gsd-pi 2.75.0 → 2.76.0-dev.b072ebb73

package/dist/web/standalone/node_modules/node-pty/node-addon-api/node_addon_api.target.mk

@@ -38,13 +38,13 @@ CFLAGS_CC_Debug := \
 	-std=gnu++20
 
 INCS_Debug := \
-	-I/home/runner/.cache/node-gyp/24.13.0/include/node \
-	-I/home/runner/.cache/node-gyp/24.13.0/src \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/config \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/uv/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/zlib \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/v8/include
+	-I/github/home/.cache/node-gyp/24.13.0/include/node \
+	-I/github/home/.cache/node-gyp/24.13.0/src \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/config \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/uv/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/zlib \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/v8/include
 
 DEFS_Release := \
 	'-DNODE_GYP_MODULE_NAME=node_addon_api' \
@@ -80,13 +80,13 @@ CFLAGS_CC_Release := \
 	-std=gnu++20
 
 INCS_Release := \
-	-I/home/runner/.cache/node-gyp/24.13.0/include/node \
-	-I/home/runner/.cache/node-gyp/24.13.0/src \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/config \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/uv/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/zlib \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/v8/include
+	-I/github/home/.cache/node-gyp/24.13.0/include/node \
+	-I/github/home/.cache/node-gyp/24.13.0/src \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/config \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/uv/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/zlib \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/v8/include
 
 OBJS :=
 

package/dist/web/standalone/node_modules/node-pty/node-addon-api/node_addon_api_except.target.mk

@@ -38,13 +38,13 @@ CFLAGS_CC_Debug := \
 	-std=gnu++20
 
 INCS_Debug := \
-	-I/home/runner/.cache/node-gyp/24.13.0/include/node \
-	-I/home/runner/.cache/node-gyp/24.13.0/src \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/config \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/uv/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/zlib \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/v8/include
+	-I/github/home/.cache/node-gyp/24.13.0/include/node \
+	-I/github/home/.cache/node-gyp/24.13.0/src \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/config \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/uv/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/zlib \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/v8/include
 
 DEFS_Release := \
 	'-DNODE_GYP_MODULE_NAME=node_addon_api_except' \
@@ -80,13 +80,13 @@ CFLAGS_CC_Release := \
 	-std=gnu++20
 
 INCS_Release := \
-	-I/home/runner/.cache/node-gyp/24.13.0/include/node \
-	-I/home/runner/.cache/node-gyp/24.13.0/src \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/config \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/uv/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/zlib \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/v8/include
+	-I/github/home/.cache/node-gyp/24.13.0/include/node \
+	-I/github/home/.cache/node-gyp/24.13.0/src \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/config \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/uv/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/zlib \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/v8/include
 
 OBJS :=
 

package/dist/web/standalone/node_modules/node-pty/node-addon-api/node_addon_api_maybe.target.mk

@@ -38,13 +38,13 @@ CFLAGS_CC_Debug := \
 	-std=gnu++20
 
 INCS_Debug := \
-	-I/home/runner/.cache/node-gyp/24.13.0/include/node \
-	-I/home/runner/.cache/node-gyp/24.13.0/src \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/config \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/uv/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/zlib \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/v8/include
+	-I/github/home/.cache/node-gyp/24.13.0/include/node \
+	-I/github/home/.cache/node-gyp/24.13.0/src \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/config \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/uv/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/zlib \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/v8/include
 
 DEFS_Release := \
 	'-DNODE_GYP_MODULE_NAME=node_addon_api_maybe' \
@@ -80,13 +80,13 @@ CFLAGS_CC_Release := \
 	-std=gnu++20
 
 INCS_Release := \
-	-I/home/runner/.cache/node-gyp/24.13.0/include/node \
-	-I/home/runner/.cache/node-gyp/24.13.0/src \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/config \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/uv/include \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/zlib \
-	-I/home/runner/.cache/node-gyp/24.13.0/deps/v8/include
+	-I/github/home/.cache/node-gyp/24.13.0/include/node \
+	-I/github/home/.cache/node-gyp/24.13.0/src \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/config \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/openssl/openssl/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/uv/include \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/zlib \
+	-I/github/home/.cache/node-gyp/24.13.0/deps/v8/include
 
 OBJS :=
 

package/dist/web/standalone/server.js

@@ -15,7 +15,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{},"typescript":{"ignoreBuildErrors":true},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.mjs","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/_work/gsd-2/gsd-2","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":5,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.mjs","serverExternalPackages":["@gsd/native","node-pty"],"turbopack":{"root":"/home/runner/_work/gsd-2/gsd-2"},"distDirRoot":".next"}
+const nextConfig = {"env":{},"typescript":{"ignoreBuildErrors":true},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.mjs","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/__w/gsd-2/gsd-2","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":9,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.mjs","serverExternalPackages":["@gsd/native","node-pty"],"turbopack":{"root":"/__w/gsd-2/gsd-2"},"distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/dist/welcome-screen.js

@@ -5,11 +5,38 @@
  * auto-mode progress widget style), logo left (fixed width), info right.
  * Falls back to simple text on narrow terminals (<70 cols) or non-TTY.
  */
-import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
 import os from 'node:os';
 import chalk from 'chalk';
 import stripAnsi from 'strip-ansi';
 import { GSD_LOGO } from './logo.js';
+function readGsdState() {
+    try {
+        const raw = readFileSync(join(process.cwd(), '.gsd', 'STATE.md'), 'utf-8');
+        const state = {};
+        const milestone = raw.match(/^\*\*Active Milestone:\*\*\s*(.+)$/m);
+        if (milestone)
+            state.milestone = milestone[1].trim();
+        const slice = raw.match(/^\*\*Active Slice:\*\*\s*(.+)$/m);
+        if (slice)
+            state.slice = slice[1].trim();
+        const phase = raw.match(/^\*\*Phase:\*\*\s*(.+)$/m);
+        if (phase)
+            state.phase = phase[1].trim();
+        // Accept both template shapes: inline "**Next Action:** ..." and the
+        // "## Next Action\n<line>" heading format. Prefer the inline match.
+        const nextInline = raw.match(/^\*\*Next Action:\*\*\s*(.+)$/m);
+        const nextHeading = raw.match(/^##\s*Next Action\s*\n+([^\n]+)/m);
+        const nextMatch = nextInline ?? nextHeading;
+        if (nextMatch)
+            state.nextAction = nextMatch[1].trim();
+        return state;
+    }
+    catch {
+        return undefined;
+    }
+}
 function getShortCwd() {
     const cwd = process.cwd();
     const home = os.homedir();
@@ -23,25 +50,11 @@ function visLen(s) {
 function rpad(s, w) {
     return s + ' '.repeat(Math.max(0, w - visLen(s)));
 }
-/** Read the current git branch name. Returns undefined on failure. */
-function getGitBranch() {
-    try {
-        return execFileSync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], {
-            encoding: 'utf-8',
-            timeout: 2000,
-            stdio: ['ignore', 'pipe', 'ignore'],
-        }).trim() || undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
 export function printWelcomeScreen(opts) {
     if (!process.stderr.isTTY)
         return;
-    const { version, modelName, provider, remoteChannel } = opts;
+    const { version, remoteChannel } = opts;
     const shortCwd = getShortCwd();
-    const branch = getGitBranch();
     const termWidth = (process.stderr.columns || 80) - 1;
     // Narrow terminal fallback
     if (termWidth < 70) {
@@ -80,14 +93,25 @@ export function printWelcomeScreen(opts) {
     const hintRight = chalk.dim('/gsd to begin  ·  /gsd help');
     const footerFill = RIGHT_INNER - visLen(toolsLeft) - visLen(hintRight);
     const footerRow = toolsLeft + ' '.repeat(Math.max(1, footerFill)) + hintRight;
-    // Combined session line: "provider / model" or just model or just provider
-    const sessionParts = [provider, modelName].filter(Boolean);
-    const sessionLine = sessionParts.length > 0
-        ? `  Session    ${chalk.dim(sessionParts.join(' / '))}`
-        : '';
-    // Combined project line: "~/path [branch]"
-    const branchSuffix = branch ? ` [${branch}]` : '';
-    const projectLine = `  Project    ${chalk.dim(shortCwd + branchSuffix)}`;
+    // "Welcome back" context lines — GSD state if available, else hint.
+    // Intentionally avoids data already shown in the footer (model, provider,
+    // pwd, branch).
+    const state = readGsdState();
+    let line1 = '';
+    let line2 = '';
+    if (state?.milestone) {
+        const statusParts = [state.milestone, state.phase, state.slice].filter(Boolean);
+        line1 = `  Active     ${chalk.dim(statusParts.join(' · '))}`;
+        line2 = state.nextAction
+            ? `  Next       ${chalk.dim(state.nextAction)}`
+            : '';
+    }
+    else {
+        line1 = `  Status     ${chalk.dim('No active GSD project')}`;
+        line2 = `             ${chalk.dim('/gsd to begin')}`;
+    }
+    const sessionLine = line1;
+    const projectLine = line2;
     const DIVIDER = null;
     const rightRows = [
         titleRow,

package/dist/wizard.js

@@ -23,8 +23,8 @@ export function loadStoredEnvKeys(authStorage) {
             // Use getCredentialsForProvider to skip empty-key entries at index 0
             // (left by legacy removeProviderToken which used set() with empty key)
             const creds = authStorage.getCredentialsForProvider(provider);
-            const cred = creds.find((c) => c.type === 'api_key' && c.key);
-            if (cred?.type === 'api_key' && cred.key) {
+            const cred = creds.find((c) => c.type === 'api_key' && typeof c.key === 'string' && c.key.length > 0);
+            if (cred?.type === 'api_key' && typeof cred.key === 'string') {
                 process.env[envVar] = cred.key;
             }
         }

package/dist/worktree-cli.d.ts

@@ -31,11 +31,7 @@ interface ExtensionModules {
         deleteBranch?: boolean;
     }) => void;
     mergeWorktreeToMain: (basePath: string, name: string, commitMessage: string) => void;
-    diffWorktreeAll: (basePath: string, name: string) => {
-        added: any[];
-        modified: any[];
-        removed: any[];
-    };
+    diffWorktreeAll: (basePath: string, name: string) => WorktreeDiff;
     diffWorktreeNumstat: (basePath: string, name: string) => Array<{
         added: number;
         removed: number;
@@ -49,6 +45,11 @@ interface ExtensionModules {
     inferCommitType: (name: string) => string;
     autoCommitCurrentBranch: (wtPath: string, reason: string, name: string) => void;
 }
+interface WorktreeDiff {
+    added: string[];
+    modified: string[];
+    removed: string[];
+}
 interface WorktreeStatus {
     name: string;
     path: string;

package/dist/worktree-cli.js

@@ -27,6 +27,14 @@ const jiti = createJiti(fileURLToPath(import.meta.url), { interopDefault: true,
 const gsdExtensionPath = (...segments) => resolveBundledSourceResource(import.meta.url, 'extensions', 'gsd', ...segments);
 // Lazily-loaded extension modules (loaded once on first use via jiti)
 let _ext = null;
+function toErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function logDebugFailure(scope, error) {
+    if (process.env.GSD_DEBUG === '1') {
+        process.stderr.write(chalk.dim(`[gsd] ${scope} failed: ${toErrorMessage(error)}\n`));
+    }
+}
 async function loadExtensionModules() {
     if (_ext)
         return _ext;
@@ -70,13 +78,17 @@ function getWorktreeStatus(ext, basePath, name, wtPath) {
     try {
         uncommitted = existsSync(wtPath) && ext.nativeHasChanges(wtPath);
     }
-    catch { /* */ }
+    catch (error) {
+        logDebugFailure('native worktree dirty check', error);
+    }
     let commits = 0;
     try {
         const mainBranch = ext.nativeDetectMainBranch(basePath);
         commits = ext.nativeCommitCountBetween(basePath, mainBranch, ext.worktreeBranchName(name));
     }
-    catch { /* */ }
+    catch (error) {
+        logDebugFailure('native commit count', error);
+    }
     return {
         name,
         path: wtPath,
@@ -157,7 +169,9 @@ async function doMerge(ext, basePath, name) {
             ext.autoCommitCurrentBranch(wt.path, 'worktree-merge', name);
             process.stderr.write(chalk.dim('  Auto-committed dirty work before merge.\n'));
         }
-        catch { /* best-effort */ }
+        catch (error) {
+            process.stderr.write(chalk.yellow(`  Auto-commit before merge failed: ${toErrorMessage(error)}\n`));
+        }
     }
     const commitType = ext.inferCommitType(name);
     const commitMessage = `${commitType}: merge worktree ${name}\n\nGSD-Worktree: ${name}`;
@@ -193,8 +207,8 @@ async function handleClean(basePath) {
                 process.stderr.write(chalk.green(`  ✓ Removed ${chalk.bold(wt.name)} (clean)\n`));
                 cleaned++;
             }
-            catch {
-                process.stderr.write(chalk.yellow(`  ✗ Failed to remove ${wt.name}\n`));
+            catch (error) {
+                process.stderr.write(chalk.yellow(`  ✗ Failed to remove ${wt.name}: ${toErrorMessage(error)}\n`));
             }
         }
         else {
@@ -239,7 +253,8 @@ async function handleStatusBanner(basePath) {
             const diff = ext.diffWorktreeAll(basePath, wt.name);
             return diff.added.length + diff.modified.length + diff.removed.length > 0;
         }
-        catch {
+        catch (error) {
+            logDebugFailure(`status scan for ${wt.name}`, error);
             return false;
         }
     });
@@ -264,7 +279,8 @@ async function handleWorktreeFlag(worktreeFlag) {
                 const diff = ext.diffWorktreeAll(basePath, wt.name);
                 return diff.added.length + diff.modified.length + diff.removed.length > 0;
             }
-            catch {
+            catch (error) {
+                logDebugFailure(`worktree -w scan for ${wt.name}`, error);
                 return false;
             }
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gsd-pi",
-  "version": "2.75.0",
+  "version": "2.76.0-dev.b072ebb73",
   "description": "GSD — Get Shit Done coding agent",
   "license": "MIT",
   "repository": {
@@ -57,7 +57,7 @@
     "copy-themes": "node scripts/copy-themes.cjs",
     "copy-export-html": "node scripts/copy-export-html.cjs",
     "test:compile": "node scripts/compile-tests.mjs",
-    "test:unit": "npm run test:compile && node --import ./scripts/dist-test-resolve.mjs --experimental-test-isolation=process --test-reporter=./scripts/test-reporter-compact.mjs --test \"dist-test/src/tests/*.test.js\" \"dist-test/src/resources/extensions/gsd/tests/*.test.js\" \"dist-test/src/resources/extensions/gsd/tests/*.test.mjs\" \"dist-test/src/resources/extensions/shared/tests/*.test.js\" \"dist-test/src/resources/extensions/claude-code-cli/tests/*.test.js\" \"dist-test/src/resources/extensions/github-sync/tests/*.test.js\" \"dist-test/src/resources/extensions/universal-config/tests/*.test.js\" \"dist-test/src/resources/extensions/voice/tests/*.test.js\" \"dist-test/src/resources/extensions/mcp-client/tests/*.test.js\"",
+    "test:unit": "npm run test:compile && node --import ./scripts/dist-test-resolve.mjs --experimental-test-isolation=process --test-reporter=./scripts/test-reporter-compact.mjs --test \"dist-test/src/tests/*.test.js\" \"dist-test/src/resources/extensions/gsd/tests/*.test.js\" \"dist-test/src/resources/extensions/gsd/tests/*.test.mjs\" \"dist-test/src/resources/extensions/shared/tests/*.test.js\" \"dist-test/src/resources/extensions/claude-code-cli/tests/*.test.js\" \"dist-test/src/resources/extensions/github-sync/tests/*.test.js\" \"dist-test/src/resources/extensions/universal-config/tests/*.test.js\" \"dist-test/src/resources/extensions/voice/tests/*.test.js\" \"dist-test/src/resources/extensions/mcp-client/tests/*.test.js\" \"dist-test/src/resources/extensions/remote-questions/tests/*.test.js\"",
     "test:packages": "node --test packages/pi-coding-agent/dist/core/*.test.js packages/pi-coding-agent/dist/core/tools/spawn-shell-windows.test.js",
     "test:marketplace": "node scripts/with-env.mjs GSD_TEST_CLONE_MARKETPLACES=1 -- node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test src/resources/extensions/gsd/tests/claude-import-tui.test.ts src/resources/extensions/gsd/tests/plugin-importer-live.test.ts src/tests/marketplace-discovery.test.ts",
     "test:coverage": "c8 --reporter=text --reporter=lcov --exclude=\"src/resources/extensions/gsd/tests/**\" --exclude=\"src/tests/**\" --exclude=\"scripts/**\" --exclude=\"native/**\" --exclude=\"node_modules/**\" --check-coverage --statements=40 --lines=40 --branches=20 --functions=20 node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --experimental-test-isolation=process --test src/resources/extensions/gsd/tests/*.test.ts src/resources/extensions/gsd/tests/*.test.mjs src/tests/*.test.ts src/resources/extensions/shared/tests/*.test.ts",
@@ -97,7 +97,7 @@
     "test:live-regression": "node --experimental-strip-types tests/live-regression/run.ts"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.73.0",
+    "@anthropic-ai/sdk": "^0.90.0",
     "@anthropic-ai/vertex-sdk": "^0.14.4",
     "@aws-sdk/client-bedrock-runtime": "^3.983.0",
     "@clack/prompts": "^1.1.0",

package/packages/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gsd-build/daemon",
-  "version": "2.75.0",
+  "version": "2.76.0",
   "description": "GSD daemon — background process for project monitoring and Discord integration",
   "license": "MIT",
   "repository": {
@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.52.0",
-    "@gsd-build/rpc-client": "^2.75.0",
+    "@gsd-build/rpc-client": "^2.76.0",
     "discord.js": "^14.25.1",
     "yaml": "^2.8.0",
     "zod": "^3.24.0"

package/packages/mcp-server/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA4I3D,UAAU,uBAAuB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,UAAU,iBAAiB;IACzB,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,GACjF,OAAO,CAAC;IACX,MAAM,EAAE;QACN,WAAW,CACT,MAAM,EAAE,6BAA6B,GAAG,uBAAuB,EAC/D,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,4BAA4B,CAAC,CAAC;KAC1C,CAAC;IACF,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAMD,KAAK,4BAA4B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;AAEzE,UAAU,4BAA4B;IACpC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;CACxD;AAED,UAAU,6BAA6B;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAiCD,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,6BAA6B,CAiD9G;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,eAAe,EAAE,EAC5B,MAAM,EAAE,4BAA4B,GACnC,MAAM,CAkBR;AAMD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC;IAC7E,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC,CA8hBD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA4I3D,UAAU,uBAAuB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,UAAU,iBAAiB;IACzB,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,GACjF,OAAO,CAAC;IACX,MAAM,EAAE;QACN,WAAW,CACT,MAAM,EAAE,6BAA6B,GAAG,uBAAuB,EAC/D,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,4BAA4B,CAAC,CAAC;KAC1C,CAAC;IACF,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAMD,KAAK,4BAA4B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;AAEzE,UAAU,4BAA4B;IACpC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;CACxD;AAED,UAAU,6BAA6B;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAiCD,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,6BAA6B,CAiD9G;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,eAAe,EAAE,EAC5B,MAAM,EAAE,4BAA4B,GACnC,MAAM,CAkBR;AAMD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC;IAC7E,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC,CAgiBD"}

package/packages/mcp-server/dist/server.js

@@ -21,7 +21,7 @@ import { readKnowledge } from './readers/knowledge.js';
 import { buildGraph, writeGraph, writeSnapshot, graphStatus, graphQuery, graphDiff } from './readers/graph.js';
 import { resolveGsdRoot } from './readers/paths.js';
 import { runDoctorLite } from './readers/doctor-lite.js';
-import { registerWorkflowTools } from './workflow-tools.js';
+import { registerWorkflowTools, validateProjectDir } from './workflow-tools.js';
 import { applySecrets, checkExistingEnvKeys, detectDestination } from './env-writer.js';
 // ---------------------------------------------------------------------------
 // Constants
@@ -337,7 +337,8 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir, query } = args;
         try {
-            const state = await readProjectState(projectDir, query);
+            const validated = validateProjectDir(projectDir);
+            const state = await readProjectState(validated, query);
             return jsonContent(state);
         }
         catch (err) {
@@ -406,7 +407,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir, keys, destination, envFilePath, environment } = args;
         try {
-            const resolvedProjectDir = resolve(projectDir);
+            const resolvedProjectDir = validateProjectDir(projectDir);
             const resolvedEnvPath = resolve(resolvedProjectDir, envFilePath ?? '.env');
             // (1) Check which keys already exist
             const allKeyNames = keys.map((k) => k.key);
@@ -500,7 +501,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir } = args;
         try {
-            return jsonContent(readProgress(projectDir));
+            return jsonContent(readProgress(validateProjectDir(projectDir)));
         }
         catch (err) {
             return errorContent(err instanceof Error ? err.message : String(err));
@@ -515,7 +516,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir, milestoneId } = args;
         try {
-            return jsonContent(readRoadmap(projectDir, milestoneId));
+            return jsonContent(readRoadmap(validateProjectDir(projectDir), milestoneId));
         }
         catch (err) {
             return errorContent(err instanceof Error ? err.message : String(err));
@@ -530,7 +531,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir, limit } = args;
         try {
-            return jsonContent(readHistory(projectDir, limit));
+            return jsonContent(readHistory(validateProjectDir(projectDir), limit));
         }
         catch (err) {
             return errorContent(err instanceof Error ? err.message : String(err));
@@ -545,7 +546,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir, scope } = args;
         try {
-            return jsonContent(runDoctorLite(projectDir, scope));
+            return jsonContent(runDoctorLite(validateProjectDir(projectDir), scope));
         }
         catch (err) {
             return errorContent(err instanceof Error ? err.message : String(err));
@@ -560,7 +561,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir, filter } = args;
         try {
-            return jsonContent(readCaptures(projectDir, filter ?? 'all'));
+            return jsonContent(readCaptures(validateProjectDir(projectDir), filter ?? 'all'));
         }
         catch (err) {
             return errorContent(err instanceof Error ? err.message : String(err));
@@ -574,7 +575,7 @@ export async function createMcpServer(sessionManager) {
     }, async (args) => {
         const { projectDir } = args;
         try {
-            return jsonContent(readKnowledge(projectDir));
+            return jsonContent(readKnowledge(validateProjectDir(projectDir)));
         }
         catch (err) {
             return errorContent(err instanceof Error ? err.message : String(err));
@@ -608,8 +609,9 @@ export async function createMcpServer(sessionManager) {
         budget: z.number().optional().describe('Token budget for query mode (default: 4000)'),
         snapshot: z.boolean().optional().describe('Write snapshot before build (for future diff)'),
     }, async (args) => {
-        const { projectDir, mode, term, budget, snapshot } = args;
+        const { projectDir: rawProjectDir, mode, term, budget, snapshot } = args;
         try {
+            const projectDir = validateProjectDir(rawProjectDir);
             const gsdRoot = resolveGsdRoot(projectDir);
             switch (mode) {
                 case 'build': {