gsd-pi 2.75.0 → 2.76.0-dev.b072ebb73

package/dist/onboarding.d.ts

@@ -10,6 +10,20 @@
  * All steps are skippable. All errors are recoverable. Never crashes boot.
  */
 import type { AuthStorage } from '@gsd/pi-coding-agent';
+type ClackModule = typeof import('@clack/prompts');
+type PicoModule = {
+    cyan: (s: string) => string;
+    green: (s: string) => string;
+    yellow: (s: string) => string;
+    dim: (s: string) => string;
+    bold: (s: string) => string;
+    red: (s: string) => string;
+    reset: (s: string) => string;
+};
+interface RunOnboardingOptions {
+    /** Show logo + intro banner. Disable when onboarding is launched inside an active TUI session. */
+    showIntro?: boolean;
+}
 /**
  * Determine if the onboarding wizard should run.
  *
@@ -36,4 +50,9 @@ export declare function shouldRunOnboarding(authStorage: AuthStorage, settingsDe
  * All steps are skippable. All errors are recoverable.
  * Writes status to stderr during execution.
  */
-export declare function runOnboarding(authStorage: AuthStorage): Promise<void>;
+export declare function runOnboarding(authStorage: AuthStorage, opts?: RunOnboardingOptions): Promise<void>;
+export declare function runLlmStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage): Promise<boolean>;
+export declare function runWebSearchStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage, isAnthropicAuth: boolean): Promise<string | null>;
+export declare function runToolKeysStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage): Promise<number>;
+export declare function runRemoteQuestionsStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage): Promise<string | null>;
+export {};

package/dist/onboarding.js

@@ -15,6 +15,8 @@ import { dirname, join } from 'node:path';
 import { renderLogo } from './logo.js';
 import { agentDir } from './app-paths.js';
 import { isClaudeCliReady } from './claude-cli-check.js';
+import { markOnboardingComplete, markStepCompleted, markStepSkipped, isOnboardingComplete, } from './resources/extensions/gsd/onboarding-state.js';
+import { getLlmProviderIds } from './resources/extensions/gsd/setup-catalog.js';
 // ─── Constants ────────────────────────────────────────────────────────────────
 const TOOL_KEYS = [
     {
@@ -36,25 +38,17 @@ const TOOL_KEYS = [
         hint: 'voice transcription — free at console.groq.com',
     },
 ];
-/** Known LLM provider IDs that, if authed, mean the user doesn't need onboarding */
-const LLM_PROVIDER_IDS = [
-    'anthropic',
+/**
+ * Known LLM provider IDs that, if authed, mean the user doesn't need onboarding.
+ * Sourced from the shared setup-catalog so adding a provider lands in one place.
+ * 'anthropic-vertex' and 'ollama' aren't in PROVIDER_REGISTRY but are still
+ * treated as "authed = no onboarding needed" for back-compat.
+ */
+const LLM_PROVIDER_IDS = Array.from(new Set([
+    ...getLlmProviderIds(),
     'anthropic-vertex',
-    'claude-code',
-    'openai',
-    'github-copilot',
-    'openai-codex',
-    'google-gemini-cli',
-    'google-antigravity',
-    'google',
-    'groq',
-    'xai',
-    'openrouter',
-    'mistral',
     'ollama',
-    'ollama-cloud',
-    'custom-openai',
-];
+]));
 /** API key prefix validation — loose checks to catch obvious mistakes */
 const API_KEY_PREFIXES = {
     anthropic: ['sk-ant-'],
@@ -118,6 +112,25 @@ function openBrowser(url) {
         execFile(cmd, [url], () => { });
     }
 }
+/**
+ * Persist the selected default provider to settings.json.
+ *
+ * This ensures first startup after onboarding prefers the provider the user
+ * just configured, instead of falling back to the first "available" provider
+ * (which can be influenced by unrelated env auth like AWS_PROFILE).
+ */
+function persistDefaultProvider(providerId) {
+    const settingsPath = join(agentDir, 'settings.json');
+    try {
+        const raw = existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, 'utf-8')) : {};
+        raw.defaultProvider = providerId;
+        mkdirSync(dirname(settingsPath), { recursive: true });
+        writeFileSync(settingsPath, JSON.stringify(raw, null, 2), 'utf-8');
+    }
+    catch {
+        // Non-fatal: startup fallback logic will still run.
+    }
+}
 /** Sentinel returned by runStep when the user cancels — tells the caller
  *  to abort the entire wizard. */
 const STEP_CANCELLED = Symbol('step-cancelled');
@@ -159,6 +172,10 @@ async function runStep(p, warnLabel, fn, opts = {}) {
 export function shouldRunOnboarding(authStorage, settingsDefaultProvider) {
     if (!process.stdin.isTTY)
         return false;
+    // Explicit completion record wins — user has already finished onboarding (and
+    // our flowVersion hasn't bumped since).
+    if (isOnboardingComplete())
+        return false;
     if (settingsDefaultProvider)
         return false;
     // Check if any LLM provider has credentials
@@ -177,7 +194,7 @@ export function shouldRunOnboarding(authStorage, settingsDefaultProvider) {
  * All steps are skippable. All errors are recoverable.
  * Writes status to stderr during execution.
  */
-export async function runOnboarding(authStorage) {
+export async function runOnboarding(authStorage, opts = {}) {
     let p;
     let pc;
     try {
@@ -190,31 +207,62 @@ export async function runOnboarding(authStorage) {
         return;
     }
     // ── Intro ─────────────────────────────────────────────────────────────────
-    process.stderr.write(renderLogo(pc.cyan));
-    p.intro(pc.bold('Welcome to GSD — let\'s get you set up'));
+    if (opts.showIntro !== false) {
+        process.stderr.write(renderLogo(pc.cyan));
+        p.intro(pc.bold('Welcome to GSD — let\'s get you set up'));
+    }
+    const completedSteps = [];
     // ── LLM Provider Selection ────────────────────────────────────────────────
     const llmResult = await runStep(p, 'LLM setup failed', () => runLlmStep(p, pc, authStorage), {
-        cancelMessage: 'Setup cancelled — you can run /login inside GSD later.',
+        cancelMessage: 'Setup cancelled — you can run /gsd onboarding --resume later.',
         errorInfo: 'You can configure your LLM provider later with /login inside GSD.',
     });
     if (llmResult === STEP_CANCELLED)
         return;
     const llmConfigured = llmResult ?? false;
+    if (llmConfigured) {
+        markStepCompleted('llm');
+        completedSteps.push('llm');
+    }
+    else {
+        markStepSkipped('llm');
+    }
     // ── Web Search Provider ──────────────────────────────────────────────────
     const searchResult = await runStep(p, 'Web search setup failed', () => runWebSearchStep(p, pc, authStorage, llmConfigured));
     if (searchResult === STEP_CANCELLED)
         return;
     const searchConfigured = searchResult;
+    if (searchConfigured) {
+        markStepCompleted('search');
+        completedSteps.push('search');
+    }
+    else {
+        markStepSkipped('search');
+    }
     // ── Remote Questions ─────────────────────────────────────────────────────
     const remoteResult = await runStep(p, 'Remote questions setup failed', () => runRemoteQuestionsStep(p, pc, authStorage));
     if (remoteResult === STEP_CANCELLED)
         return;
     const remoteConfigured = remoteResult;
+    if (remoteConfigured) {
+        markStepCompleted('remote');
+        completedSteps.push('remote');
+    }
+    else {
+        markStepSkipped('remote');
+    }
     // ── Tool API Keys ─────────────────────────────────────────────────────────
     const toolResult = await runStep(p, 'Tool key setup failed', () => runToolKeysStep(p, pc, authStorage));
     if (toolResult === STEP_CANCELLED)
         return;
     const toolKeyCount = toolResult ?? 0;
+    if (toolKeyCount > 0) {
+        markStepCompleted('tool-keys');
+        completedSteps.push('tool-keys');
+    }
+    else {
+        markStepSkipped('tool-keys');
+    }
     // ── Summary ───────────────────────────────────────────────────────────────
     const summaryLines = [];
     if (llmConfigured) {
@@ -249,11 +297,17 @@ export async function runOnboarding(authStorage) {
     else {
         summaryLines.push(`${pc.dim('↷')} Tool keys: none configured`);
     }
+    // Persist completion record so re-entry, web boot probe, and shouldRunOnboarding
+    // all agree the wizard finished. Required steps drive the "complete" semantics
+    // in onboarding-state.ts; here we mark wizard-level completion regardless.
+    markOnboardingComplete(completedSteps);
+    summaryLines.push('');
+    summaryLines.push(`${pc.dim('Tip:')} re-run anytime with ${pc.cyan('/gsd onboarding')}`);
     p.note(summaryLines.join('\n'), 'Setup complete');
     p.outro(pc.dim('Launching GSD...'));
 }
 // ─── LLM Authentication Step ──────────────────────────────────────────────────
-async function runLlmStep(p, pc, authStorage) {
+export async function runLlmStep(p, pc, authStorage) {
     // Build the OAuth provider list dynamically from what's registered
     const oauthProviders = authStorage.getOAuthProviders();
     const oauthMap = new Map(oauthProviders.map(op => [op.id, op]));
@@ -283,16 +337,8 @@ async function runLlmStep(p, pc, authStorage) {
         p.log.info('Your Claude subscription will be used for inference. No API key needed.');
         // Store sentinel so hasAuth('claude-code') returns true on future boots
         authStorage.set('claude-code', { type: 'api_key', key: 'cli' });
-        // Persist claude-code as the default provider so the startup migration in
-        // cli.ts does not need to fire and the user is not left on "anthropic".
-        const settingsPath = join(agentDir, 'settings.json');
-        try {
-            const raw = existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, 'utf-8')) : {};
-            raw.defaultProvider = 'claude-code';
-            mkdirSync(dirname(settingsPath), { recursive: true });
-            writeFileSync(settingsPath, JSON.stringify(raw, null, 2), 'utf-8');
-        }
-        catch { /* non-fatal — startup migration will catch it */ }
+        // Persist claude-code so startup does not keep users on anthropic direct API.
+        persistDefaultProvider('claude-code');
         return true;
     }
     // ── Step 2: Which provider? ──────────────────────────────────────────────
@@ -345,7 +391,7 @@ async function runOAuthFlow(p, pc, authStorage, providerId, oauthMap) {
     const s = p.spinner();
     s.start(`Authenticating with ${providerName}...`);
     try {
-        await authStorage.login(providerId, {
+        const loginCallbacks = {
             onAuth: (info) => {
                 s.stop(`Opening browser for ${providerName}`);
                 openBrowser(info.url);
@@ -377,7 +423,9 @@ async function runOAuthFlow(p, pc, authStorage, providerId, oauthMap) {
                     return result;
                 }
                 : undefined,
-        });
+        };
+        await authStorage.login(providerId, loginCallbacks);
+        persistDefaultProvider(providerId);
         p.log.success(`Authenticated with ${pc.green(providerName)}`);
         return true;
     }
@@ -416,6 +464,7 @@ async function runApiKeyFlow(p, pc, authStorage, providerId, providerLabel) {
         p.log.warn(`Key doesn't start with expected prefix (${expectedPrefixes.join(' or ')}). Saving anyway.`);
     }
     authStorage.set(providerId, { type: 'api_key', key: trimmed });
+    persistDefaultProvider(providerId);
     p.log.success(`API key saved for ${pc.green(providerLabel)}`);
     // Provider-specific post-setup hints
     if (providerId === 'openrouter') {
@@ -438,6 +487,7 @@ async function runOllamaLocalFlow(p, pc, authStorage) {
             s.stop(`Ollama is running at ${pc.green(host)}`);
             // Store a placeholder so the provider is recognized as authenticated
             authStorage.set('ollama', { type: 'api_key', key: 'ollama' });
+            persistDefaultProvider('ollama');
             p.log.success(`${pc.green('Ollama (Local)')} configured — no API key needed`);
             p.log.info(pc.dim('Models are discovered automatically from your local Ollama instance.'));
             return true;
@@ -460,6 +510,7 @@ async function runOllamaLocalFlow(p, pc, authStorage) {
     if (p.isCancel(proceed) || !proceed)
         return false;
     authStorage.set('ollama', { type: 'api_key', key: 'ollama' });
+    persistDefaultProvider('ollama');
     p.log.success(`${pc.green('Ollama (Local)')} saved — models will appear when Ollama is running`);
     return true;
 }
@@ -509,6 +560,7 @@ async function runCustomOpenAIFlow(p, pc, authStorage) {
     const trimmedModelId = modelId.trim();
     // Save API key to auth storage
     authStorage.set('custom-openai', { type: 'api_key', key: trimmedKey });
+    persistDefaultProvider('custom-openai');
     // Write or merge into models.json
     const modelsJsonPath = join(agentDir, 'models.json');
     let config = { providers: {} };
@@ -555,7 +607,7 @@ async function runCustomOpenAIFlow(p, pc, authStorage) {
     return true;
 }
 // ─── Web Search Provider Step ─────────────────────────────────────────────────
-async function runWebSearchStep(p, pc, authStorage, isAnthropicAuth) {
+export async function runWebSearchStep(p, pc, authStorage, isAnthropicAuth) {
     // Check which LLM provider was configured
     const authed = authStorage.list().filter(id => LLM_PROVIDER_IDS.includes(id));
     const isAnthropic = isAnthropicAuth && authed.includes('anthropic');
@@ -616,7 +668,7 @@ async function runWebSearchStep(p, pc, authStorage, isAnthropicAuth) {
     return null;
 }
 // ─── Tool API Keys Step ───────────────────────────────────────────────────────
-async function runToolKeysStep(p, pc, authStorage) {
+export async function runToolKeysStep(p, pc, authStorage) {
     // Filter to keys not already configured
     const missing = TOOL_KEYS.filter(tk => !authStorage.has(tk.provider) && !process.env[tk.envVar]);
     if (missing.length === 0)
@@ -651,9 +703,11 @@ async function runToolKeysStep(p, pc, authStorage) {
     return savedCount;
 }
 // ─── Remote Questions Step ────────────────────────────────────────────────────
-async function runRemoteQuestionsStep(p, pc, authStorage) {
+export async function runRemoteQuestionsStep(p, pc, authStorage) {
     // Check existing config — use getCredentialsForProvider to skip empty-key entries
-    const hasValidKey = (provider) => authStorage.getCredentialsForProvider(provider).some((c) => c.type === 'api_key' && c.key);
+    const hasValidKey = (provider) => authStorage
+        .getCredentialsForProvider(provider)
+        .some((c) => c.type === 'api_key' && typeof c.key === 'string' && c.key.length > 0);
     const hasDiscord = hasValidKey('discord_bot');
     const hasSlack = hasValidKey('slack_bot');
     const hasTelegram = hasValidKey('telegram_bot');
@@ -858,7 +912,13 @@ async function runDiscordChannelStep(p, pc, token) {
     try {
         const res = await fetch(`https://discord.com/api/v10/guilds/${guildId}/channels`, { headers, signal: AbortSignal.timeout(15_000) });
         const data = await res.json();
-        channels = Array.isArray(data) ? data.filter((ch) => ch.type === 0 || ch.type === 5) : [];
+        channels = Array.isArray(data)
+            ? data.filter((ch) => typeof ch === 'object' &&
+                ch !== null &&
+                typeof ch.id === 'string' &&
+                typeof ch.name === 'string' &&
+                (ch.type === 0 || ch.type === 5))
+            : [];
     }
     catch {
         p.log.warn('Could not fetch channels — configure later with /gsd remote discord');

package/dist/resources/agents/researcher.md

@@ -1,7 +1,7 @@
 ---
 name: researcher
 description: Web researcher that finds and synthesizes current information using Brave Search
-tools: search-the-web, bash
+tools: search-the-web, bash, capture_thought, memory_query, gsd_graph
 ---
 
 You are a web researcher. You find current, accurate information using web search and synthesize it into a clear, well-structured report.

package/dist/resources/extensions/ask-user-questions.js

@@ -16,13 +16,16 @@ import { showInterviewRound, } from "./shared/tui.js";
 const OptionSchema = Type.Object({
     label: Type.String({ description: "User-facing label (1-5 words)" }),
     description: Type.String({ description: "One short sentence explaining impact/tradeoff if selected" }),
+    preview: Type.Optional(Type.String({
+        description: "Optional markdown content shown in a side-by-side preview panel when this option is highlighted. Use for showing code samples, config snippets, or detailed explanations. Keep under ~20 lines — longer content is truncated.",
+    })),
 });
 const QuestionSchema = Type.Object({
     id: Type.String({ description: "Stable identifier for mapping answers (snake_case)" }),
     header: Type.String({ description: "Short header label shown in the UI (12 or fewer chars)" }),
     question: Type.String({ description: "Single-sentence prompt shown to the user" }),
     options: Type.Array(OptionSchema, {
-        description: 'Provide 2-3 mutually exclusive choices for single-select, or any number for multi-select. Put the recommended option first and suffix its label with "(Recommended)". Do not include an "Other" option for single-select; the client adds a free-form "None of the above" option automatically.',
+        description: 'Provide 2-3 mutually exclusive choices for single-select, or any number for multi-select. Put the recommended option first and suffix its label with "(Recommended)". Each option can include an optional "preview" field with markdown content shown in a side panel. Do not include an "Other" option for single-select; the client adds a free-form "None of the above" option automatically.',
     }),
     allowMultiple: Type.Optional(Type.Boolean({
         description: "If true, the user can select multiple options using SPACE to toggle and ENTER to confirm. No 'None of the above' option is added. Default: false.",
@@ -134,12 +137,14 @@ export default function AskUserQuestions(pi) {
     pi.registerTool({
         name: "ask_user_questions",
         label: "Request User Input",
-        description: "Request user input for one to three short questions and wait for the response. Single-select questions have 2-3 mutually exclusive options with a free-form 'None of the above' added automatically. Multi-select questions (allowMultiple: true) let the user toggle multiple options with SPACE and confirm with ENTER.",
+        description: "Request user input for one to three short questions and wait for the response. Single-select questions have 2-3 mutually exclusive options with a free-form 'None of the above' added automatically. Multi-select questions (allowMultiple: true) let the user toggle multiple options with SPACE and confirm with ENTER. Options can include an optional 'preview' field with markdown content shown in a side-by-side panel when highlighted.",
         promptGuidelines: [
             "Use ask_user_questions when you need the user to choose between concrete alternatives before proceeding.",
             "Keep questions to 1 when possible; never exceed 3.",
             "For single-select: each question must have 2-3 options. Put the recommended option first with '(Recommended)' suffix. Do not include an 'Other' or 'None of the above' option - the client adds one automatically.",
             "For multi-select: set allowMultiple: true. The user can pick any number of options. No 'None of the above' is added.",
+            "When options involve code patterns, config choices, or architecture decisions, add a 'preview' field with markdown content (code blocks, lists, headers, etc.). The preview renders in a side-by-side panel when the option is highlighted.",
+            "Preview content is rendered in a fixed-height panel (max ~20 lines visible). Keep previews concise — show the most relevant snippet, not exhaustive examples. Longer content is truncated with a '+N lines hidden' indicator.",
         ],
         parameters: AskUserQuestionsParams,
         async execute(_toolCallId, params, signal, _onUpdate, ctx) {
@@ -274,6 +279,10 @@ export default function AskUserQuestions(pi) {
                 const headers = qs.map((q) => q.header).join(", ");
                 text += theme.fg("dim", ` (${headers})`);
             }
+            const previewCount = qs.reduce((acc, q) => acc + (q.options || []).filter((o) => o.preview).length, 0);
+            if (previewCount > 0) {
+                text += theme.fg("accent", ` [${previewCount} preview${previewCount !== 1 ? "s" : ""}]`);
+            }
             for (const q of qs) {
                 const multiSel = !!q.allowMultiple;
                 text += `\n  ${theme.fg("text", q.question)}`;
@@ -307,10 +316,13 @@ export default function AskUserQuestions(pi) {
                             lines.push(`${theme.fg("accent", q.header)}: ${theme.fg("dim", "(no answer)")}`);
                             continue;
                         }
-                        const answerText = answer.answers.length > 0 ? answer.answers.join(", ") : "(custom)";
+                        const selected = answer.selected;
+                        const answerText = Array.isArray(selected)
+                            ? (selected.length > 0 ? selected.join(", ") : "(custom)")
+                            : (selected || "(custom)");
                         let line = `${theme.fg("success", "✓ ")}${theme.fg("accent", q.header)}: ${answerText}`;
-                        if (answer.user_note) {
-                            line += ` ${theme.fg("muted", `[note: ${answer.user_note}]`)}`;
+                        if (answer.notes) {
+                            line += ` ${theme.fg("muted", `[note: ${answer.notes}]`)}`;
                         }
                         lines.push(line);
                     }

package/dist/resources/extensions/claude-code-cli/models.js

@@ -19,6 +19,15 @@ export const CLAUDE_CODE_MODELS = [
         contextWindow: 1_000_000,
         maxTokens: 128_000,
     },
+    {
+        id: "claude-opus-4-7",
+        name: "Claude Opus 4.7 (via Claude Code)",
+        reasoning: true,
+        input: ["text", "image"],
+        cost: ZERO_COST,
+        contextWindow: 1_000_000,
+        maxTokens: 128_000,
+    },
     {
         id: "claude-sonnet-4-6",
         name: "Claude Sonnet 4.6 (via Claude Code)",

package/dist/resources/extensions/claude-code-cli/readiness.js

@@ -9,6 +9,38 @@
  * and check the exit code + output for an authenticated session.
  */
 import { execFileSync } from "node:child_process";
+/**
+ * Candidate executable names for the Claude Code CLI.
+ *
+ * Keep the explicit win32 ternary selector for regression coverage (Issue #4424):
+ * Node's execFileSync must target `claude.cmd` directly on Windows.
+ */
+const CLAUDE_COMMAND = process.platform === "win32" ? "claude.cmd" : "claude";
+/**
+ * Windows installs vary: some environments expose `claude.cmd` (npm shim),
+ * others expose a `claude` shim on PATH (for example Git Bash wrappers).
+ * Try both to avoid false "not installed" results in readiness checks.
+ */
+const CLAUDE_COMMAND_CANDIDATES = process.platform === "win32" ? [CLAUDE_COMMAND, "claude"] : [CLAUDE_COMMAND];
+function execClaude(args) {
+    let lastError;
+    for (const command of CLAUDE_COMMAND_CANDIDATES) {
+        try {
+            return execFileSync(command, args, { timeout: 5_000, stdio: "pipe" });
+        }
+        catch (error) {
+            lastError = error;
+            const code = error?.code;
+            // Windows Git Bash can surface `.cmd` spawn failures as EINVAL instead
+            // of ENOENT. Treat both as "try next candidate".
+            if (code === "ENOENT" || code === "EINVAL") {
+                continue;
+            }
+            throw error;
+        }
+    }
+    throw lastError ?? new Error(`Claude CLI executable not found (tried: ${CLAUDE_COMMAND_CANDIDATES.join(", ")})`);
+}
 let cachedBinaryPresent = null;
 let cachedAuthed = null;
 let lastCheckMs = 0;
@@ -22,7 +54,7 @@ function refreshCache() {
     lastCheckMs = now;
     // Check binary presence
     try {
-        execFileSync("claude", ["--version"], { timeout: 5_000, stdio: "pipe" });
+        execClaude(["--version"]);
         cachedBinaryPresent = true;
     }
     catch {
@@ -32,7 +64,7 @@ function refreshCache() {
     }
     // Check auth status — exit code 0 with non-error output means authenticated
     try {
-        const output = execFileSync("claude", ["auth", "status"], { timeout: 5_000, stdio: "pipe" })
+        const output = execClaude(["auth", "status"])
             .toString()
             .toLowerCase();
         // The CLI outputs "not logged in", "no credentials", or similar when unauthenticated