candidates = [
-    resolve(fileURLToPath(new URL("../../../../packages/mcp-server/src/cli.ts", import.meta.url))),
-    resolve(fileURLToPath(new URL("../../../../../packages/mcp-server/src/cli.ts", import.meta.url))),
     resolve(fileURLToPath(new URL("../../../../packages/mcp-server/dist/cli.js", import.meta.url))),
     resolve(fileURLToPath(new URL("../../../../../packages/mcp-server/dist/cli.js", import.meta.url))),
   ];
@@ -123,9 +108,9 @@ function getBundledWorkflowMcpCliPath(env: NodeJS.ProcessEnv): string | null {
 
 function getBundledWorkflowExecutorModulePath(): string | null {
   const candidates = [
+    resolve(fileURLToPath(new URL("../../../../dist/resources/extensions/gsd/tools/workflow-tool-executors.js", import.meta.url))),
     resolve(fileURLToPath(new URL("./tools/workflow-tool-executors.js", import.meta.url))),
     resolve(fileURLToPath(new URL("./tools/workflow-tool-executors.ts", import.meta.url))),
-    resolve(fileURLToPath(new URL("../../../../dist/resources/extensions/gsd/tools/workflow-tool-executors.js", import.meta.url))),
   ];
 
   for (const candidate of candidates) {
@@ -137,9 +122,9 @@ function getBundledWorkflowExecutorModulePath(): string | null {
 
 function getBundledWorkflowWriteGateModulePath(): string | null {
   const candidates = [
+    resolve(fileURLToPath(new URL("../../../../dist/resources/extensions/gsd/bootstrap/write-gate.js", import.meta.url))),
     resolve(fileURLToPath(new URL("./bootstrap/write-gate.js", import.meta.url))),
     resolve(fileURLToPath(new URL("./bootstrap/write-gate.ts", import.meta.url))),
-    resolve(fileURLToPath(new URL("../../../../dist/resources/extensions/gsd/bootstrap/write-gate.js", import.meta.url))),
   ];
 
   for (const candidate of candidates) {
@@ -149,58 +134,19 @@ function getBundledWorkflowWriteGateModulePath(): string | null {
   return null;
 }
 
-function getResolveTsHookPath(): string | null {
-  const candidates = [
-    resolve(fileURLToPath(new URL("./tests/resolve-ts.mjs", import.meta.url))),
-    resolve(fileURLToPath(new URL("../../../../src/resources/extensions/gsd/tests/resolve-ts.mjs", import.meta.url))),
-  ];
-
-  for (const candidate of candidates) {
-    if (existsSync(candidate)) return candidate;
-  }
-
-  return null;
-}
-
-function mergeNodeOptions(existing: string | undefined, additions: string[]): string | undefined {
-  const tokens = (existing ?? "").split(/\s+/).map((value) => value.trim()).filter(Boolean);
-  for (const addition of additions) {
-    if (!tokens.includes(addition)) {
-      tokens.push(addition);
-    }
-  }
-  return tokens.length > 0 ? tokens.join(" ") : undefined;
-}
-
 function buildWorkflowLaunchEnv(
   projectRoot: string,
   gsdCliPath: string | undefined,
   explicitEnv?: Record<string, string>,
-  workflowCliPath?: string,
 ): Record<string, string> {
   const executorModulePath = getBundledWorkflowExecutorModulePath();
   const writeGateModulePath = getBundledWorkflowWriteGateModulePath();
-  const resolveTsHookPath = getResolveTsHookPath();
-  const wantsSourceTs =
-    Boolean(resolveTsHookPath) &&
-    (
-      (workflowCliPath?.endsWith(".ts") ?? false) ||
-      (executorModulePath?.endsWith(".ts") ?? false) ||
-      (writeGateModulePath?.endsWith(".ts") ?? false)
-    );
-  const nodeOptions = wantsSourceTs
-    ? mergeNodeOptions(explicitEnv?.NODE_OPTIONS, [
-        "--experimental-strip-types",
-        `--import=${pathToFileURL(resolveTsHookPath!).href}`,
-      ])
-    : explicitEnv?.NODE_OPTIONS;
 
   return {
     ...(explicitEnv ?? {}),
     ...(gsdCliPath ? { GSD_CLI_PATH: gsdCliPath } : {}),
     ...(executorModulePath ? { GSD_WORKFLOW_EXECUTORS_MODULE: executorModulePath } : {}),
     ...(writeGateModulePath ? { GSD_WORKFLOW_WRITE_GATE_MODULE: writeGateModulePath } : {}),
-    ...(nodeOptions ? { NODE_OPTIONS: nodeOptions } : {}),
     GSD_PERSIST_WRITE_GATE_STATE: "1",
     GSD_WORKFLOW_PROJECT_ROOT: projectRoot,
   };
@@ -242,7 +188,7 @@ export function detectWorkflowMcpLaunchConfig(
       command: process.execPath,
       args: [distCli],
       cwd: resolvedWorkflowProjectRoot,
-      env: buildWorkflowLaunchEnv(resolvedWorkflowProjectRoot, gsdCliPath, undefined, distCli),
+      env: buildWorkflowLaunchEnv(resolvedWorkflowProjectRoot, gsdCliPath),
     };
   }
 
@@ -253,7 +199,7 @@ export function detectWorkflowMcpLaunchConfig(
       command: process.execPath,
       args: [bundledCli],
       cwd: resolvedWorkflowProjectRoot,
-      env: buildWorkflowLaunchEnv(resolvedWorkflowProjectRoot, gsdCliPath, undefined, bundledCli),
+      env: buildWorkflowLaunchEnv(resolvedWorkflowProjectRoot, gsdCliPath),
     };
   }
 

package/packages/mcp-server/dist/tool-credentials.d.ts

@@ -1,6 +0,0 @@
-export declare function resolveAuthPath(env?: NodeJS.ProcessEnv): string;
-export declare function loadStoredCredentialEnvKeys(options?: {
-    env?: NodeJS.ProcessEnv;
-    authPath?: string;
-}): string[];
-//# sourceMappingURL=tool-credentials.d.ts.map

package/packages/mcp-server/dist/tool-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-credentials.d.ts","sourceRoot":"","sources":["../src/tool-credentials.ts"],"names":[],"mappings":"AA8DA,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAI5E;AAED,wBAAgB,2BAA2B,CAAC,OAAO,GAAE;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,MAAM,EAAE,CAyBhB"}

package/packages/mcp-server/dist/tool-credentials.js

@@ -1,90 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-const AUTH_ENV_KEYS = [
-    ["anthropic", "ANTHROPIC_API_KEY"],
-    ["openai", "OPENAI_API_KEY"],
-    ["github-copilot", "GITHUB_TOKEN"],
-    ["google", "GEMINI_API_KEY"],
-    ["groq", "GROQ_API_KEY"],
-    ["xai", "XAI_API_KEY"],
-    ["openrouter", "OPENROUTER_API_KEY"],
-    ["mistral", "MISTRAL_API_KEY"],
-    ["ollama-cloud", "OLLAMA_API_KEY"],
-    ["custom-openai", "CUSTOM_OPENAI_API_KEY"],
-    ["cerebras", "CEREBRAS_API_KEY"],
-    ["azure-openai-responses", "AZURE_OPENAI_API_KEY"],
-    ["vercel-ai-gateway", "AI_GATEWAY_API_KEY"],
-    ["zai", "ZAI_API_KEY"],
-    ["minimax", "MINIMAX_API_KEY"],
-    ["minimax-cn", "MINIMAX_CN_API_KEY"],
-    ["huggingface", "HF_TOKEN"],
-    ["opencode", "OPENCODE_API_KEY"],
-    ["opencode-go", "OPENCODE_API_KEY"],
-    ["kimi-coding", "KIMI_API_KEY"],
-    ["alibaba-coding-plan", "ALIBABA_API_KEY"],
-    ["brave", "BRAVE_API_KEY"],
-    ["brave_answers", "BRAVE_ANSWERS_KEY"],
-    ["context7", "CONTEXT7_API_KEY"],
-    ["jina", "JINA_API_KEY"],
-    ["tavily", "TAVILY_API_KEY"],
-    ["slack_bot", "SLACK_BOT_TOKEN"],
-    ["discord_bot", "DISCORD_BOT_TOKEN"],
-    ["telegram_bot", "TELEGRAM_BOT_TOKEN"],
-];
-function expandHome(pathValue) {
-    if (pathValue === "~")
-        return homedir();
-    if (pathValue.startsWith("~/"))
-        return join(homedir(), pathValue.slice(2));
-    return pathValue;
-}
-function getStoredApiKey(data, providerId) {
-    const raw = data[providerId];
-    const credentials = Array.isArray(raw) ? raw : raw ? [raw] : [];
-    for (const credential of credentials) {
-        if (credential?.type !== "api_key")
-            continue;
-        if (typeof credential.key !== "string")
-            continue;
-        if (credential.key.trim().length === 0)
-            continue;
-        return credential.key;
-    }
-    return undefined;
-}
-export function resolveAuthPath(env = process.env) {
-    const agentDir = env.GSD_CODING_AGENT_DIR?.trim();
-    if (agentDir)
-        return join(expandHome(agentDir), "auth.json");
-    return join(homedir(), ".gsd", "agent", "auth.json");
-}
-export function loadStoredCredentialEnvKeys(options = {}) {
-    const env = options.env ?? process.env;
-    const authPath = options.authPath ?? resolveAuthPath(env);
-    if (!existsSync(authPath))
-        return [];
-    let parsed;
-    try {
-        const raw = readFileSync(authPath, "utf-8");
-        const data = JSON.parse(raw);
-        if (!data || typeof data !== "object" || Array.isArray(data))
-            return [];
-        parsed = data;
-    }
-    catch {
-        return [];
-    }
-    const loaded = [];
-    for (const [providerId, envVar] of AUTH_ENV_KEYS) {
-        if (env[envVar])
-            continue;
-        const key = getStoredApiKey(parsed, providerId);
-        if (!key)
-            continue;
-        env[envVar] = key;
-        loaded.push(envVar);
-    }
-    return loaded;
-}
-//# sourceMappingURL=tool-credentials.js.map

package/packages/mcp-server/dist/tool-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-credentials.js","sourceRoot":"","sources":["../src/tool-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,MAAM,aAAa,GAAG;IACpB,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAClC,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAC5B,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAClC,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAC5B,CAAC,MAAM,EAAE,cAAc,CAAC;IACxB,CAAC,KAAK,EAAE,aAAa,CAAC;IACtB,CAAC,YAAY,EAAE,oBAAoB,CAAC;IACpC,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAC9B,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAClC,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAC1C,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAChC,CAAC,wBAAwB,EAAE,sBAAsB,CAAC;IAClD,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAC3C,CAAC,KAAK,EAAE,aAAa,CAAC;IACtB,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAC9B,CAAC,YAAY,EAAE,oBAAoB,CAAC;IACpC,CAAC,aAAa,EAAE,UAAU,CAAC;IAC3B,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAChC,CAAC,aAAa,EAAE,kBAAkB,CAAC;IACnC,CAAC,aAAa,EAAE,cAAc,CAAC;IAC/B,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;IAC1C,CAAC,OAAO,EAAE,eAAe,CAAC;IAC1B,CAAC,eAAe,EAAE,mBAAmB,CAAC;IACtC,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAChC,CAAC,MAAM,EAAE,cAAc,CAAC;IACxB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAC5B,CAAC,WAAW,EAAE,iBAAiB,CAAC;IAChC,CAAC,aAAa,EAAE,mBAAmB,CAAC;IACpC,CAAC,cAAc,EAAE,oBAAoB,CAAC;CAC9B,CAAC;AAEX,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACxC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,IAAqB,EAAE,UAAkB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS;YAAE,SAAS;QAC7C,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;YAAE,SAAS;QACjD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjD,OAAO,UAAU,CAAC,GAAG,CAAC;IACxB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAGxC,EAAE;IACJ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACxE,MAAM,GAAG,IAAuB,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\ntype AuthCredential =\n  | { type?: unknown; key?: unknown }\n  | Array<{ type?: unknown; key?: unknown }>;\n\ntype AuthStorageData = Record<string, AuthCredential>;\n\nconst AUTH_ENV_KEYS = [\n  [\"anthropic\", \"ANTHROPIC_API_KEY\"],\n  [\"openai\", \"OPENAI_API_KEY\"],\n  [\"github-copilot\", \"GITHUB_TOKEN\"],\n  [\"google\", \"GEMINI_API_KEY\"],\n  [\"groq\", \"GROQ_API_KEY\"],\n  [\"xai\", \"XAI_API_KEY\"],\n  [\"openrouter\", \"OPENROUTER_API_KEY\"],\n  [\"mistral\", \"MISTRAL_API_KEY\"],\n  [\"ollama-cloud\", \"OLLAMA_API_KEY\"],\n  [\"custom-openai\", \"CUSTOM_OPENAI_API_KEY\"],\n  [\"cerebras\", \"CEREBRAS_API_KEY\"],\n  [\"azure-openai-responses\", \"AZURE_OPENAI_API_KEY\"],\n  [\"vercel-ai-gateway\", \"AI_GATEWAY_API_KEY\"],\n  [\"zai\", \"ZAI_API_KEY\"],\n  [\"minimax\", \"MINIMAX_API_KEY\"],\n  [\"minimax-cn\", \"MINIMAX_CN_API_KEY\"],\n  [\"huggingface\", \"HF_TOKEN\"],\n  [\"opencode\", \"OPENCODE_API_KEY\"],\n  [\"opencode-go\", \"OPENCODE_API_KEY\"],\n  [\"kimi-coding\", \"KIMI_API_KEY\"],\n  [\"alibaba-coding-plan\", \"ALIBABA_API_KEY\"],\n  [\"brave\", \"BRAVE_API_KEY\"],\n  [\"brave_answers\", \"BRAVE_ANSWERS_KEY\"],\n  [\"context7\", \"CONTEXT7_API_KEY\"],\n  [\"jina\", \"JINA_API_KEY\"],\n  [\"tavily\", \"TAVILY_API_KEY\"],\n  [\"slack_bot\", \"SLACK_BOT_TOKEN\"],\n  [\"discord_bot\", \"DISCORD_BOT_TOKEN\"],\n  [\"telegram_bot\", \"TELEGRAM_BOT_TOKEN\"],\n] as const;\n\nfunction expandHome(pathValue: string): string {\n  if (pathValue === \"~\") return homedir();\n  if (pathValue.startsWith(\"~/\")) return join(homedir(), pathValue.slice(2));\n  return pathValue;\n}\n\nfunction getStoredApiKey(data: AuthStorageData, providerId: string): string | undefined {\n  const raw = data[providerId];\n  const credentials = Array.isArray(raw) ? raw : raw ? [raw] : [];\n\n  for (const credential of credentials) {\n    if (credential?.type !== \"api_key\") continue;\n    if (typeof credential.key !== \"string\") continue;\n    if (credential.key.trim().length === 0) continue;\n    return credential.key;\n  }\n\n  return undefined;\n}\n\nexport function resolveAuthPath(env: NodeJS.ProcessEnv = process.env): string {\n  const agentDir = env.GSD_CODING_AGENT_DIR?.trim();\n  if (agentDir) return join(expandHome(agentDir), \"auth.json\");\n  return join(homedir(), \".gsd\", \"agent\", \"auth.json\");\n}\n\nexport function loadStoredCredentialEnvKeys(options: {\n  env?: NodeJS.ProcessEnv;\n  authPath?: string;\n} = {}): string[] {\n  const env = options.env ?? process.env;\n  const authPath = options.authPath ?? resolveAuthPath(env);\n  if (!existsSync(authPath)) return [];\n\n  let parsed: AuthStorageData;\n  try {\n    const raw = readFileSync(authPath, \"utf-8\");\n    const data = JSON.parse(raw) as unknown;\n    if (!data || typeof data !== \"object\" || Array.isArray(data)) return [];\n    parsed = data as AuthStorageData;\n  } catch {\n    return [];\n  }\n\n  const loaded: string[] = [];\n  for (const [providerId, envVar] of AUTH_ENV_KEYS) {\n    if (env[envVar]) continue;\n    const key = getStoredApiKey(parsed, providerId);\n    if (!key) continue;\n    env[envVar] = key;\n    loaded.push(envVar);\n  }\n\n  return loaded;\n}\n"]}

package/packages/mcp-server/src/tool-credentials.test.ts

@@ -1,95 +0,0 @@
-import { describe, it } from "node:test";
-import assert from "node:assert/strict";
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-import { loadStoredCredentialEnvKeys, resolveAuthPath } from "./tool-credentials.js";
-
-describe("tool credentials", () => {
-  it("hydrates supported model and tool keys from auth.json", () => {
-    const tempRoot = mkdtempSync(join(tmpdir(), "gsd-mcp-auth-"));
-    const authPath = join(tempRoot, "auth.json");
-    const env: NodeJS.ProcessEnv = {};
-
-    try {
-      writeFileSync(authPath, JSON.stringify({
-        anthropic: { type: "api_key", key: "sk-ant-secret" },
-        openai: { type: "api_key", key: "sk-openai-secret" },
-        tavily: { type: "api_key", key: "tvly-secret" },
-        context7: [{ type: "api_key", key: "ctx7-secret" }],
-      }));
-
-      const loaded = loadStoredCredentialEnvKeys({ authPath, env });
-      assert.deepEqual(loaded.sort(), [
-        "ANTHROPIC_API_KEY",
-        "CONTEXT7_API_KEY",
-        "OPENAI_API_KEY",
-        "TAVILY_API_KEY",
-      ]);
-      assert.equal(env.ANTHROPIC_API_KEY, "sk-ant-secret");
-      assert.equal(env.OPENAI_API_KEY, "sk-openai-secret");
-      assert.equal(env.TAVILY_API_KEY, "tvly-secret");
-      assert.equal(env.CONTEXT7_API_KEY, "ctx7-secret");
-    } finally {
-      rmSync(tempRoot, { recursive: true, force: true });
-    }
-  });
-
-  it("does not overwrite explicit environment variables", () => {
-    const tempRoot = mkdtempSync(join(tmpdir(), "gsd-mcp-auth-"));
-    const authPath = join(tempRoot, "auth.json");
-    const env: NodeJS.ProcessEnv = {
-      BRAVE_API_KEY: "already-set",
-    };
-
-    try {
-      writeFileSync(authPath, JSON.stringify({
-        brave: { type: "api_key", key: "from-auth-json" },
-        anthropic: { type: "api_key", key: "sk-ant-from-auth-json" },
-      }));
-
-      const loaded = loadStoredCredentialEnvKeys({ authPath, env });
-      assert.deepEqual(loaded, ["ANTHROPIC_API_KEY"]);
-      assert.equal(env.BRAVE_API_KEY, "already-set");
-      assert.equal(env.ANTHROPIC_API_KEY, "sk-ant-from-auth-json");
-    } finally {
-      rmSync(tempRoot, { recursive: true, force: true });
-    }
-  });
-
-  it("ignores oauth credentials because they are resolved through auth storage, not env hydration", () => {
-    const tempRoot = mkdtempSync(join(tmpdir(), "gsd-mcp-auth-"));
-    const authPath = join(tempRoot, "auth.json");
-    const env: NodeJS.ProcessEnv = {};
-
-    try {
-      writeFileSync(authPath, JSON.stringify({
-        openai: { type: "oauth", access: "oauth-access-token" },
-        "google-gemini-cli": { type: "oauth", token: "ya29.oauth-token" },
-      }));
-
-      const loaded = loadStoredCredentialEnvKeys({ authPath, env });
-      assert.deepEqual(loaded, []);
-      assert.equal(env.OPENAI_API_KEY, undefined);
-      assert.equal(env.GEMINI_API_KEY, undefined);
-    } finally {
-      rmSync(tempRoot, { recursive: true, force: true });
-    }
-  });
-
-  it("resolves auth.json from GSD_CODING_AGENT_DIR", () => {
-    const tempRoot = mkdtempSync(join(tmpdir(), "gsd-mcp-agent-dir-"));
-    const agentDir = join(tempRoot, "agent");
-    mkdirSync(agentDir, { recursive: true });
-
-    try {
-      assert.equal(
-        resolveAuthPath({ GSD_CODING_AGENT_DIR: agentDir }),
-        join(agentDir, "auth.json"),
-      );
-    } finally {
-      rmSync(tempRoot, { recursive: true, force: true });
-    }
-  });
-});

package/packages/mcp-server/src/tool-credentials.ts

@@ -1,97 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-type AuthCredential =
-  | { type?: unknown; key?: unknown }
-  | Array<{ type?: unknown; key?: unknown }>;
-
-type AuthStorageData = Record<string, AuthCredential>;
-
-const AUTH_ENV_KEYS = [
-  ["anthropic", "ANTHROPIC_API_KEY"],
-  ["openai", "OPENAI_API_KEY"],
-  ["github-copilot", "GITHUB_TOKEN"],
-  ["google", "GEMINI_API_KEY"],
-  ["groq", "GROQ_API_KEY"],
-  ["xai", "XAI_API_KEY"],
-  ["openrouter", "OPENROUTER_API_KEY"],
-  ["mistral", "MISTRAL_API_KEY"],
-  ["ollama-cloud", "OLLAMA_API_KEY"],
-  ["custom-openai", "CUSTOM_OPENAI_API_KEY"],
-  ["cerebras", "CEREBRAS_API_KEY"],
-  ["azure-openai-responses", "AZURE_OPENAI_API_KEY"],
-  ["vercel-ai-gateway", "AI_GATEWAY_API_KEY"],
-  ["zai", "ZAI_API_KEY"],
-  ["minimax", "MINIMAX_API_KEY"],
-  ["minimax-cn", "MINIMAX_CN_API_KEY"],
-  ["huggingface", "HF_TOKEN"],
-  ["opencode", "OPENCODE_API_KEY"],
-  ["opencode-go", "OPENCODE_API_KEY"],
-  ["kimi-coding", "KIMI_API_KEY"],
-  ["alibaba-coding-plan", "ALIBABA_API_KEY"],
-  ["brave", "BRAVE_API_KEY"],
-  ["brave_answers", "BRAVE_ANSWERS_KEY"],
-  ["context7", "CONTEXT7_API_KEY"],
-  ["jina", "JINA_API_KEY"],
-  ["tavily", "TAVILY_API_KEY"],
-  ["slack_bot", "SLACK_BOT_TOKEN"],
-  ["discord_bot", "DISCORD_BOT_TOKEN"],
-  ["telegram_bot", "TELEGRAM_BOT_TOKEN"],
-] as const;
-
-function expandHome(pathValue: string): string {
-  if (pathValue === "~") return homedir();
-  if (pathValue.startsWith("~/")) return join(homedir(), pathValue.slice(2));
-  return pathValue;
-}
-
-function getStoredApiKey(data: AuthStorageData, providerId: string): string | undefined {
-  const raw = data[providerId];
-  const credentials = Array.isArray(raw) ? raw : raw ? [raw] : [];
-
-  for (const credential of credentials) {
-    if (credential?.type !== "api_key") continue;
-    if (typeof credential.key !== "string") continue;
-    if (credential.key.trim().length === 0) continue;
-    return credential.key;
-  }
-
-  return undefined;
-}
-
-export function resolveAuthPath(env: NodeJS.ProcessEnv = process.env): string {
-  const agentDir = env.GSD_CODING_AGENT_DIR?.trim();
-  if (agentDir) return join(expandHome(agentDir), "auth.json");
-  return join(homedir(), ".gsd", "agent", "auth.json");
-}
-
-export function loadStoredCredentialEnvKeys(options: {
-  env?: NodeJS.ProcessEnv;
-  authPath?: string;
-} = {}): string[] {
-  const env = options.env ?? process.env;
-  const authPath = options.authPath ?? resolveAuthPath(env);
-  if (!existsSync(authPath)) return [];
-
-  let parsed: AuthStorageData;
-  try {
-    const raw = readFileSync(authPath, "utf-8");
-    const data = JSON.parse(raw) as unknown;
-    if (!data || typeof data !== "object" || Array.isArray(data)) return [];
-    parsed = data as AuthStorageData;
-  } catch {
-    return [];
-  }
-
-  const loaded: string[] = [];
-  for (const [providerId, envVar] of AUTH_ENV_KEYS) {
-    if (env[envVar]) continue;
-    const key = getStoredApiKey(parsed, providerId);
-    if (!key) continue;
-    env[envVar] = key;
-    loaded.push(envVar);
-  }
-
-  return loaded;
-}